Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3233203d3e203338353035.roa
File:                     3130332e3233332e3134322e302f32332d3233203d3e203338353035.roa (raw, json)
Hash identifier:          wLB/5i7i5az3qrBjBeMwwnjL3l4/1qCZYsasjxlpR2g=
Subject key identifier:   C9:C7:A6:6E:32:20:0D:69:08:F5:5B:4F:D6:35:09:89:9E:0E:CD:94
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       682C3CDF63BBDC979A9CDDC24967F389C483733E
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3233203d3e203338353035.roa
Signing time:             Mon 07 Aug 2023 16:53:47 +0000
ROA not before:           Mon 07 Aug 2023 16:48:47 +0000
ROA not after:            Mon 05 Aug 2024 16:53:47 +0000
asID:                     38505
IP address blocks:        103.233.142.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 09:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2c:3c:df:63:bb:dc:97:9a:9c:dd:c2:49:67:f3:89:c4:83:73:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Aug  7 16:48:47 2023 GMT
            Not After : Aug  5 16:53:47 2024 GMT
        Subject: CN=C9C7A66E32200D6908F55B4FD63509899E0ECD94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:dc:73:ad:fb:00:ad:2f:d1:28:9a:42:1b:
                    87:f1:46:9d:ca:9c:27:46:6d:45:f7:9c:26:e5:f2:
                    00:49:ac:10:e8:da:6e:3a:4e:79:65:b2:d8:f8:8c:
                    ec:58:1a:4f:b4:12:4d:2b:1f:01:34:2f:87:94:fc:
                    f2:26:d6:32:b1:14:2d:36:58:9e:2f:ff:06:ca:f0:
                    73:ad:06:0d:53:a5:dd:65:90:b6:d9:ad:7d:9d:6a:
                    ae:dc:9e:1a:8c:55:13:de:bb:52:81:13:a9:02:49:
                    00:4b:95:d0:ec:3e:f7:d6:6c:b5:8d:8b:82:ac:12:
                    61:c8:9a:a5:32:0d:a2:4e:e2:df:48:73:58:e5:16:
                    67:26:e3:2a:a4:13:8f:de:f2:35:19:54:2b:06:d8:
                    1e:92:1f:61:3a:14:7e:c1:e8:3e:6c:77:fc:e7:c7:
                    f7:e5:87:04:7a:de:38:16:23:42:4b:e5:52:7b:ea:
                    78:1a:bb:72:df:06:e8:cd:38:82:42:72:bd:ba:e3:
                    ae:a5:d0:90:9f:d7:d3:b2:75:da:13:2b:1c:97:72:
                    8b:ba:0e:67:3b:9b:ee:31:2d:fc:85:b3:a5:43:90:
                    70:cf:6f:2d:e6:52:17:31:20:81:bd:b0:e7:9b:95:
                    82:e4:92:ae:db:5a:9d:54:92:bd:93:7b:2f:06:82:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C7:A6:6E:32:20:0D:69:08:F5:5B:4F:D6:35:09:89:9E:0E:CD:94
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32332d3233203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:f4:03:88:1b:1f:89:58:a4:31:dd:7d:9f:b6:97:5a:43:
         be:f0:df:30:42:f7:c2:2e:c2:5b:b3:2a:f1:c4:5f:44:e9:1e:
         e6:1c:e0:f1:ce:22:ca:ec:e5:a1:4e:52:bc:e6:89:98:0a:c9:
         88:15:51:fc:f4:8b:11:83:9a:92:7c:e3:84:8d:c5:9e:66:9a:
         ae:d3:1c:09:7b:63:aa:b1:ca:90:05:77:7e:e2:26:5b:39:d2:
         95:74:f1:b7:20:e6:15:00:90:d2:13:75:e0:f3:4f:d1:a2:49:
         b8:3f:a9:c6:0b:a7:0e:d1:07:de:02:60:e5:81:a1:81:e2:6c:
         7c:70:78:02:2c:5b:ce:8f:51:2b:8f:ea:af:46:47:e2:99:2c:
         c8:47:2e:38:14:50:5d:7e:30:a5:f2:ce:d5:d5:5f:24:02:93:
         f0:f8:70:2e:b1:2e:7f:67:b7:94:f3:38:ae:d0:24:08:de:5d:
         e5:9f:84:ba:32:9f:98:55:b3:fb:ba:b1:98:2d:b9:86:2d:11:
         e4:16:1f:c0:ed:a8:42:1b:b0:d1:e1:18:fc:0d:57:f1:5c:be:
         4c:85:05:28:20:ea:30:12:19:e6:c0:a9:b8:7d:a4:f7:12:66:
         63:18:29:6b:de:05:0b:e4:5c:70:f1:56:99:35:9f:df:f8:9e:
         02:60:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org