Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa
File:                     3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Yf++NG/hMfht+aBvRxlJ5wcATM8tLaifNyqGxOBYWD4=
Subject key identifier:   65:44:6B:B2:73:72:85:7D:E7:B1:95:CD:31:9D:58:51:CE:33:2F:D0
Certificate issuer:       /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Certificate serial:       60728C86C6F4BF5B50C7C8C3630E7755441DCD8D
Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 08:00:01 +0000
ROA not before:           Thu 08 Jun 2023 07:55:01 +0000
ROA not after:            Thu 06 Jun 2024 08:00:01 +0000
asID:                     17995
IP address blocks:        103.170.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 17:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:72:8c:86:c6:f4:bf:5b:50:c7:c8:c3:63:0e:77:55:44:1d:cd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
        Validity
            Not Before: Jun  8 07:55:01 2023 GMT
            Not After : Jun  6 08:00:01 2024 GMT
        Subject: CN=65446BB27372857DE7B195CD319D5851CE332FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8e:5e:8e:18:a3:75:d5:af:ad:f0:da:a3:f7:
                    a6:2c:97:5d:96:af:cf:89:44:75:37:e3:72:48:7c:
                    3f:3b:f0:83:fb:49:2a:ff:03:39:0d:7b:76:ff:13:
                    b8:20:18:40:6d:53:a9:1f:f3:ae:5c:f0:fc:55:e5:
                    a1:91:64:33:c3:9a:9d:99:c9:55:d7:70:e2:37:3c:
                    43:9b:71:97:36:2f:fc:3d:e3:cb:12:17:6f:3d:db:
                    25:a6:35:64:d5:05:24:55:06:b6:3c:4b:f0:b9:66:
                    0a:9e:24:28:e6:2c:d3:21:5c:47:26:6b:21:42:7d:
                    be:10:8c:90:a1:ca:ff:6b:ef:04:45:1e:da:87:84:
                    2b:71:0e:fd:86:37:df:d3:32:12:e0:06:2a:e5:bd:
                    54:a6:ac:00:b7:1b:51:38:1d:5c:c8:c4:ed:9a:5e:
                    50:0a:93:7e:44:a5:33:4a:58:16:d5:17:9e:b8:9a:
                    ff:cc:14:c8:6a:c7:5d:27:97:73:a7:e8:58:16:43:
                    d7:9e:a9:1c:10:27:db:78:13:5f:d1:f5:33:6c:b0:
                    8d:94:a2:00:4f:cb:0f:c9:b2:d0:1e:86:1e:d7:03:
                    1e:6b:0a:b1:a3:cd:ff:e5:a2:d7:97:9f:71:49:58:
                    ab:fb:14:63:6a:62:00:b5:0d:44:40:73:f4:03:62:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:6B:B2:73:72:85:7D:E7:B1:95:CD:31:9D:58:51:CE:33:2F:D0
            X509v3 Authority Key Identifier:
                keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:05:19:a4:64:6c:0a:aa:4c:61:e4:bd:cf:7a:f3:f6:88:7f:
         59:68:25:d9:86:78:8e:d5:5f:6d:5e:3b:d7:c0:9c:ea:bc:ac:
         2f:b1:a8:1c:03:f6:3e:91:37:33:2e:95:a6:eb:67:d6:3c:6e:
         cf:19:a6:b4:41:bc:20:07:49:e2:a0:d6:35:cf:e1:d0:72:00:
         9b:c3:de:c2:3c:7d:e2:c0:9c:30:1b:00:69:a1:b8:49:bc:86:
         d7:db:75:1a:90:5c:f9:60:f3:15:1d:3b:5c:db:4f:50:a9:75:
         7c:c6:5d:04:0f:88:5a:32:8e:22:b9:6e:7d:0f:19:4e:6b:51:
         fe:af:f8:0f:09:40:35:36:6a:41:ef:5e:e8:ce:c9:0b:e5:36:
         d7:ac:b6:58:e9:2d:2d:fe:a6:4a:55:99:2a:27:6c:7b:cf:dd:
         91:b5:63:b8:7d:5f:28:83:86:23:cb:89:d7:c4:69:a7:06:0d:
         2c:67:71:6a:60:17:77:53:c0:0e:a8:2e:cd:45:cc:2c:ac:19:
         21:eb:c1:d9:36:76:d0:2d:05:c6:e3:ca:9b:41:be:f6:88:79:
         46:a8:d9:29:0d:71:35:b9:d5:dd:20:28:05:91:4b:17:d3:6f:
         7b:c1:73:4b:73:e5:f3:12:5d:a9:0a:49:cc:f1:fa:de:68:3c:
         e3:2d:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org