Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132342e302f32332d3233203d3e203338353035.roa
File:                     3230332e3135332e3132342e302f32332d3233203d3e203338353035.roa (raw, json)
Hash identifier:          1bPgFVA8OCUhc7h8Yl6ilIVF6pk6VOjnNCiRKb/iKxE=
Subject key identifier:   DA:06:33:B0:A7:1D:60:76:9E:21:1F:BC:38:59:C0:BF:62:4D:D0:2E
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       629D9B01A265561AACCA4A4FBA60BF4E0C43A1C6
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132342e302f32332d3233203d3e203338353035.roa
Signing time:             Mon 07 Aug 2023 16:55:20 +0000
ROA not before:           Mon 07 Aug 2023 16:50:20 +0000
ROA not after:            Mon 05 Aug 2024 16:55:20 +0000
asID:                     38505
IP address blocks:        203.153.124.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 09:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9d:9b:01:a2:65:56:1a:ac:ca:4a:4f:ba:60:bf:4e:0c:43:a1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Aug  7 16:50:20 2023 GMT
            Not After : Aug  5 16:55:20 2024 GMT
        Subject: CN=DA0633B0A71D60769E211FBC3859C0BF624DD02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:b9:24:99:3e:82:3f:9e:f8:3b:fd:2c:61:
                    2a:c3:64:52:1f:73:8d:99:d6:ce:b5:ce:b7:22:2e:
                    21:86:0b:3d:4d:56:31:1b:54:7f:52:29:d4:04:da:
                    32:ca:57:fe:ac:d4:13:2a:8e:c7:0e:a6:45:c4:63:
                    fa:0c:7b:a7:38:f7:93:a3:8b:45:43:a3:b8:2c:b5:
                    09:95:ce:8b:a0:0b:75:21:0e:89:7e:0d:8e:93:ee:
                    0a:3d:1c:90:20:f4:da:73:e3:0b:90:5e:94:63:97:
                    a8:0e:08:65:67:39:dd:f5:6e:2b:c7:10:ad:b0:9b:
                    d9:56:06:b4:c1:71:db:0a:7c:ec:9b:8a:16:ac:9c:
                    de:77:c6:76:d3:7e:26:d7:cf:7b:b5:8f:f2:c8:5c:
                    7d:88:f7:f5:50:73:46:b7:94:70:cb:e8:31:76:59:
                    5a:57:34:af:81:b2:05:4d:ef:64:63:23:42:e0:89:
                    30:48:68:f0:b4:72:b4:da:54:e6:8c:bd:fb:8e:07:
                    11:7b:26:0b:05:34:20:27:de:2e:14:c0:9d:94:9a:
                    a4:82:a0:48:af:7b:af:0e:28:d5:f2:81:34:89:0d:
                    3c:45:fe:d5:5e:04:28:15:36:60:6d:a8:08:d9:ee:
                    f2:fc:b8:61:de:ce:9f:c7:6d:b7:a8:de:0d:ad:cb:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:06:33:B0:A7:1D:60:76:9E:21:1F:BC:38:59:C0:BF:62:4D:D0:2E
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132342e302f32332d3233203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:fa:7d:24:85:e6:a5:55:8c:9f:cc:1f:0e:6b:f1:ea:0f:
         cc:4e:ed:a3:f8:eb:ea:1c:4b:42:6c:dd:52:f5:0e:fc:2d:9b:
         1c:f4:26:7b:d5:fa:9b:d5:a5:69:b0:73:ad:21:bb:2b:d8:ac:
         92:0b:97:a6:20:08:54:c5:2f:76:ad:16:e4:7d:d2:06:80:93:
         a1:18:fb:d9:5f:10:14:b3:2d:f4:d1:e0:e6:d2:56:3f:49:b9:
         6d:f8:f8:5b:ad:13:e1:81:de:28:1f:18:f6:78:aa:d1:fe:a6:
         be:70:56:f4:15:9e:bf:9c:2e:08:6d:7c:df:e9:32:21:5b:10:
         49:a1:18:21:e7:85:21:3e:37:a8:65:8f:80:14:fa:ce:d9:dd:
         c8:78:9d:10:80:e9:81:c8:0e:a3:26:e5:71:68:29:47:29:13:
         30:93:15:c6:97:b1:53:4a:86:13:c0:34:aa:8d:27:7e:02:41:
         49:86:01:38:21:12:8b:0c:ae:44:2e:cf:5f:9f:69:1d:46:e7:
         5a:0f:06:59:2d:4f:e1:27:00:d2:cb:65:7a:f4:e8:93:fe:89:
         5e:24:3c:d5:d4:56:a9:23:7b:46:ad:d5:ae:c5:ad:b4:f3:99:
         7d:4f:02:59:64:21:86:31:9b:96:cc:04:6f:39:64:88:b9:3d:
         9d:80:9f:a6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYp2bAaJlVhqsykpPumC/TgxDocYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE
MTFEMzNBNjAeFw0yMzA4MDcxNjUwMjBaFw0yNDA4MDUxNjU1MjBaMDMxMTAvBgNV
BAMTKERBMDYzM0IwQTcxRDYwNzY5RTIxMUZCQzM4NTlDMEJGNjI0REQwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnObkkmT6CP574O/0sYSrDZFIf
c42Z1s61zrciLiGGCz1NVjEbVH9SKdQE2jLKV/6s1BMqjscOpkXEY/oMe6c495Oj
i0VDo7gstQmVzougC3UhDol+DY6T7go9HJAg9Npz4wuQXpRjl6gOCGVnOd31bivH
EK2wm9lWBrTBcdsKfOybihasnN53xnbTfibXz3u1j/LIXH2I9/VQc0a3lHDL6DF2
WVpXNK+BsgVN72RjI0LgiTBIaPC0crTaVOaMvfuOBxF7JgsFNCAn3i4UwJ2UmqSC
oEive68OKNXygTSJDTxF/tVeBCgVNmBtqAjZ7vL8uGHezp/Hbbeo3g2ty/hLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2gYzsKcdYHaeIR+8OFnAv2JN0C4wHwYDVR0j
BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD
QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE
MzNBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05
NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzAzMzJlMzEzNTMzMmUzMTMyMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5l8MA0GCSqG
SIb3DQEBCwUAA4IBAQCh9vp9JIXmpVWMn8wfDmvx6g/MTu2j+OvqHEtCbN1S9Q78
LZsc9CZ71fqb1aVpsHOtIbsr2KySC5emIAhUxS92rRbkfdIGgJOhGPvZXxAUsy30
0eDm0lY/Sblt+PhbrRPhgd4oHxj2eKrR/qa+cFb0FZ6/nC4IbXzf6TIhWxBJoRgh
54UhPjeoZY+AFPrO2d3IeJ0QgOmByA6jJuVxaClHKRMwkxXGl7FTSoYTwDSqjSd+
AkFJhgE4IRKLDK5ELs9fn2kdRudaDwZZLU/hJwDSy2V69OiT/oleJDzV1FapI3tG
rdWuxa2085l9TwJZZCGGMZuWzARvOWSIuT2dgJ+m
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org