Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
File:                     AS141137.roa (raw, json)
Hash identifier:          eEZIAX0fHESFLetg6BchMS9AiFgBLanKdTrsT1ZwoLQ=
Subject key identifier:   22:C3:60:DB:BB:6A:7B:77:4E:F0:62:F9:8D:04:F3:C1:9F:5E:7A:14
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       151549FBF492C1C9E39D846DC44DD7EB6C5C0C28
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa
Signing time:             Mon 26 Aug 2024 09:19:24 +0000
ROA not before:           Mon 26 Aug 2024 09:14:24 +0000
ROA not after:            Mon 25 Aug 2025 09:19:24 +0000
asID:                     141137
IP address blocks:        103.167.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 02:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:15:49:fb:f4:92:c1:c9:e3:9d:84:6d:c4:4d:d7:eb:6c:5c:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 26 09:14:24 2024 GMT
            Not After : Aug 25 09:19:24 2025 GMT
        Subject: CN=22C360DBBB6A7B774EF062F98D04F3C19F5E7A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:e8:a0:e3:41:2e:e7:61:e0:40:f6:69:cc:
                    05:7a:b2:80:1c:f0:61:44:49:89:0a:ae:f0:90:5e:
                    fd:e9:91:41:45:fe:4d:29:8b:4e:e0:d5:87:af:ac:
                    52:1d:8f:21:af:6a:60:20:dc:34:c5:e5:c6:03:48:
                    fc:d1:67:3f:83:4c:78:ac:6c:93:15:c5:a0:14:73:
                    ac:a0:cb:e8:20:b5:4e:8a:3e:75:a6:89:44:6f:c8:
                    95:6a:85:b1:8e:48:77:e8:41:1f:41:2a:c6:d0:7f:
                    5f:fd:a0:0b:e8:f9:eb:6f:1a:83:7a:ac:3c:2f:a6:
                    58:22:6c:c4:26:a1:15:2f:3e:5f:6c:4c:6d:9b:b6:
                    93:95:75:a1:c5:0c:82:ac:52:10:bd:fd:0a:55:4a:
                    a2:8d:a8:3f:0c:8a:32:64:f8:b7:13:6b:6f:a5:43:
                    ae:42:e6:a2:89:75:20:a8:e4:df:22:1d:5b:0d:2d:
                    49:2f:27:a0:b9:a8:d7:6a:6e:02:6b:4c:23:48:12:
                    c5:9c:b1:15:24:d4:a5:3a:4f:c9:3d:ef:92:a6:cf:
                    75:e3:32:fc:d4:6b:0e:17:cf:4c:84:f2:b3:b7:49:
                    59:01:12:5e:27:94:d6:4b:1b:11:4c:17:36:ff:af:
                    75:2d:9c:c6:a7:a9:95:7c:37:7a:0d:1d:41:ef:5d:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:60:DB:BB:6A:7B:77:4E:F0:62:F9:8D:04:F3:C1:9F:5E:7A:14
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:83:db:14:22:4d:5f:fb:b9:d6:a2:53:f5:bf:1d:f0:ad:60:
         d9:19:70:70:3a:a6:66:10:00:84:28:84:5b:47:58:60:fc:77:
         d5:bb:b1:c8:64:d7:d7:79:0b:07:60:22:7c:22:0c:61:f4:72:
         38:04:95:f3:b1:5e:92:4f:06:10:0e:65:35:27:10:5f:34:64:
         59:4d:1c:51:ce:cf:e0:43:15:22:16:d2:32:62:4c:66:40:49:
         e2:0b:48:8e:db:72:6c:5d:69:ab:09:8b:51:b0:c1:9e:cc:9c:
         f7:fa:22:fd:7d:2a:1b:4f:18:4d:5d:e9:37:f5:21:d4:2e:b8:
         5e:68:66:cb:83:22:11:8e:20:e9:3c:c1:1a:13:90:b8:2f:01:
         8d:14:0a:3d:12:de:52:04:91:54:be:49:85:73:23:7c:ff:95:
         25:79:b6:80:41:38:39:7d:95:cd:e3:46:d3:63:fa:25:c2:32:
         d9:a5:fa:06:dc:50:3c:3f:52:72:d3:87:c5:15:a2:63:d9:f5:
         65:37:16:f5:49:8f:c3:cb:a6:f4:2e:2c:ff:04:02:29:ba:7d:
         e2:7f:64:28:1e:65:68:12:1f:31:0a:46:75:ba:d8:b7:95:b3:
         39:42:19:77:cd:29:91:c2:66:35:8c:1c:46:8e:6f:bb:d9:ea:
         e1:a6:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 04:25:26 2024 by rpki-client on console-fra.rpki-client.org