Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313530353131.roa
File:                     3130332e36362e36322e302f32332d3233203d3e20313530353131.roa (raw, json)
Hash identifier:          ARKJF1hQk34ZlVhkOTWLe9QFl4rl4HYAUjjhyb/0rsY=
Subject key identifier:   FD:82:44:BB:33:FF:C3:A4:AF:48:BF:44:1B:E1:E6:42:C5:44:60:C3
Certificate issuer:       /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial:       2363943EF79DACF56273FB912B760FC9748F9B12
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313530353131.roa
Signing time:             Fri 03 Nov 2023 17:40:21 +0000
ROA not before:           Fri 03 Nov 2023 17:35:21 +0000
ROA not after:            Fri 01 Nov 2024 17:40:21 +0000
asID:                     150511
IP address blocks:        103.66.62.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 03:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:63:94:3e:f7:9d:ac:f5:62:73:fb:91:2b:76:0f:c9:74:8f:9b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
        Validity
            Not Before: Nov  3 17:35:21 2023 GMT
            Not After : Nov  1 17:40:21 2024 GMT
        Subject: CN=FD8244BB33FFC3A4AF48BF441BE1E642C54460C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:4e:5f:56:7c:72:ab:2e:0c:97:c1:e9:5b:
                    1c:2f:41:3a:0f:85:df:0a:6a:13:24:9e:92:52:21:
                    d3:f0:43:ad:75:13:43:c6:2a:5c:e9:54:37:f8:d0:
                    49:94:9d:1f:e9:c1:20:65:08:81:15:e0:bf:e9:59:
                    a7:f8:36:ef:7c:04:24:3d:22:d7:b9:f6:d2:1c:d9:
                    27:47:76:b6:52:20:64:51:f3:4a:63:00:e6:e8:c0:
                    74:5d:a3:19:8a:c6:3a:18:da:3f:10:24:67:4f:02:
                    f5:e3:74:c0:b2:8b:44:12:d1:12:9f:6b:ec:e0:72:
                    67:22:ad:a1:9d:1d:ae:6a:14:ba:a7:bf:03:22:58:
                    41:fe:81:ca:d1:66:d7:12:e5:2c:50:55:f0:88:1e:
                    78:d3:5b:83:24:12:78:fe:2c:cf:72:a5:68:e2:df:
                    39:3c:08:aa:1f:3e:cf:99:3b:d3:82:01:79:c7:12:
                    e0:74:9b:77:00:f2:44:2c:89:b1:92:c3:98:04:ca:
                    97:69:62:d8:3e:ce:97:df:ec:fa:c7:9c:4e:dc:3d:
                    44:db:1a:d4:4d:7c:43:ce:79:2c:08:aa:2d:53:bf:
                    c3:8e:4e:21:3b:6d:24:8d:b3:c2:2c:65:ec:a0:82:
                    10:cf:40:b3:c9:72:90:8f:3f:c7:d1:70:f5:a4:16:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:82:44:BB:33:FF:C3:A4:AF:48:BF:44:1B:E1:E6:42:C5:44:60:C3
            X509v3 Authority Key Identifier:
                keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313530353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:e1:a1:c3:5c:af:dc:31:70:b7:ab:69:fc:77:71:db:c3:
         38:39:ec:42:f2:de:c6:e5:fb:2e:de:c1:3d:82:92:de:e2:b4:
         e8:b8:5a:fa:dc:a5:0c:9d:1a:74:78:8b:7b:8c:d2:7c:17:c3:
         e4:f5:cd:8d:52:10:48:22:59:d9:03:e5:d0:55:fb:27:de:14:
         46:45:aa:19:33:69:1b:c3:4d:4c:38:99:c4:c3:6f:d5:27:c1:
         cc:86:d1:81:a6:1d:40:48:17:b5:32:77:94:9f:4f:d2:2a:c4:
         a4:64:7a:d7:ae:75:49:d5:49:d3:30:09:70:a5:fa:81:88:a5:
         dc:78:6e:90:92:32:bd:97:39:d5:77:b3:f2:b8:57:c1:4d:6d:
         0a:9d:cf:2d:86:ea:2c:10:f9:c8:e3:9a:44:19:53:4f:ae:b5:
         e9:99:26:ee:a8:0d:10:b1:c0:90:bc:c0:bb:11:3f:3e:c0:75:
         d6:ea:bc:8c:f7:b0:95:9c:39:b1:ac:8c:62:71:ac:06:ba:fb:
         f2:c5:e4:23:35:b6:eb:d0:c6:40:aa:4d:68:bc:3e:53:49:0c:
         46:5e:a1:23:b1:0f:35:7c:69:48:3c:3b:74:b4:a8:c6:f4:81:
         ce:5d:00:ae:17:0c:a9:6b:df:58:df:d1:11:d3:cb:24:b6:0c:
         1b:34:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org