Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130352e302f32342d3234203d3e203338353035.roa
File:                     3135302e3130372e3130352e302f32342d3234203d3e203338353035.roa (raw, json)
Hash identifier:          j/+L1vFubL9/aiLHVyxAj2YikmEyDtXUzk1qwIZNkf0=
Subject key identifier:   08:45:1D:64:78:C9:3E:11:5B:EC:D8:EE:95:32:29:6F:31:CB:BF:4B
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       3B6E3AB5ECE0FB9C7295556DFE664946765F89E4
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130352e302f32342d3234203d3e203338353035.roa
Signing time:             Thu 10 Aug 2023 08:00:00 +0000
ROA not before:           Thu 10 Aug 2023 07:55:00 +0000
ROA not after:            Thu 08 Aug 2024 08:00:00 +0000
asID:                     38505
IP address blocks:        150.107.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 09:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6e:3a:b5:ec:e0:fb:9c:72:95:55:6d:fe:66:49:46:76:5f:89:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Aug 10 07:55:00 2023 GMT
            Not After : Aug  8 08:00:00 2024 GMT
        Subject: CN=08451D6478C93E115BECD8EE9532296F31CBBF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:72:dc:a3:1b:9a:4d:75:6a:7c:0a:a4:8c:
                    62:15:37:eb:56:5b:b8:2e:3a:c5:a3:b9:b6:b1:83:
                    7c:a7:e3:09:72:37:79:9e:9f:72:53:f3:ad:5b:07:
                    17:f7:a4:d1:e2:91:37:6a:d9:7a:84:6f:31:f9:5d:
                    41:9a:41:31:0d:24:2c:1b:f1:18:17:f4:e8:28:7e:
                    d7:e3:da:c7:f4:c6:d5:18:54:1a:55:4a:b2:fd:4b:
                    4b:68:0d:6a:42:09:6e:4b:50:8c:ab:51:28:e0:01:
                    4a:f5:ea:9a:d3:5b:e8:e3:a7:3e:e8:db:fa:65:c4:
                    54:12:c5:ce:fb:87:f0:a2:5c:c2:9e:43:99:66:d0:
                    82:b5:cd:6d:29:7e:a5:d2:44:31:71:36:3b:cc:06:
                    49:eb:1f:95:de:89:58:80:28:ce:ad:b9:36:98:b7:
                    ab:06:97:7f:31:49:83:e7:46:64:0c:ce:ba:48:e2:
                    89:75:b4:02:7d:8b:d8:03:b1:23:ae:d1:25:2c:b7:
                    a0:d4:b6:38:9f:5b:68:66:96:a4:54:a1:7b:47:ea:
                    d1:3f:e7:aa:59:10:cf:62:27:7f:f8:23:c3:55:cb:
                    c7:58:27:97:09:ed:01:50:3a:c4:ed:78:77:4a:68:
                    d1:dd:84:5f:10:e1:02:3d:b5:2f:aa:32:5f:fd:f3:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:1D:64:78:C9:3E:11:5B:EC:D8:EE:95:32:29:6F:31:CB:BF:4B
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130352e302f32342d3234203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:d7:ef:79:ec:c3:fd:da:6c:35:ce:41:88:fa:f6:d0:86:3f:
         3e:f0:1c:e3:fb:e5:c7:d4:98:69:63:cf:46:32:2e:57:ae:6f:
         46:14:22:e3:c5:a6:58:f0:8b:f2:73:9b:b7:87:45:94:68:2e:
         64:d1:99:c5:ee:7b:fb:c0:dd:44:4a:ef:2f:73:35:a4:37:a2:
         63:42:b8:84:a1:49:66:97:7f:c0:2f:ca:13:da:e6:37:30:90:
         ce:81:5d:22:b9:22:b2:be:77:b7:42:bb:03:23:fe:b2:2c:7c:
         0b:2e:99:f9:0a:4b:bd:44:bb:9a:6f:db:e5:af:18:99:d9:21:
         c6:88:0e:91:a4:bd:63:89:81:09:e8:e3:9e:fc:a4:7e:11:82:
         e1:47:e1:46:46:dd:30:ff:74:60:c3:b0:f9:5e:22:ee:e8:47:
         a9:5d:cb:54:33:72:36:a6:61:cc:a2:59:ed:97:18:3f:24:ea:
         b1:78:5c:72:45:b9:26:bd:32:6c:f5:1c:75:03:5c:79:97:71:
         8a:49:79:8a:31:ac:31:14:19:39:73:fd:04:64:be:b3:93:cb:
         6e:00:4f:43:ea:13:f3:b8:57:a9:47:14:5d:b8:e9:4a:10:1d:
         82:1e:c7:18:01:43:98:71:3a:aa:92:94:be:10:f0:4b:b0:1b:
         bf:9a:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org