Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134302e302f32342d3234203d3e20313437303739.roa
File:                     3130332e3137332e3134302e302f32342d3234203d3e20313437303739.roa (raw, json)
Hash identifier:          F/U0OCdhSMhczk8G3rWHxrw2ujxfYu7EwGUKrGKziTg=
Subject key identifier:   EF:C4:DD:4D:0F:C4:38:E4:1C:5E:B9:BA:7B:FD:6B:E0:72:9C:FD:D4
Certificate issuer:       /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
Certificate serial:       6CDC72D74A978A3C854305EC14931C914C4A2CCE
Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134302e302f32342d3234203d3e20313437303739.roa
Signing time:             Thu 03 Aug 2023 21:00:01 +0000
ROA not before:           Thu 03 Aug 2023 20:55:01 +0000
ROA not after:            Thu 01 Aug 2024 21:00:01 +0000
asID:                     147079
IP address blocks:        103.173.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 23:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:72:d7:4a:97:8a:3c:85:43:05:ec:14:93:1c:91:4c:4a:2c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433
        Validity
            Not Before: Aug  3 20:55:01 2023 GMT
            Not After : Aug  1 21:00:01 2024 GMT
        Subject: CN=EFC4DD4D0FC438E41C5EB9BA7BFD6BE0729CFDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:bc:9c:2c:4f:ea:70:e1:93:8c:b8:60:c5:
                    89:72:22:eb:21:ea:e3:4a:fe:95:bb:54:0b:ac:59:
                    c0:21:f5:75:c2:ce:51:33:84:0d:8d:81:a3:71:cd:
                    11:c1:af:91:26:f6:e0:a8:d8:e1:77:05:ee:b8:c6:
                    6d:7a:f5:5d:9b:4c:ef:da:0d:08:82:79:76:53:c6:
                    87:1e:69:29:5a:40:f6:b1:68:ae:24:85:63:27:b4:
                    e4:c9:d5:2d:99:6b:40:fe:fe:8a:4b:8e:bc:df:39:
                    09:98:6f:78:7f:01:4e:0b:c9:71:c1:d3:be:53:40:
                    ee:83:35:49:fa:68:6c:9a:31:2f:20:d9:fe:63:34:
                    7e:06:be:5f:13:66:6e:b7:09:fa:b3:96:64:52:8f:
                    c4:1f:bf:38:77:db:56:b7:af:94:91:93:80:c1:75:
                    5b:82:c4:65:71:92:d7:c2:b1:50:6d:95:23:f4:3f:
                    1c:fb:f9:85:79:7f:59:30:30:17:46:43:54:5c:a2:
                    e6:2f:1b:20:70:12:f9:8a:00:a2:1f:03:60:1b:f2:
                    96:9d:59:34:1f:61:78:48:3c:c1:29:6a:c8:82:2c:
                    f2:72:4c:0d:0c:32:1c:6b:5f:29:62:b2:8a:f6:a3:
                    71:b0:24:a0:35:77:96:cb:20:23:b8:ee:af:a1:30:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:DD:4D:0F:C4:38:E4:1C:5E:B9:BA:7B:FD:6B:E0:72:9C:FD:D4
            X509v3 Authority Key Identifier:
                keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/3130332e3137332e3134302e302f32342d3234203d3e20313437303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:e1:79:93:87:0d:42:24:90:d1:ea:68:bd:1f:e5:5a:dd:
         4d:89:52:01:fb:dc:62:81:3f:99:c0:59:54:ca:68:f2:46:c5:
         0e:44:70:cd:21:95:25:0f:05:7e:02:52:f7:9a:4d:60:a7:0e:
         19:21:87:a2:11:51:11:27:a4:3a:9e:56:13:27:95:a5:59:e8:
         68:7e:74:f7:41:29:49:e6:10:83:e4:2b:f9:c3:c9:c7:83:fc:
         61:53:50:78:48:bc:f3:87:11:70:bf:c7:c1:2f:6f:b9:68:a9:
         76:fd:e6:db:fa:cb:b2:d1:ad:56:ff:93:04:47:7d:53:ac:89:
         9b:25:cc:21:8a:5d:ef:51:1e:a2:a0:18:31:c7:0a:09:41:b4:
         5f:1d:9a:b9:18:ce:86:af:00:e7:60:df:bb:07:6a:82:a8:74:
         c7:32:96:7b:ad:71:e9:6a:03:1e:61:e2:15:5f:cf:2a:c6:b4:
         5e:ad:cc:30:32:ee:11:b6:54:95:7f:37:ab:fe:c7:62:6b:d1:
         bd:32:ba:aa:47:ea:9f:0b:13:79:5d:ce:80:a7:ab:74:80:d5:
         7d:52:af:a1:c7:3f:73:db:c0:a4:58:f3:f5:73:87:57:0f:8b:
         35:8f:6d:70:20:b3:a6:41:67:62:e7:a8:2f:2d:21:46:c6:ff:
         6e:9b:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org