Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147137.roa
File:                     AS147137.roa (raw, json)
Hash identifier:          BiZjwKNSzY+13dBiFVvDYGlP8DSO2j3XSobYxgu9+7o=
Subject key identifier:   FF:C7:7C:84:10:8C:92:31:75:C4:89:34:56:FC:35:DF:5F:FE:79:33
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       70074EE4769A241EA4F052CEC9BEFCB156462B45
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147137.roa
Signing time:             Tue 22 Aug 2023 02:45:04 +0000
ROA not before:           Tue 22 Aug 2023 02:40:04 +0000
ROA not after:            Tue 20 Aug 2024 02:45:04 +0000
asID:                     147137
IP address blocks:        103.174.182.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:07:4e:e4:76:9a:24:1e:a4:f0:52:ce:c9:be:fc:b1:56:46:2b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug 22 02:40:04 2023 GMT
            Not After : Aug 20 02:45:04 2024 GMT
        Subject: CN=FFC77C84108C923175C4893456FC35DF5FFE7933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:c8:ba:2d:50:f6:ed:bf:32:f3:11:0c:86:
                    58:32:99:80:b3:31:09:cf:ea:e7:a6:34:99:80:f2:
                    ee:34:4e:8b:d1:94:1d:87:ab:c1:0f:33:d4:a5:20:
                    07:84:ac:47:81:4d:c0:2c:de:7e:9a:de:9e:6f:e0:
                    b7:38:54:9b:f3:67:95:df:0b:e8:41:1d:79:0e:f0:
                    97:68:71:0d:4e:14:e5:d0:68:ab:20:1d:5f:01:a7:
                    d5:b4:a6:63:a5:fe:85:d1:de:9c:94:89:de:11:ce:
                    96:11:ba:c4:1c:bc:2e:9b:0f:27:f5:fa:92:b2:8a:
                    cd:28:2c:30:27:65:d2:a5:19:4c:c6:ef:c7:d7:ce:
                    28:98:83:07:13:77:15:3c:35:68:4e:9e:ca:22:1b:
                    ac:00:d7:18:7b:1e:e3:46:a7:a2:12:ad:1f:a0:84:
                    b0:59:d7:1a:96:4f:c6:d4:3a:3b:2a:5e:ba:1c:32:
                    5b:53:ce:31:a6:91:d9:4f:e0:af:56:b3:f3:b7:eb:
                    6d:8e:de:f4:a0:72:da:cc:07:47:00:3b:56:a5:5e:
                    49:24:76:31:65:a5:ea:7f:8d:fb:d7:46:61:c4:be:
                    24:1f:6e:6c:db:34:2a:da:a1:4e:ff:b1:0e:e8:4a:
                    9c:88:de:5b:1e:0e:49:2b:6f:37:35:0f:c5:e6:21:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:7C:84:10:8C:92:31:75:C4:89:34:56:FC:35:DF:5F:FE:79:33
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:2b:94:68:b9:27:15:a6:24:7c:76:a2:38:b9:88:70:c9:
         05:ee:a6:38:69:a1:6b:f9:b9:24:d4:8c:21:5d:a0:e5:0e:45:
         f9:c1:2a:76:f5:2a:b7:31:3c:46:da:6f:7a:3c:f9:32:62:32:
         74:ea:1d:8f:e4:3d:f3:11:9c:39:01:51:3d:49:de:c4:5d:c1:
         34:5f:d4:22:9d:14:9d:6e:0b:7b:ae:8b:02:28:69:7d:0e:c6:
         a5:ce:96:28:49:65:75:42:63:1c:b6:6b:44:2f:35:8c:37:f9:
         9b:ae:a6:24:40:6f:d0:f9:31:ca:52:1f:bf:c7:f9:a4:4f:9d:
         32:ae:a5:2c:ce:f0:98:4a:58:c6:35:43:df:a0:c3:97:30:ce:
         d9:6a:0a:0c:da:90:16:c5:7f:5b:a6:22:d2:16:ca:dd:e8:cc:
         7a:26:13:c8:ef:59:08:d6:17:1c:b2:43:ad:29:dc:d7:5c:5a:
         0e:c3:d1:bd:94:be:40:75:e9:94:2d:ef:f4:ee:19:53:e1:a6:
         b9:9e:1f:91:15:b6:5c:f0:1b:54:03:84:ec:55:49:17:e5:be:
         dc:55:e7:c6:59:62:52:11:05:ab:df:5f:bd:82:b3:c7:39:cf:
         4e:f7:c1:bb:e3:cb:4d:cc:e7:1d:aa:3d:fb:6d:13:18:a2:1b:
         a2:9d:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org