Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131760.roa
File:                     AS131760.roa (raw, json)
Hash identifier:          /5OlzM9pT9pEfVg27F4rMmbQAbprDMLyBHq2I9TNWXY=
Subject key identifier:   C2:51:BD:06:28:EA:65:AE:DC:11:02:B3:D1:BB:62:F2:EE:78:62:59
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16606EDC9877B4F97092BFB6BD81AF557E8CC24A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131760.roa
Signing time:             Tue 09 Jan 2024 04:00:18 +0000
ROA not before:           Tue 09 Jan 2024 03:55:18 +0000
ROA not after:            Tue 07 Jan 2025 04:00:18 +0000
asID:                     131760
IP address blocks:        103.30.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:60:6e:dc:98:77:b4:f9:70:92:bf:b6:bd:81:af:55:7e:8c:c2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  9 03:55:18 2024 GMT
            Not After : Jan  7 04:00:18 2025 GMT
        Subject: CN=C251BD0628EA65AEDC1102B3D1BB62F2EE786259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:61:6d:d3:11:c3:43:59:97:ff:a8:e7:1a:
                    1d:4e:d2:f5:fc:8b:4e:7e:57:06:5b:c3:09:27:45:
                    7b:b0:64:b6:15:77:3f:cf:ed:bc:22:2a:b1:0e:62:
                    43:54:1d:47:f7:2a:4e:62:b1:0e:1a:b3:55:1e:cd:
                    30:f6:b8:41:9b:ad:d5:5e:be:32:b1:f0:2f:53:14:
                    57:66:bb:71:79:92:b5:41:4a:26:de:8f:50:e3:1c:
                    dd:14:3c:bf:ed:43:9c:23:6b:c1:2b:7a:34:d9:65:
                    57:01:39:b3:cf:3f:d8:d6:20:31:2a:2c:6f:56:77:
                    ab:aa:8a:26:bc:03:44:66:e8:4a:3c:e9:ae:e6:73:
                    c8:cc:60:b5:c8:38:a5:c9:db:7d:dc:21:a4:92:2d:
                    00:6d:91:d0:e2:4b:e7:da:0f:ed:f0:43:fd:28:1f:
                    9e:38:e8:79:af:27:b4:b4:5e:2c:44:d1:40:20:41:
                    05:0f:57:f5:f4:fd:4c:ab:26:22:9a:23:72:e2:51:
                    c0:25:b7:ca:ff:2d:8b:cf:93:eb:d0:46:40:57:94:
                    66:a9:43:fd:28:dc:90:59:4b:ba:26:6a:3d:fc:3a:
                    a3:76:c4:f7:7b:98:40:55:6e:fc:d0:62:ba:7f:c8:
                    d8:0e:3d:87:10:d8:e7:49:ff:cf:35:65:57:bb:0d:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:BD:06:28:EA:65:AE:DC:11:02:B3:D1:BB:62:F2:EE:78:62:59
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131760.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:35:b3:c9:81:15:59:41:9b:4f:5a:ac:18:b6:01:69:16:38:
         58:db:91:02:e9:05:98:70:d8:75:5b:76:70:b0:4a:9f:cb:c8:
         bd:97:ee:4e:72:df:e8:5a:50:08:b0:66:92:f6:2c:1f:e3:90:
         4b:34:d1:27:9c:3d:a9:de:c8:2d:97:c1:24:0d:90:06:77:55:
         04:dd:d7:cd:1a:9e:3a:d9:33:ac:0e:ab:05:d9:13:28:77:fa:
         af:9b:ac:78:d6:f9:66:8e:45:9d:34:97:63:43:31:75:23:e4:
         6c:31:ce:24:7c:f6:62:93:2f:c2:76:a0:e5:da:4b:92:7c:d6:
         b5:a5:e0:35:5c:fd:bc:4a:e4:ff:e3:e6:04:f9:1c:b5:11:a3:
         27:09:4d:ae:77:f9:31:2d:17:76:3a:1b:8f:9f:5c:87:7c:46:
         fe:d3:cb:b5:f4:0f:2f:f0:85:0a:b0:50:55:2c:1a:7a:f4:eb:
         8e:ae:e5:b5:12:6e:86:4e:b7:4b:92:fa:c8:09:84:15:5b:62:
         b7:e7:7c:53:8d:ff:ff:09:55:fc:ca:12:2d:57:6d:25:5b:48:
         a6:e8:53:8f:14:41:4a:ab:58:a0:c2:43:f8:ca:30:91:1f:eb:
         31:6d:90:db:db:d3:85:4b:01:4f:f5:df:53:42:e0:6b:ed:79:
         d7:36:e0:f8
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUFmBu3Jh3tPlwkr+2vYGvVX6MwkowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUxOFoX
DTI1MDEwNzA0MDAxOFowMzExMC8GA1UEAxMoQzI1MUJEMDYyOEVBNjVBRURDMTEw
MkIzRDFCQjYyRjJFRTc4NjI1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhNYW3TEcNDWZf/qOcaHU7S9fyLTn5XBlvDCSdFe7BkthV3P8/tvCIqsQ5i
Q1QdR/cqTmKxDhqzVR7NMPa4QZut1V6+MrHwL1MUV2a7cXmStUFKJt6PUOMc3RQ8
v+1DnCNrwSt6NNllVwE5s88/2NYgMSosb1Z3q6qKJrwDRGboSjzpruZzyMxgtcg4
pcnbfdwhpJItAG2R0OJL59oP7fBD/Sgfnjjoea8ntLReLETRQCBBBQ9X9fT9TKsm
IpojcuJRwCW3yv8ti8+T69BGQFeUZqlD/SjckFlLuiZqPfw6o3bE93uYQFVu/NBi
un/I2A49hxDY50n/zzVlV7sNeNECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTCUb0G
KOplrtwRArPRu2Ly7nhiWTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTc2MC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWceqjANBgkqhkiG9w0BAQsFAAOCAQEAOTWzyYEVWUGbT1qsGLYB
aRY4WNuRAukFmHDYdVt2cLBKn8vIvZfuTnLf6FpQCLBmkvYsH+OQSzTRJ5w9qd7I
LZfBJA2QBndVBN3XzRqeOtkzrA6rBdkTKHf6r5useNb5Zo5FnTSXY0MxdSPkbDHO
JHz2YpMvwnag5dpLknzWtaXgNVz9vErk/+PmBPkctRGjJwlNrnf5MS0Xdjobj59c
h3xG/tPLtfQPL/CFCrBQVSwaevTrjq7ltRJuhk63S5L6yAmEFVtit+d8U43//wlV
/MoSLVdtJVtIpuhTjxRBSqtYoMJD+MowkR/rMW2Q29vThUsBT/XfU0Lga+151zbg
+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org