Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32322d3232203d3e20313336303735.roa
File:                     3130332e38342e3230382e302f32322d3232203d3e20313336303735.roa (raw, json)
Hash identifier:          1Ut6plnAgyad+BewwvWBH7cVjQogZJVfDW+L2SZmsBg=
Subject key identifier:   C3:FA:14:B6:7D:F1:25:24:40:63:E0:7D:14:3C:05:DD:E7:16:FA:24
Certificate issuer:       /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial:       04C1221CA8A228676C8787CA72052B13F5EBD045
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32322d3232203d3e20313336303735.roa
Signing time:             Tue 13 Jun 2023 16:09:48 +0000
ROA not before:           Tue 13 Jun 2023 16:04:48 +0000
ROA not after:            Tue 11 Jun 2024 16:09:48 +0000
asID:                     136075
IP address blocks:        103.84.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 07:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c1:22:1c:a8:a2:28:67:6c:87:87:ca:72:05:2b:13:f5:eb:d0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
        Validity
            Not Before: Jun 13 16:04:48 2023 GMT
            Not After : Jun 11 16:09:48 2024 GMT
        Subject: CN=C3FA14B67DF125244063E07D143C05DDE716FA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:ba:38:65:6a:1c:c1:fc:90:b8:21:b1:2c:
                    18:44:d3:92:f4:74:b2:ff:97:b5:03:4d:f4:a0:c4:
                    7b:e9:8d:e5:92:b0:5a:c3:9c:28:73:90:fe:a7:54:
                    85:d0:cf:14:78:e8:62:13:fa:0e:6b:21:07:e2:e8:
                    05:d6:0a:49:93:2d:1d:c1:26:c9:89:d0:d0:92:0a:
                    d1:69:1e:a4:dd:0b:49:ec:c4:ae:7d:c6:a6:77:81:
                    0a:02:67:60:36:9f:8b:c9:e0:3f:c5:98:47:b6:24:
                    ed:6d:70:20:74:37:e2:fc:2d:c6:34:3d:bf:dd:2f:
                    df:9c:7b:e5:d5:a9:b8:c9:9e:ed:78:b5:1d:91:bc:
                    8e:8f:9e:c2:aa:e4:65:29:98:a9:e7:fc:e0:45:21:
                    e7:ad:08:1c:23:f6:45:37:01:25:03:de:71:27:1d:
                    36:bd:55:35:3b:63:c5:c2:27:cf:c3:ba:01:f8:6e:
                    38:77:df:18:1b:ad:7c:57:6e:ab:b7:12:bc:6d:aa:
                    17:8c:31:04:f5:41:25:5d:ac:b7:42:af:08:40:dc:
                    81:16:d7:1d:27:ae:c5:b6:ef:c6:7a:b0:a0:53:02:
                    f4:09:32:7f:e3:36:d8:c6:c1:83:89:28:e8:4d:e8:
                    cb:66:58:01:f5:fe:5f:31:3b:78:a7:ee:5c:a1:15:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FA:14:B6:7D:F1:25:24:40:63:E0:7D:14:3C:05:DD:E7:16:FA:24
            X509v3 Authority Key Identifier:
                keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/3130332e38342e3230382e302f32322d3232203d3e20313336303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:73:30:b6:ef:60:00:ee:6c:be:82:c6:67:27:c8:f3:71:70:
         84:b8:ac:31:c7:b7:3c:d0:9c:77:d0:67:5c:22:63:72:00:d8:
         e9:4e:23:d4:4b:33:68:03:6e:f9:ec:51:82:23:88:bf:b1:12:
         3a:a6:89:ec:33:94:d4:b0:8e:97:c7:9f:2f:e4:09:12:68:a2:
         ed:84:16:d6:7b:9e:17:39:b4:13:52:10:79:bd:a8:47:ae:2f:
         8e:a5:a2:0b:5f:d6:30:d4:28:69:47:5b:7c:a7:09:65:b6:16:
         80:b6:d9:b2:e1:8d:cc:b1:f6:0a:9e:4a:30:f6:62:4a:40:35:
         14:c3:e1:a8:bd:73:51:e4:b5:48:27:51:44:ab:ee:a3:5a:1c:
         d9:94:b5:7b:f5:21:df:b1:66:49:c5:d3:93:10:ed:9e:0d:b4:
         68:93:94:39:54:29:27:23:30:e1:be:c0:68:5b:ee:53:9e:9b:
         6d:a5:12:e4:9a:f8:0f:19:c9:20:8d:f0:1e:f0:aa:ad:d9:57:
         46:2e:cb:82:75:5d:ef:8a:ec:33:80:9a:94:26:48:f7:f5:1c:
         4d:6e:72:a3:58:09:a9:57:1e:7a:39:ef:53:04:a9:24:e2:0f:
         47:1e:64:30:86:9e:21:6e:02:1c:38:35:86:45:a4:f7:30:9d:
         03:28:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org