Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32332d3233203d3e20313431393735.roa
File:                     3130332e3136372e37302e302f32332d3233203d3e20313431393735.roa (raw, json)
Hash identifier:          dfbdTq5078a0XXAMfSgSzC/TcEYJjqwZD+w87Jlh8DQ=
Subject key identifier:   D0:D2:B3:35:78:8D:60:D6:36:A3:9E:DE:6E:32:D3:32:70:98:F9:BA
Certificate issuer:       /CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50
Certificate serial:       0F1575470F4930E38CFDC33CC91A438253E554E4
Authority key identifier: 8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32332d3233203d3e20313431393735.roa
Signing time:             Fri 27 Oct 2023 11:33:44 +0000
ROA not before:           Fri 27 Oct 2023 11:28:44 +0000
ROA not after:            Fri 25 Oct 2024 11:33:44 +0000
asID:                     141975
IP address blocks:        103.167.70.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 01:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:15:75:47:0f:49:30:e3:8c:fd:c3:3c:c9:1a:43:82:53:e5:54:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50
        Validity
            Not Before: Oct 27 11:28:44 2023 GMT
            Not After : Oct 25 11:33:44 2024 GMT
        Subject: CN=D0D2B335788D60D636A39EDE6E32D3327098F9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:ff:1e:12:25:f1:c8:6a:67:a5:b9:18:4b:
                    bc:b0:5e:09:9e:24:e9:c2:66:df:a0:b6:bc:2f:30:
                    ac:e8:e8:66:5e:93:4e:d8:62:80:ee:cc:cd:0a:80:
                    99:eb:60:ae:1f:5f:a8:8a:4e:5e:c6:b7:49:b8:d8:
                    d8:48:72:ec:06:a0:45:d8:25:09:36:81:0b:b2:f4:
                    f9:11:08:d2:b0:a4:dc:09:1e:13:26:5d:98:63:c3:
                    fa:8f:a9:a5:a8:3d:f4:18:c8:5a:be:2b:5d:a1:32:
                    16:21:8a:7a:78:04:62:6f:ba:05:07:f3:f1:2d:26:
                    cf:f2:af:f9:fc:13:a9:db:d1:25:49:d0:db:b5:f5:
                    46:92:f6:e4:6b:12:14:39:b4:87:a8:98:79:1f:08:
                    4e:60:71:89:60:e3:50:8b:13:1f:ac:e5:48:0f:d8:
                    f6:87:60:4e:cf:08:25:dc:0d:e9:cc:6b:33:54:83:
                    c0:be:d0:55:9b:b6:d5:4a:1f:1a:fb:1e:28:e5:43:
                    05:16:77:8d:51:32:32:58:1d:ec:34:95:32:e4:f6:
                    20:88:3d:b1:c2:d2:02:47:90:40:64:1f:a7:14:19:
                    c6:fb:87:5c:dc:14:d9:4b:fe:9a:91:33:fa:81:6c:
                    5d:83:8c:df:06:0c:cd:84:df:71:eb:5b:08:41:33:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D2:B3:35:78:8D:60:D6:36:A3:9E:DE:6E:32:D3:32:70:98:F9:BA
            X509v3 Authority Key Identifier:
                keyid:8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37302e302f32332d3233203d3e20313431393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:7f:51:79:5f:df:52:1a:a3:ae:01:b9:5d:ed:56:32:6a:
         a8:4e:bb:d4:f6:6a:45:a1:6f:e6:ec:02:0a:8d:d5:08:ac:51:
         26:f7:21:c0:a9:dc:b2:0b:1c:10:00:3b:20:ef:2e:68:36:6b:
         56:25:48:4c:7a:c6:e8:c9:72:7b:be:43:91:b3:f3:f9:02:fd:
         d5:41:d9:4d:f0:1c:c3:b2:56:ea:63:57:19:8c:eb:9e:1c:40:
         07:3c:ed:05:b8:60:b9:be:df:bf:79:15:a7:3f:08:f5:7c:90:
         d1:d9:2c:95:5d:42:86:52:32:d9:56:8e:c4:34:a2:f8:8c:93:
         d2:31:f9:6e:82:4b:87:4e:8a:73:c0:5c:7e:9c:a5:fc:93:02:
         1e:10:18:5a:d1:f9:8b:05:b9:b0:73:7b:86:2e:cc:2d:0a:f4:
         83:8e:8e:3c:86:e7:a7:76:77:91:ad:84:72:ce:5b:22:08:45:
         fb:54:b6:31:49:6b:7e:14:60:17:76:80:7c:be:e6:ec:7e:1e:
         9a:45:d6:96:fe:0e:8a:60:03:48:07:6a:23:6c:bd:60:56:1e:
         c1:a0:8c:c7:0e:34:a4:68:11:de:0e:c0:95:67:95:cc:c1:b3:
         48:aa:7e:bb:96:33:89:f9:63:e3:25:a9:98:cc:4b:d6:db:2b:
         f2:69:13:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org