Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135454.roa
File:                     AS135454.roa (raw, json)
Hash identifier:          FhvdI0FTEf2L8Qa/b0FnMTSbiPa+09Xly/E7nm64bCI=
Subject key identifier:   2D:FF:92:2E:82:B9:37:6B:2A:06:26:F1:AA:C0:ED:07:D2:53:F2:73
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       562037D0CB017FE03DF66F1C420527E9DFBA3A97
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135454.roa
Signing time:             Thu 16 Nov 2023 08:03:20 +0000
ROA not before:           Thu 16 Nov 2023 07:58:20 +0000
ROA not after:            Thu 14 Nov 2024 08:03:20 +0000
asID:                     135454
IP address blocks:        103.67.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:20:37:d0:cb:01:7f:e0:3d:f6:6f:1c:42:05:27:e9:df:ba:3a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 16 07:58:20 2023 GMT
            Not After : Nov 14 08:03:20 2024 GMT
        Subject: CN=2DFF922E82B9376B2A0626F1AAC0ED07D253F273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:b7:d5:67:f5:67:35:7f:0e:ea:4a:e0:2e:
                    c0:2b:50:d5:15:c7:03:24:ce:31:50:19:ca:7f:ea:
                    ed:ed:6f:7d:14:62:a8:89:de:04:21:3f:d5:fb:7c:
                    84:e4:f8:a3:16:b2:c9:ef:bc:0b:87:b9:c2:72:73:
                    f7:16:bc:cb:51:05:9e:00:0b:50:05:3b:e5:a4:77:
                    ae:30:61:c0:f9:e8:aa:98:87:aa:1d:6c:bb:0d:02:
                    47:59:81:47:20:46:f0:62:81:30:0d:77:d2:48:97:
                    15:b1:7d:3a:73:57:29:73:5c:66:81:5b:a6:aa:52:
                    05:fe:2c:16:19:e0:b2:d8:06:4a:8b:a1:b5:eb:c2:
                    9a:96:5f:04:d1:a7:6f:21:1c:d1:99:76:42:14:f1:
                    ea:47:18:b8:01:b2:3e:8f:62:5a:c4:dd:bf:1f:ec:
                    f2:13:8a:7a:8c:d0:3c:a2:a8:bb:fd:48:a9:55:a2:
                    f9:09:4c:78:67:d4:c6:9c:d6:d6:18:e7:46:fe:20:
                    28:ec:ee:80:4e:8e:02:1b:d1:e9:5f:8b:34:80:d7:
                    3a:81:54:93:f9:98:b2:5e:2c:da:39:9e:41:51:b0:
                    74:2c:0d:7e:25:fc:be:60:df:d4:89:bc:f7:a5:b3:
                    88:aa:55:56:14:20:e6:d6:4d:54:c3:c4:fe:cf:b4:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FF:92:2E:82:B9:37:6B:2A:06:26:F1:AA:C0:ED:07:D2:53:F2:73
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:18:96:ee:f3:53:b1:6f:92:23:27:a5:e5:97:4a:cd:7a:
         7e:f1:6a:3f:ab:44:92:c9:74:82:51:c9:5b:34:33:ed:b8:ad:
         1d:5a:79:7e:3a:53:ad:ad:2e:45:0d:fc:f0:85:91:9e:bf:4a:
         31:4b:c6:f1:19:0c:5d:60:15:9c:5e:6f:d5:3c:a2:d9:44:ae:
         fc:fb:10:bd:d1:f3:71:0a:0d:87:69:1d:ab:1f:b7:fd:b8:e1:
         ce:84:0e:25:ac:2c:6f:9e:5f:65:92:41:14:eb:6a:18:3e:ad:
         19:9d:cd:39:04:0e:fe:d4:ab:71:ee:c5:d0:93:8a:d4:ae:84:
         b6:d4:55:64:f1:c5:5f:dc:96:b7:e2:da:c6:63:e1:46:12:93:
         40:d8:4b:28:88:58:dd:a8:b4:c8:16:d6:01:28:7c:eb:8a:52:
         5b:11:39:3c:5d:ac:f8:95:a6:b3:ed:bf:56:66:a4:1b:1b:b5:
         cf:a9:a3:a3:c7:f1:9d:c1:ab:96:3d:7f:c4:85:35:7a:de:bf:
         d0:52:e6:79:d4:15:28:bd:23:ae:00:94:78:d5:07:7a:f3:6c:
         f5:6e:9e:8c:2b:33:4f:21:7a:3c:2f:46:7b:42:ca:76:0c:c3:
         86:d9:e6:ca:ad:05:92:d0:ac:13:76:99:e6:a1:d1:0d:db:b6:
         80:5f:01:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org