Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32332d3234203d3e20313339333635.roa
File:                     3130332e3134312e3234342e302f32332d3234203d3e20313339333635.roa (raw, json)
Hash identifier:          zMa21AMErWT8EbmEJqakeNaqbBmg0Q1nmyHxRJ+zJCA=
Subject key identifier:   7C:40:E5:92:0D:EE:6D:9A:22:69:9D:B4:AA:C6:B1:FE:6A:7F:A3:4E
Certificate issuer:       /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial:       156A334D887BB42C8904442E9FF688CE8CFDA368
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32332d3234203d3e20313339333635.roa
Signing time:             Sun 18 Feb 2024 15:43:10 +0000
ROA not before:           Sun 18 Feb 2024 15:38:10 +0000
ROA not after:            Sun 16 Feb 2025 15:43:10 +0000
asID:                     139365
IP address blocks:        103.141.244.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 22:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6a:33:4d:88:7b:b4:2c:89:04:44:2e:9f:f6:88:ce:8c:fd:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
        Validity
            Not Before: Feb 18 15:38:10 2024 GMT
            Not After : Feb 16 15:43:10 2025 GMT
        Subject: CN=7C40E5920DEE6D9A22699DB4AAC6B1FE6A7FA34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:14:59:3c:3d:f9:ba:87:33:dd:4d:7c:d0:
                    4f:cb:47:6d:40:99:a7:0d:26:b0:e9:c9:3d:ec:1e:
                    c9:bb:a1:97:81:1a:5b:e2:94:c9:97:03:24:4d:40:
                    3a:b1:0d:7a:f9:d6:e3:e6:79:0e:24:89:b9:9e:a5:
                    27:51:77:3a:2c:3c:94:59:bd:cc:52:9e:44:7b:89:
                    9d:4e:40:ae:fc:86:4d:1d:f3:67:b3:d8:0c:5d:0d:
                    aa:c7:e2:f4:b3:a5:09:c7:f4:e9:be:89:e4:f7:c7:
                    ee:8f:a8:64:63:67:bd:63:c4:43:3c:f2:05:18:af:
                    a0:15:9d:89:74:a9:de:f1:e0:b6:aa:c2:3f:7f:7e:
                    a6:28:02:c6:68:34:af:22:d0:56:28:e3:6b:12:37:
                    ed:1a:e8:a3:3d:16:67:ff:e5:f1:f1:c2:63:1f:75:
                    7c:6b:75:b0:a1:08:cf:13:eb:c5:a1:eb:56:2f:18:
                    10:07:61:5e:e8:8e:11:23:ba:75:fd:cd:4e:93:eb:
                    20:6b:99:50:d4:d9:61:60:78:3f:9f:74:98:07:44:
                    3e:17:72:9e:83:e3:05:34:f9:b0:f7:52:7e:fc:20:
                    9e:8e:2a:7c:c4:29:bd:10:24:b6:77:b5:4b:61:45:
                    70:56:ec:f5:88:cc:26:81:73:e2:2b:50:e7:93:cf:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:E5:92:0D:EE:6D:9A:22:69:9D:B4:AA:C6:B1:FE:6A:7F:A3:4E
            X509v3 Authority Key Identifier:
                keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32332d3234203d3e20313339333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:b0:48:d8:18:61:30:14:fb:8f:c8:17:8e:63:42:5d:5c:
         e5:48:cd:12:4b:8a:31:47:54:ac:21:88:48:23:e8:81:fe:73:
         78:b8:f2:48:5a:08:68:24:66:fb:ba:64:0a:13:13:e3:b5:13:
         7e:3d:01:0c:0d:9e:66:1c:26:44:b3:9d:33:39:8a:37:b4:fa:
         38:50:17:7a:14:58:8d:c6:7f:9c:e0:44:a3:e4:a6:ba:fd:5c:
         c4:5b:99:8e:9a:4c:7f:2b:ce:ab:4b:e7:eb:2d:a1:1a:c8:39:
         23:33:c8:a8:42:b4:55:69:11:fe:71:d5:51:47:dc:ff:07:f1:
         9b:23:e4:52:8f:d7:bd:56:f4:e4:1d:0a:05:c0:9d:77:08:a6:
         3e:03:d4:cc:d1:ef:8e:cb:38:6a:81:68:8c:2c:11:e0:2a:28:
         cc:a9:c4:3f:48:76:73:49:2e:4a:0d:65:f5:16:86:52:8e:1e:
         e4:c9:26:0e:d3:b6:94:70:00:09:ef:b5:3a:d1:2e:5d:e3:79:
         55:18:04:b2:db:6c:71:b0:0b:08:ae:6f:95:94:f9:10:c6:fc:
         53:a6:87:cd:a9:3a:80:50:2d:9d:3a:db:77:10:6b:90:78:e5:
         2c:4c:c3:fa:c9:c2:11:c5:6e:50:e2:34:1c:84:c2:af:87:e6:
         ba:56:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org