Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32332d3233203d3e20313430343433.roa
File:                     3130332e3138342e34382e302f32332d3233203d3e20313430343433.roa (raw, json)
Hash identifier:          bmS2HRaJt20Wv2Df1nwM8e4dCiyCmmWhFoZezq4MCpQ=
Subject key identifier:   39:D4:B0:4D:03:E6:E6:74:AA:40:8B:92:9E:CA:11:DB:3E:02:87:20
Certificate issuer:       /CN=E810D41602DB2D5449939EA97EB71C350841BC5D
Certificate serial:       340C1F3B95932EE34E0D4B411714C543F45213E5
Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32332d3233203d3e20313430343433.roa
Signing time:             Thu 04 Jan 2024 04:00:42 +0000
ROA not before:           Thu 04 Jan 2024 03:55:42 +0000
ROA not after:            Thu 02 Jan 2025 04:00:42 +0000
asID:                     140443
IP address blocks:        103.184.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 07:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0c:1f:3b:95:93:2e:e3:4e:0d:4b:41:17:14:c5:43:f4:52:13:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D
        Validity
            Not Before: Jan  4 03:55:42 2024 GMT
            Not After : Jan  2 04:00:42 2025 GMT
        Subject: CN=39D4B04D03E6E674AA408B929ECA11DB3E028720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:55:5a:8e:fa:8c:7f:85:c2:79:cf:fd:7c:
                    a3:8c:42:b5:b6:ca:75:f3:71:97:43:12:e9:8f:f0:
                    ae:b3:47:73:28:c2:87:41:bb:3f:06:a4:11:63:38:
                    75:61:86:6d:ce:64:35:b3:e8:4c:3a:5b:e6:a4:9f:
                    80:22:de:bd:75:77:d4:fd:db:22:08:7d:e5:a6:ab:
                    87:4c:1c:45:1d:a2:7c:ca:00:8f:74:70:ba:c2:d2:
                    7b:4b:e9:94:6b:5c:34:6d:91:a0:56:43:4d:d9:38:
                    f0:3e:64:92:e0:1c:e9:2e:75:1d:69:6f:db:f8:cc:
                    87:3f:82:dd:68:fc:ff:03:8b:2d:0d:e4:d7:5e:4d:
                    1e:65:bb:dc:94:15:74:d0:d9:c1:8b:41:67:1a:e7:
                    36:9d:c5:4d:b7:95:21:84:3a:9c:ce:00:7d:2b:e0:
                    ee:64:6e:65:68:5b:cb:62:b8:50:3c:c6:1f:df:7c:
                    96:2b:33:b9:77:5d:9a:fb:82:82:f7:9b:88:53:f6:
                    61:a6:94:a0:f9:20:5c:c7:71:e5:2f:4b:40:e5:96:
                    50:c6:a8:73:aa:85:d2:6b:9f:72:df:31:b5:45:a3:
                    eb:ea:ea:e8:9a:fa:71:e9:e2:fd:7e:d3:b2:4b:62:
                    6f:6e:9c:ce:55:39:25:e2:b0:7b:91:95:a8:70:d4:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D4:B0:4D:03:E6:E6:74:AA:40:8B:92:9E:CA:11:DB:3E:02:87:20
            X509v3 Authority Key Identifier:
                keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32332d3233203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:1b:99:83:7b:6a:41:bc:cf:55:82:ad:e3:13:c5:08:9a:dc:
         05:95:a3:4f:63:1d:fa:f8:2e:6b:ad:4e:0c:92:8b:f3:f7:44:
         ae:05:98:af:75:fd:7c:d8:41:c4:b0:5b:7e:c1:d3:d9:4e:b5:
         15:26:67:8f:22:f1:92:43:d9:52:36:3e:23:63:71:e6:cf:00:
         00:98:74:60:07:36:89:f0:4d:a0:f1:0b:ae:93:c7:6f:a2:33:
         87:b3:42:92:a4:35:3b:07:f6:b9:e2:ef:e8:be:57:ac:b8:3b:
         23:4a:76:fb:dc:df:3f:23:57:a8:3a:ca:3d:ea:72:8f:a5:fd:
         b1:18:22:fb:97:34:70:6a:e0:35:02:3e:b3:d1:3a:05:ce:2f:
         2d:43:eb:91:f7:20:6f:ff:83:a6:b1:c6:44:69:6d:d6:69:b5:
         87:54:a8:04:2b:b2:4a:8c:b0:75:4f:5c:8d:13:14:da:45:0b:
         00:b5:67:3b:ca:7d:99:69:23:3d:8e:fa:a3:c6:66:0e:b3:af:
         b9:17:5a:8f:f9:a2:ba:b8:e0:81:fa:c1:ef:d3:af:67:d4:d7:
         ec:97:09:ca:4c:88:d3:4b:83:84:4d:d9:fa:44:d3:11:1a:05:
         57:ad:59:eb:81:f0:d7:fb:bb:e2:f0:40:76:6c:34:69:4e:1d:
         d7:a1:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org