Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138392e302f32342d3234203d3e20313531303030.roa
File:                     3130332e3135332e3138392e302f32342d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          vEK5Z5kXOPMBNdPPbwLatHxfmoHVQCt3CTyQhtC5+Tc=
Subject key identifier:   DB:C7:53:39:3F:28:BA:6E:7D:12:9D:DA:81:18:18:9D:F8:CF:90:FF
Certificate issuer:       /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial:       060E4914FDF44C9EA9EB20B42F6E0EC4F6BD2A73
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138392e302f32342d3234203d3e20313531303030.roa
Signing time:             Wed 03 Jan 2024 11:03:28 +0000
ROA not before:           Wed 03 Jan 2024 10:58:28 +0000
ROA not after:            Wed 01 Jan 2025 11:03:28 +0000
asID:                     151000
IP address blocks:        103.153.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0e:49:14:fd:f4:4c:9e:a9:eb:20:b4:2f:6e:0e:c4:f6:bd:2a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
        Validity
            Not Before: Jan  3 10:58:28 2024 GMT
            Not After : Jan  1 11:03:28 2025 GMT
        Subject: CN=DBC753393F28BA6E7D129DDA8118189DF8CF90FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:3d:14:93:50:8f:bd:8f:df:28:55:8e:48:
                    de:b2:18:72:2d:3d:64:e5:08:10:32:fd:74:37:1c:
                    8c:fc:d8:13:3d:e4:a8:12:5b:b2:c2:8d:51:6c:52:
                    0e:8e:71:39:02:e5:d3:44:1c:46:ce:ba:a1:69:b0:
                    7a:96:06:f6:8f:d7:8a:13:9b:ea:8c:56:22:75:9b:
                    18:86:4a:68:bf:77:d2:fa:02:9c:fb:4e:25:c5:8f:
                    27:d2:78:09:49:09:f5:bc:48:4d:d3:dd:e4:e7:d8:
                    df:d3:c0:ad:ce:af:cb:78:1f:67:af:a2:a3:49:cd:
                    cb:61:43:e7:09:60:13:41:fc:fb:f7:9f:33:78:10:
                    47:b4:0a:50:ce:1a:7b:89:83:25:00:a7:55:41:da:
                    0f:f0:6e:7e:85:9b:fb:82:b0:cc:39:fd:be:44:d5:
                    4d:71:49:bf:ee:9b:31:3d:c8:3d:45:c8:2f:60:9f:
                    b9:d8:9c:47:4b:8a:00:f5:9b:53:3a:1d:9a:95:94:
                    e5:47:71:3a:75:32:42:04:25:91:b5:fd:dc:a7:a4:
                    68:22:a1:47:ed:52:4b:f1:d1:57:dd:b9:20:f9:a2:
                    c9:82:76:37:f7:f3:4b:a3:a7:f6:a7:02:d1:5b:d2:
                    a8:4b:ca:d4:41:c0:e6:ca:0e:e5:6a:4d:c2:a4:86:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C7:53:39:3F:28:BA:6E:7D:12:9D:DA:81:18:18:9D:F8:CF:90:FF
            X509v3 Authority Key Identifier:
                keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138392e302f32342d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:b5:3b:4e:6d:e6:15:40:d2:22:06:8e:6a:44:24:84:e2:
         c8:41:8f:47:4f:31:4d:b4:ad:7c:fe:e1:c9:be:69:0e:be:f4:
         21:9b:3b:f6:02:58:51:dc:a8:57:bd:b3:e4:19:30:85:5b:a7:
         a6:3e:c4:4a:bf:6c:c6:6d:b9:17:ed:67:35:73:c4:69:62:ed:
         64:f9:5f:da:74:75:80:56:43:9d:22:10:83:73:5d:68:78:24:
         a2:9f:26:aa:fa:d9:72:bc:e8:1a:70:60:e2:14:d2:7a:57:51:
         7b:b9:0d:97:a3:4a:e2:94:46:2d:83:60:5e:a6:4a:8c:b7:fa:
         73:c1:55:1e:50:f8:2d:c2:33:88:17:17:42:5d:0e:44:a8:a6:
         8d:a4:c8:4a:c8:c1:22:dc:01:3a:31:04:76:c6:5d:ac:2a:3e:
         a4:b6:56:b3:ac:2a:8c:7c:23:06:87:7f:d0:6a:d2:19:cf:fa:
         7b:84:09:ef:16:e2:2f:c6:30:ed:87:dd:c5:84:95:a4:3e:7f:
         9f:89:dc:bb:62:1a:9f:f3:9c:2f:0a:91:83:1e:06:cc:2e:df:
         f3:0a:ae:b9:d7:47:92:76:81:2d:36:ba:7b:14:54:3d:e4:4a:
         47:39:49:9a:f9:a3:f6:e2:5e:28:8f:eb:7a:29:7b:85:55:92:
         1e:fa:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org