Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147102.roa
File:                     AS147102.roa (raw, json)
Hash identifier:          AsiIi9EIezkSkjzVteWH7MBfn4qxVmkGGsuofSrzlaI=
Subject key identifier:   D5:9B:7B:34:89:94:9F:33:A8:80:BF:76:B9:83:FC:7A:68:9E:7C:4B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7967A192E08B47CC8975995F854A68555C280FC3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147102.roa
Signing time:             Wed 16 Aug 2023 08:40:28 +0000
ROA not before:           Wed 16 Aug 2023 08:35:28 +0000
ROA not after:            Wed 14 Aug 2024 08:40:28 +0000
asID:                     147102
IP address blocks:        103.174.182.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:67:a1:92:e0:8b:47:cc:89:75:99:5f:85:4a:68:55:5c:28:0f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 16 08:35:28 2023 GMT
            Not After : Aug 14 08:40:28 2024 GMT
        Subject: CN=D59B7B3489949F33A880BF76B983FC7A689E7C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:89:81:b0:09:a1:5a:8f:04:eb:e6:ee:f4:
                    01:73:78:60:75:84:01:97:a0:5c:c3:b0:33:0f:fb:
                    c0:63:9d:52:48:1a:3a:a3:ad:43:ba:16:02:44:ae:
                    61:ff:cc:9d:60:82:e6:97:bf:17:59:96:ab:ff:15:
                    c9:08:23:ce:7b:6c:62:4d:90:ea:2f:30:62:cb:c0:
                    c9:5b:74:2c:20:41:5d:90:4f:be:8a:f8:10:46:8a:
                    2a:b9:1c:77:0d:cf:e0:65:0f:07:a8:b7:83:63:5c:
                    45:d3:bb:ea:15:30:0f:7a:5e:ee:c2:e1:b4:1a:63:
                    dc:a4:88:7c:3d:69:8d:b6:3c:bb:cc:0a:4d:0d:c3:
                    d9:06:64:cc:82:43:66:10:d7:b5:9e:67:e6:ec:49:
                    d6:75:c2:71:63:f3:91:43:0c:8e:fd:de:25:5a:42:
                    ec:cc:f0:c2:c0:dd:d4:6a:45:ef:bf:07:48:5e:c8:
                    82:86:a5:a5:03:d8:f7:b8:26:fe:1c:90:12:56:a6:
                    c2:05:23:a1:be:88:43:86:43:99:24:72:f0:50:11:
                    58:83:63:a0:8a:3e:02:90:80:b4:be:4d:1f:d2:65:
                    11:ff:03:16:e5:04:ef:d6:24:c4:ad:03:e8:c6:a7:
                    6b:7c:01:7f:86:35:2b:80:45:2c:11:fe:50:70:be:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9B:7B:34:89:94:9F:33:A8:80:BF:76:B9:83:FC:7A:68:9E:7C:4B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147102.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:0b:65:04:f2:67:0c:d9:e0:74:6c:30:d4:d2:3f:c3:ed:9a:
         98:24:84:00:86:84:fd:1f:ff:de:12:39:c7:eb:12:50:20:f7:
         10:37:19:67:dc:f2:60:bf:18:2f:4a:82:dd:38:cb:96:a3:f1:
         97:39:47:07:d4:ec:f1:b6:80:ea:ba:56:86:2f:7d:96:7a:da:
         35:40:8c:4f:88:c0:a5:eb:b4:23:e1:4c:eb:9f:c3:77:f2:ff:
         dc:04:8f:83:b5:de:07:aa:b6:bb:38:91:b6:4d:c0:ef:00:ac:
         c7:34:da:29:56:c8:df:f2:43:37:f8:ab:e5:d2:fa:18:28:2b:
         78:ae:ef:2e:f2:e2:74:79:42:8d:9c:3f:3a:87:e4:4f:bb:3a:
         06:9e:06:2b:44:2f:82:57:e1:be:3c:49:28:44:07:3b:f9:75:
         37:55:92:e1:c6:f8:a5:a4:75:e1:4a:8d:ff:e4:0b:b4:a4:0b:
         13:43:ae:c3:79:e3:1c:c0:c7:f4:c1:a5:8c:fe:89:30:ff:4f:
         21:56:d7:08:4a:d4:35:5c:9a:7b:30:44:4b:c9:c6:58:f8:5b:
         9f:08:d3:85:b9:b3:6e:77:c7:d9:cd:1d:05:35:a8:ab:2b:65:
         1e:64:b8:06:90:98:c4:40:4e:36:ce:a2:fa:db:ee:98:35:77:
         ec:9c:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org