Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32342d3234203d3e20313531303030.roa
File:                     3130332e3135332e3138382e302f32342d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          btBq3Q1SQXU8vB4iukcbu+MoLz+vnUFWz9nSEwyOuuo=
Subject key identifier:   C7:B0:9F:2F:C9:56:A0:6B:3E:1E:DC:ED:C8:47:21:42:2C:4A:99:23
Certificate issuer:       /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial:       2C4D9B955294D4D2ED1BBAE85D941AF7A3810FF0
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32342d3234203d3e20313531303030.roa
Signing time:             Wed 03 Jan 2024 11:02:44 +0000
ROA not before:           Wed 03 Jan 2024 10:57:44 +0000
ROA not after:            Wed 01 Jan 2025 11:02:44 +0000
asID:                     151000
IP address blocks:        103.153.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:9b:95:52:94:d4:d2:ed:1b:ba:e8:5d:94:1a:f7:a3:81:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
        Validity
            Not Before: Jan  3 10:57:44 2024 GMT
            Not After : Jan  1 11:02:44 2025 GMT
        Subject: CN=C7B09F2FC956A06B3E1EDCEDC84721422C4A9923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:34:2a:08:66:e5:95:71:21:37:fc:db:ed:
                    2e:a7:06:9d:d9:ce:43:e7:53:bf:2d:f1:6d:21:11:
                    39:7f:bb:29:3a:4d:91:3b:67:af:4b:0e:fe:81:bb:
                    f3:94:65:d3:cd:87:8f:a7:1f:a9:b7:63:86:5c:83:
                    70:ea:17:55:ca:f5:d5:e5:6b:3f:9e:4f:a3:aa:7f:
                    dd:9e:1a:5c:cb:bd:33:68:72:91:3f:ba:0c:58:b4:
                    ae:bb:b4:ff:8f:01:50:88:58:9c:0e:4b:e6:25:84:
                    c8:90:6b:16:69:3f:85:82:12:53:41:36:d8:26:7c:
                    83:76:64:8b:68:36:2c:a1:80:c2:12:64:b8:a4:0e:
                    e0:5c:1d:6c:45:2c:f4:fe:9e:3c:60:13:6b:e1:57:
                    28:18:c2:f4:42:a7:37:85:79:28:61:1d:be:6b:8d:
                    e7:96:9b:8e:ec:82:89:14:67:60:4c:52:e6:f6:39:
                    9a:23:0b:70:00:66:d1:52:1f:32:05:76:b1:02:ba:
                    0f:6a:48:8e:08:b8:10:44:28:aa:59:07:3e:84:90:
                    b8:b3:40:d0:0c:da:05:8d:29:39:6c:29:28:5c:c4:
                    7f:c2:79:4c:29:5e:8a:51:de:9a:77:70:01:28:7e:
                    84:fb:9c:8b:5e:0e:74:94:ad:b9:18:8a:e2:8f:0d:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:9F:2F:C9:56:A0:6B:3E:1E:DC:ED:C8:47:21:42:2C:4A:99:23
            X509v3 Authority Key Identifier:
                keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32342d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:c8:44:7b:cf:d8:af:07:26:3a:bd:d0:b3:8a:88:15:34:
         c5:f7:a0:5b:b1:60:fe:d3:10:46:aa:28:b1:c4:9f:68:2c:2f:
         96:c1:93:73:3c:cb:91:fd:59:f2:1e:56:d2:a1:97:8c:34:f5:
         aa:e3:19:58:ac:b6:4b:8b:4a:b8:d5:17:77:f1:5b:7b:45:f8:
         65:6e:e2:05:dd:b0:cb:4d:a5:d3:0b:fd:61:e8:bd:27:a3:0d:
         cd:5d:6f:6c:ff:00:da:6a:db:bb:a7:39:df:34:3d:11:a2:03:
         6b:24:65:99:cb:b0:f0:7d:e3:b6:32:32:b1:ea:db:6a:2e:7e:
         91:4e:e1:aa:9f:07:25:1f:82:c0:7b:fa:1b:b6:fb:36:f9:67:
         21:69:ff:89:97:d1:f1:03:78:c0:6f:4f:b3:fc:2c:95:11:79:
         63:30:f6:4a:2c:be:0b:df:ea:db:f5:ec:43:74:59:a9:6a:97:
         1d:c6:13:85:67:6e:ff:ef:12:00:9f:78:62:ec:10:1e:0b:13:
         8d:80:6c:8e:e9:f1:9c:62:76:63:20:33:e4:a2:7e:17:86:ac:
         de:48:46:94:d8:6d:e5:32:a6:34:44:cd:5d:b0:f4:94:10:f1:
         ce:49:2f:9b:87:6b:54:13:45:38:27:c0:c6:f5:c5:26:6f:55:
         d6:6d:a4:e7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIULE2blVKU1NLtG7roXZQa96OBD/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1
RjU3MDRDNTAeFw0yNDAxMDMxMDU3NDRaFw0yNTAxMDExMTAyNDRaMDMxMTAvBgNV
BAMTKEM3QjA5RjJGQzk1NkEwNkIzRTFFRENFREM4NDcyMTQyMkM0QTk5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfIjQqCGbllXEhN/zb7S6nBp3Z
zkPnU78t8W0hETl/uyk6TZE7Z69LDv6Bu/OUZdPNh4+nH6m3Y4Zcg3DqF1XK9dXl
az+eT6Oqf92eGlzLvTNocpE/ugxYtK67tP+PAVCIWJwOS+YlhMiQaxZpP4WCElNB
NtgmfIN2ZItoNiyhgMISZLikDuBcHWxFLPT+njxgE2vhVygYwvRCpzeFeShhHb5r
jeeWm47sgokUZ2BMUub2OZojC3AAZtFSHzIFdrECug9qSI4IuBBEKKpZBz6EkLiz
QNAM2gWNKTlsKShcxH/CeUwpXopR3pp3cAEofoT7nIteDnSUrbkYiuKPDRWjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUx7CfL8lWoGs+HtztyEchQixKmSMwHwYDVR0j
BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0
MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3
MDRDNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwZjYyMTc2LWUxNjQtNDkyYy04
YTcyLTk5YzFlMTYxYjJkZi8wLzMxMzAzMzJlMzEzNTMzMmUzMTM4MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmbwwDQYJ
KoZIhvcNAQELBQADggEBAG7zyER7z9ivByY6vdCziogVNMX3oFuxYP7TEEaqKLHE
n2gsL5bBk3M8y5H9WfIeVtKhl4w09arjGVistkuLSrjVF3fxW3tF+GVu4gXdsMtN
pdML/WHovSejDc1db2z/ANpq27unOd80PRGiA2skZZnLsPB947YyMrHq22oufpFO
4aqfByUfgsB7+hu2+zb5ZyFp/4mX0fEDeMBvT7P8LJUReWMw9kosvgvf6tv17EN0
Walqlx3GE4Vnbv/vEgCfeGLsEB4LE42AbI7p8ZxidmMgM+SifheGrN5IRpTYbeUy
pjREzV2w9JQQ8c5JL5uHa1QTRTgnwMb1xSZvVdZtpOc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org