Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/3130332e35352e3232302e302f32322d3234203d3e20313333383239.roa
File:                     3130332e35352e3232302e302f32322d3234203d3e20313333383239.roa (raw, json)
Hash identifier:          sdP33AH0XO6O0PYYnhkRZquqDu861FgWGifrwZ7Eab0=
Subject key identifier:   24:B5:AD:8B:3A:D0:EB:8C:B8:5B:29:0D:40:11:96:D7:68:78:CE:44
Certificate issuer:       /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A
Certificate serial:       608B1A5AFB4F983BD5114184F03FEEA24A9D7C39
Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/3130332e35352e3232302e302f32322d3234203d3e20313333383239.roa
Signing time:             Sun 18 Jun 2023 09:00:00 +0000
ROA not before:           Sun 18 Jun 2023 08:55:00 +0000
ROA not after:            Sun 16 Jun 2024 09:00:00 +0000
asID:                     133829
IP address blocks:        103.55.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 14:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8b:1a:5a:fb:4f:98:3b:d5:11:41:84:f0:3f:ee:a2:4a:9d:7c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A
        Validity
            Not Before: Jun 18 08:55:00 2023 GMT
            Not After : Jun 16 09:00:00 2024 GMT
        Subject: CN=24B5AD8B3AD0EB8CB85B290D401196D76878CE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:46:8c:25:94:33:2a:90:ac:89:da:df:bf:
                    ac:c0:bd:de:01:99:f6:22:cc:aa:02:df:c7:ad:57:
                    a9:c2:ae:f4:a4:14:e8:0d:25:19:f7:f6:c7:fc:e5:
                    b0:bd:dc:e0:15:9f:07:fe:f0:2b:fd:08:b7:ab:69:
                    47:3b:81:34:e1:18:43:0c:a7:b1:fd:91:51:4b:7b:
                    8b:a5:37:c7:2e:28:0e:c4:5f:62:cd:f8:f6:5b:75:
                    5b:d5:c8:33:8d:a7:cf:49:18:ed:07:b1:32:4a:13:
                    8d:9a:46:06:73:86:47:b8:3e:10:05:e6:db:7c:f5:
                    fc:42:28:84:b0:65:91:23:71:f3:41:90:6b:4d:bf:
                    c8:8f:4d:24:d7:2c:24:d3:8d:e9:9c:73:c0:02:95:
                    e0:af:4d:d0:2c:b1:46:7b:7e:9a:e5:f2:11:ac:49:
                    3b:40:6d:66:c8:3c:b3:43:bc:4c:51:0d:e0:6e:ea:
                    4c:66:cb:25:27:50:4b:e2:58:3b:1e:e0:bb:31:ba:
                    5e:12:24:0c:d4:b6:01:18:d1:24:b2:5d:13:50:28:
                    b2:3c:01:f0:3e:ed:42:30:98:18:70:66:58:6d:3b:
                    c0:3c:8f:c0:5d:8e:fc:b5:1c:26:bf:cf:56:49:fe:
                    7e:70:23:53:55:99:44:19:98:36:a0:8b:81:9c:99:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:AD:8B:3A:D0:EB:8C:B8:5B:29:0D:40:11:96:D7:68:78:CE:44
            X509v3 Authority Key Identifier:
                keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/3130332e35352e3232302e302f32322d3234203d3e20313333383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:67:c5:f0:14:92:cd:91:46:6a:bc:9a:0c:45:06:d9:fd:c3:
         47:6b:6b:6e:fa:73:24:13:77:59:f5:ff:4a:8f:31:b8:58:60:
         2b:ad:0b:1e:e3:2c:94:fa:d5:d9:57:84:22:78:81:32:5b:b2:
         9c:d4:e5:e1:ad:f6:08:a3:57:20:bc:a8:e9:da:e3:8c:d6:12:
         46:cb:e2:ab:7c:ac:d2:61:30:ba:4a:8b:b2:f5:ff:b3:25:98:
         e2:ad:c7:7b:50:66:08:c0:f8:48:3b:ad:7a:10:f4:6e:0b:e3:
         f3:b5:f3:62:68:6d:9d:db:45:09:a0:0c:06:ab:f0:b5:0a:85:
         23:64:0e:80:36:fc:f9:56:f9:3d:13:de:b0:3d:56:b5:8b:75:
         fb:10:6a:b4:a2:bd:63:a3:f4:6c:45:11:93:68:ce:42:26:a0:
         35:2a:e5:bc:2a:66:b4:fd:14:f1:46:7b:33:fe:66:a8:df:e9:
         98:23:4a:f8:d8:2f:9a:44:c2:42:cf:8b:eb:f7:2f:3f:cd:24:
         7f:be:c0:fb:bd:98:9b:dd:ec:63:5a:84:47:b7:d8:46:48:a9:
         fb:8b:b0:cf:73:21:23:27:61:99:8a:87:16:a0:e4:34:b6:93:
         b8:55:9e:93:83:0f:fa:f3:2b:e3:c4:37:e2:e3:c3:58:d3:72:
         d3:d3:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org