Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32332d3234203d3e20313338313339.roa
File:                     3130332e3133332e3134342e302f32332d3234203d3e20313338313339.roa (raw, json)
Hash identifier:          n7YWARivngNRm83aUgt4pnYFyjnCuHQtjB6jcNocKLg=
Subject key identifier:   3E:10:8D:B2:7D:48:5D:8D:DD:46:02:DB:FB:75:13:2D:8C:F4:99:7A
Certificate issuer:       /CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
Certificate serial:       5CD6DBF51B4311F29A12D8FB892A82BD8B9F8A07
Authority key identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32332d3234203d3e20313338313339.roa
Signing time:             Tue 16 Jul 2024 09:40:50 +0000
ROA not before:           Tue 16 Jul 2024 09:35:50 +0000
ROA not after:            Tue 15 Jul 2025 09:40:50 +0000
asID:                     138139
IP address blocks:        103.133.144.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 06:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d6:db:f5:1b:43:11:f2:9a:12:d8:fb:89:2a:82:bd:8b:9f:8a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
        Validity
            Not Before: Jul 16 09:35:50 2024 GMT
            Not After : Jul 15 09:40:50 2025 GMT
        Subject: CN=3E108DB27D485D8DDD4602DBFB75132D8CF4997A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:d9:b2:61:41:b4:dc:d4:1c:ce:fd:03:16:
                    98:b0:49:fe:17:a4:67:01:a2:41:49:e6:57:12:82:
                    90:3f:43:e6:9c:e0:63:53:08:02:ac:87:83:ef:3b:
                    eb:11:2e:2c:c9:6a:a7:83:14:45:92:36:ef:fa:69:
                    87:94:89:7a:e5:2b:12:e8:9f:68:30:89:11:ac:a1:
                    c7:43:c5:6a:a6:82:34:d2:cb:03:bb:29:e9:1c:6b:
                    ea:2d:57:e0:d7:03:2c:b7:aa:09:f9:af:b8:af:d8:
                    e0:66:30:7a:cb:3b:71:26:a0:77:68:af:d4:51:30:
                    ab:f9:55:c5:7b:85:31:16:c9:4b:e8:86:96:5c:71:
                    06:7b:b1:d0:54:d1:19:5b:a6:cc:02:80:4a:f2:a4:
                    f6:00:95:fe:04:70:af:e9:95:62:d8:ca:51:a0:4a:
                    11:f5:3e:dd:33:38:ce:c3:f9:9a:fe:cc:c1:64:1a:
                    55:5a:c5:59:6f:44:2c:fd:91:3e:3d:61:63:f4:73:
                    98:bf:88:cc:c4:70:5f:49:a8:39:33:2e:ea:78:ac:
                    fc:7a:d4:1e:43:e7:7e:6b:63:89:22:72:47:18:68:
                    8d:a6:ec:3c:f5:1c:9b:56:a3:62:df:1b:8f:c9:ec:
                    e5:f2:56:c0:c0:c2:84:d7:7c:2d:c7:13:d8:52:5c:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:10:8D:B2:7D:48:5D:8D:DD:46:02:DB:FB:75:13:2D:8C:F4:99:7A
            X509v3 Authority Key Identifier:
                keyid:8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/3130332e3133332e3134342e302f32332d3234203d3e20313338313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:57:94:d6:53:8d:b7:cf:ed:0c:df:c6:af:fb:2d:6e:a0:
         99:2a:b5:53:d7:cc:43:9e:c6:1e:e1:8a:dc:02:24:78:18:f8:
         a6:22:01:f0:9f:eb:50:4b:5b:03:d0:8c:7e:b4:e7:44:24:11:
         63:c9:40:81:53:65:2f:84:b0:a3:d6:5c:49:fb:7f:0c:e9:3f:
         96:f0:ad:b8:bf:c4:be:cb:38:a1:dd:ab:c0:dc:03:82:42:36:
         e1:da:53:a2:ac:ca:c1:9d:8c:9f:4e:5a:37:bc:a4:a9:52:ff:
         c2:32:d3:89:2b:c5:5b:6a:e3:7f:0f:ea:b5:6e:39:5d:23:9e:
         d9:a5:7a:de:ac:02:9c:44:3c:38:c6:98:42:1c:9a:70:c4:95:
         33:b9:0e:b2:85:49:88:3b:c0:1c:dd:c7:bd:e7:b7:98:c9:48:
         6e:0e:e3:75:76:d1:2e:73:10:7a:57:f7:69:51:fe:18:2b:18:
         96:73:97:4b:89:78:e5:ad:4c:a4:fe:b2:b0:b4:f7:a2:1a:ed:
         36:35:c5:56:32:11:68:19:35:97:fb:15:e8:48:0a:b2:b2:61:
         01:55:0f:b0:4d:20:44:fb:4a:76:16:81:5c:0e:67:0b:c6:07:
         e7:73:79:25:8a:3b:5c:c5:a4:68:16:a5:8a:af:b1:3f:3f:9d:
         6d:d7:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 07:26:22 2024 by rpki-client on console-ams.rpki-client.org