Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa
File:                     3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa (raw, json)
Hash identifier:          WuH2UDw6Oyseroe8TFY7wqxAk+8WAMg7FRihu4vAGJM=
Subject key identifier:   69:69:B4:63:6F:1E:7B:AE:B8:72:2F:27:99:87:FA:E0:10:0F:96:F6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       65C4779CA6C9757EBBCE5556CB23588400E0E6EF
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa
Signing time:             Thu 10 Aug 2023 08:00:02 +0000
ROA not before:           Thu 10 Aug 2023 07:55:02 +0000
ROA not after:            Thu 08 Aug 2024 08:00:02 +0000
asID:                     38505
IP address blocks:        103.233.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 09:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c4:77:9c:a6:c9:75:7e:bb:ce:55:56:cb:23:58:84:00:e0:e6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Aug 10 07:55:02 2023 GMT
            Not After : Aug  8 08:00:02 2024 GMT
        Subject: CN=6969B4636F1E7BAEB8722F279987FAE0100F96F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6f:b1:a2:85:d0:67:57:21:76:20:82:c1:c8:
                    4f:64:36:f2:2c:30:16:20:5b:4f:5c:6c:c2:79:5b:
                    ca:a1:37:32:06:74:ee:c6:83:ff:bc:fe:ce:8f:cb:
                    45:2c:15:13:8b:8e:7f:38:1e:03:9c:c6:64:ae:ad:
                    f0:82:c2:4c:34:7d:cc:89:e9:99:c9:00:ae:b2:cb:
                    e3:ab:39:ba:9a:2d:7a:40:c4:c9:0b:75:e7:27:e4:
                    b7:6a:9b:e7:e0:e4:5c:3d:13:76:a3:0c:3b:fc:cd:
                    03:29:87:b8:3d:fd:8f:43:db:8c:d4:37:1e:25:7d:
                    ad:aa:06:2a:2a:a8:8d:3f:84:b9:7d:e2:3d:7a:99:
                    dc:0a:bd:aa:94:e4:28:44:10:73:eb:e1:3c:ec:50:
                    32:9a:e1:a1:d5:9c:df:06:57:03:e6:69:7d:5e:2a:
                    5f:9b:6e:84:b9:16:bb:6c:eb:46:68:2e:f3:51:13:
                    db:60:03:20:75:e8:f0:4a:82:96:3e:e3:3f:2b:b5:
                    58:a4:c8:46:73:61:88:b8:bb:fc:9b:41:c6:1a:d4:
                    17:20:cc:65:31:cc:42:e0:45:5b:dc:a2:88:62:75:
                    95:41:22:d8:f8:a7:38:58:33:70:54:0e:6c:44:54:
                    af:e2:99:bd:26:d4:62:62:2d:a6:5a:e0:0f:07:3a:
                    84:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:69:B4:63:6F:1E:7B:AE:B8:72:2F:27:99:87:FA:E0:10:0F:96:F6
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:24:0c:72:27:80:c4:24:85:df:74:bf:b3:2b:7d:65:ea:6b:
         e1:87:08:c9:bf:a2:e2:fb:d9:cc:e2:3c:c4:14:4f:0d:fe:40:
         7d:cf:08:3c:2d:e0:33:bc:c0:75:81:24:d2:51:d1:27:ed:f5:
         a0:66:7c:82:6e:ee:69:0f:cb:f3:10:68:fb:0c:3a:95:1b:25:
         a5:84:79:47:f9:32:36:1e:93:2f:dc:eb:f5:92:9b:4e:6c:9a:
         bc:b5:f4:d6:e0:08:66:1c:e6:53:fe:5c:a3:c2:ab:e3:1e:46:
         05:50:d5:9d:4b:4c:bf:f1:cd:9f:1a:75:ee:6d:55:30:79:43:
         a2:c6:c9:ca:67:fb:0e:d1:d8:5b:19:c6:d8:59:85:2b:55:c8:
         2f:84:03:11:28:eb:c5:75:48:01:f6:11:ee:b6:d6:19:15:b8:
         1a:b6:46:45:cd:51:f9:a1:5c:22:73:75:6b:c9:bb:a8:b5:b9:
         80:72:76:1e:0f:3f:86:1e:12:a1:f9:14:9b:de:ef:f5:ee:2c:
         e5:a6:40:7a:7a:b7:3e:67:76:f0:1b:1b:7f:0d:a7:8f:8b:b1:
         81:97:aa:d8:25:3b:9f:60:76:e0:f8:9f:e4:8c:8a:28:e3:5e:
         76:74:c6:c3:b2:7f:73:07:1f:76:69:4a:2a:57:a2:50:26:46:
         50:a7:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org