Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59277.roa
File:                     AS59277.roa (raw, json)
Hash identifier:          ItLtyh4utXgGKzVL74YagtqUMf75y9p5q8OVZq4MR80=
Subject key identifier:   9E:62:90:13:D1:5D:0A:BC:F8:ED:D7:03:45:F3:E4:E2:1F:70:D1:7A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3F5059429C9277CE74EF49AFCA1BE5668ADD22BB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59277.roa
Signing time:             Fri 20 Oct 2023 06:38:37 +0000
ROA not before:           Fri 20 Oct 2023 06:33:37 +0000
ROA not after:            Fri 18 Oct 2024 06:38:37 +0000
asID:                     59277
IP address blocks:        103.228.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:50:59:42:9c:92:77:ce:74:ef:49:af:ca:1b:e5:66:8a:dd:22:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 20 06:33:37 2023 GMT
            Not After : Oct 18 06:38:37 2024 GMT
        Subject: CN=9E629013D15D0ABCF8EDD70345F3E4E21F70D17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:14:22:8a:bf:60:8b:b7:89:90:d3:50:ab:
                    41:72:78:c5:17:19:c6:75:b6:1b:2d:db:25:f9:3b:
                    95:8b:78:3f:b3:b0:18:15:2e:02:af:f5:b5:8e:c2:
                    a5:e1:b9:fd:9e:b8:0b:af:ef:c5:81:4a:fd:1d:f5:
                    85:7f:b5:a3:01:c3:33:e4:15:e3:19:2b:6a:39:f2:
                    18:e9:ea:f0:3a:09:45:a5:98:e4:2f:db:89:36:83:
                    f1:0d:e9:f6:c2:77:17:0c:76:70:fb:13:b3:41:56:
                    cd:48:0b:2a:42:10:4e:06:e4:2c:8b:45:11:c1:95:
                    1f:7d:6e:67:10:46:c3:3a:a6:7a:d5:55:8b:10:f4:
                    2c:8f:14:22:40:a4:51:00:8a:92:b8:4b:cb:fa:b2:
                    58:3b:a3:30:6a:af:03:f1:ea:ef:77:40:5c:2d:42:
                    a1:43:5e:1e:fe:ca:99:b3:73:78:ed:03:43:0c:77:
                    62:4f:12:d4:3b:11:87:76:dd:15:ed:f2:b4:ca:24:
                    1b:ce:02:20:18:12:9f:09:5b:dc:ee:12:85:8a:20:
                    49:1e:e6:e5:ca:41:c2:cf:a9:49:62:cf:1a:29:79:
                    4e:3a:70:13:48:0d:1f:76:2b:ee:aa:7b:26:75:3c:
                    01:b0:ee:0a:2a:2b:ab:86:fc:14:30:2a:16:79:dd:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:62:90:13:D1:5D:0A:BC:F8:ED:D7:03:45:F3:E4:E2:1F:70:D1:7A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59277.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:46:ef:9a:8d:2b:68:fd:06:57:40:47:ce:7f:92:72:10:f1:
         bb:51:cf:6f:fa:42:fd:36:0e:3d:e5:9d:8d:b2:83:43:78:5c:
         ab:95:80:e7:e1:be:35:b9:5f:b6:1d:7a:37:f2:13:22:34:0e:
         73:eb:09:36:7b:c0:28:78:7c:85:9d:3c:09:89:b2:f7:72:2e:
         4a:eb:f7:6a:a4:c7:30:26:de:a5:2d:1a:02:c0:c5:3d:c8:81:
         93:fa:5e:de:81:14:5e:b6:03:fa:e9:c7:c9:6f:ba:71:51:34:
         eb:8c:02:1f:c3:40:a7:6a:8f:d1:29:cb:6c:5b:ff:fb:06:e1:
         f6:ff:fa:fa:a9:0c:2d:ce:e5:c1:d6:4d:a2:e5:d9:b4:4c:20:
         fc:a1:6d:ed:63:45:e9:16:ac:51:7d:3e:61:78:49:1d:bd:5b:
         ec:74:e3:51:c5:b8:61:39:92:7d:00:30:39:f2:8c:27:96:24:
         ad:d3:f3:53:d6:da:52:d3:0d:cb:a6:8c:e0:90:82:18:05:ba:
         92:50:2b:a4:d2:6e:9c:d2:29:39:b7:cd:4b:97:c1:71:6c:83:
         c8:58:6f:31:37:c8:0a:a6:c3:40:7e:fa:e8:77:da:e9:3f:90:
         8a:bb:22:7b:13:55:ad:76:eb:83:53:75:90:c5:85:e3:07:33:
         20:2e:79:55
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUP1BZQpySd85070mvyhvlZordIrswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyMDA2MzMzN1oX
DTI0MTAxODA2MzgzN1owMzExMC8GA1UEAxMoOUU2MjkwMTNEMTVEMEFCQ0Y4RURE
NzAzNDVGM0U0RTIxRjcwRDE3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJbZFCKKv2CLt4mQ01CrQXJ4xRcZxnW2Gy3bJfk7lYt4P7OwGBUuAq/1tY7C
peG5/Z64C6/vxYFK/R31hX+1owHDM+QV4xkrajnyGOnq8DoJRaWY5C/biTaD8Q3p
9sJ3Fwx2cPsTs0FWzUgLKkIQTgbkLItFEcGVH31uZxBGwzqmetVVixD0LI8UIkCk
UQCKkrhLy/qyWDujMGqvA/Hq73dAXC1CoUNeHv7KmbNzeO0DQwx3Yk8S1DsRh3bd
Fe3ytMokG84CIBgSnwlb3O4ShYogSR7m5cpBws+pSWLPGil5TjpwE0gNH3Yr7qp7
JnU8AbDuCiorq4b8FDAqFnndFIcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSeYpAT
0V0KvPjt1wNF8+TiH3DRejAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU5Mjc3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+QIMA0GCSqGSIb3DQEBCwUAA4IBAQCKRu+ajSto/QZXQEfOf5Jy
EPG7Uc9v+kL9Ng495Z2NsoNDeFyrlYDn4b41uV+2HXo38hMiNA5z6wk2e8AoeHyF
nTwJibL3ci5K6/dqpMcwJt6lLRoCwMU9yIGT+l7egRRetgP66cfJb7pxUTTrjAIf
w0Cnao/RKctsW//7BuH2//r6qQwtzuXB1k2i5dm0TCD8oW3tY0XpFqxRfT5heEkd
vVvsdONRxbhhOZJ9ADA58ownliSt0/NT1tpS0w3LpozgkIIYBbqSUCuk0m6c0ik5
t81Ll8FxbIPIWG8xN8gKpsNAfvrod9rpP5CKuyJ7E1WtduuDU3WQxYXjBzMgLnlV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org