Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/3130332e3138332e3130302e302f32332d3234203d3e203134363636.roa
File:                     3130332e3138332e3130302e302f32332d3234203d3e203134363636.roa (raw, json)
Hash identifier:          qnEMLqEsIQ3c4k0o8evG5ZFCNkfL6ApgTFJZPXwQk+k=
Subject key identifier:   D1:1C:78:C8:F5:0B:45:F4:E1:48:BE:1B:13:30:71:F1:A2:D8:ED:9B
Certificate issuer:       /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902
Certificate serial:       22F811003F4C9A23EEC64AAB16E38C76818477F5
Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/3130332e3138332e3130302e302f32332d3234203d3e203134363636.roa
Signing time:             Wed 29 Nov 2023 03:46:03 +0000
ROA not before:           Wed 29 Nov 2023 03:41:03 +0000
ROA not after:            Wed 27 Nov 2024 03:46:03 +0000
asID:                     14666
IP address blocks:        103.183.100.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 01:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f8:11:00:3f:4c:9a:23:ee:c6:4a:ab:16:e3:8c:76:81:84:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902
        Validity
            Not Before: Nov 29 03:41:03 2023 GMT
            Not After : Nov 27 03:46:03 2024 GMT
        Subject: CN=D11C78C8F50B45F4E148BE1B133071F1A2D8ED9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:50:11:6c:86:6d:cc:82:cf:08:ae:83:f1:3f:
                    99:4c:93:86:39:0f:81:2a:7b:ef:0d:6b:78:0f:c8:
                    60:17:40:e2:df:ad:a9:47:ff:1f:18:75:c6:d7:1d:
                    2a:f2:69:b5:40:9f:c4:66:5c:51:73:8a:5a:62:4d:
                    01:4d:ee:1a:6a:77:8d:14:8f:36:94:b5:d9:5e:f7:
                    a4:e1:f7:d9:46:70:b9:3e:9b:5e:f1:5e:94:04:ef:
                    56:c5:04:c2:fa:e9:81:54:80:90:5f:34:46:c2:5e:
                    19:9e:d0:11:9b:c5:48:01:ad:db:91:d5:72:c8:e0:
                    c8:d0:24:5c:88:49:ab:55:c8:b9:cf:3c:70:02:2d:
                    e4:e5:77:01:6a:94:b2:ca:b8:32:0a:95:b5:3f:df:
                    9b:1a:e2:62:c2:19:70:0f:d4:3e:71:08:20:2d:bf:
                    23:1a:57:ee:4a:17:d5:46:98:fe:61:f3:99:55:03:
                    9f:17:b5:54:21:7e:32:66:dc:3f:78:fa:7b:19:78:
                    04:4d:54:6d:ea:72:2c:a5:d6:f1:e0:a5:38:dc:85:
                    8d:93:b4:26:91:fe:35:3e:7d:ff:69:55:74:1a:34:
                    33:f6:aa:09:95:03:c0:a9:68:06:fb:6b:a3:77:a3:
                    8d:f5:f9:50:28:fb:ea:d0:13:ed:14:a0:04:77:7d:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1C:78:C8:F5:0B:45:F4:E1:48:BE:1B:13:30:71:F1:A2:D8:ED:9B
            X509v3 Authority Key Identifier:
                keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/3130332e3138332e3130302e302f32332d3234203d3e203134363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:44:e6:8c:d6:8b:30:52:80:8f:ca:bc:d6:d7:17:a8:72:07:
         34:9d:dd:99:2a:ac:43:05:5e:01:41:21:4e:0c:5a:87:73:b1:
         03:0e:e3:bf:17:95:b9:fb:eb:9f:ad:03:dd:00:ed:b5:6e:3a:
         1d:2b:e3:46:ab:ff:7e:7d:21:96:8f:28:60:1a:52:79:6f:c2:
         fd:a1:5a:aa:b1:11:3c:77:5e:aa:f8:a1:56:e5:d5:43:2e:f2:
         90:b2:9a:27:10:69:c6:2b:1d:89:a4:1b:98:c9:bc:79:60:71:
         f3:d0:58:b8:1d:fe:08:f2:3c:b4:83:91:6c:4f:e5:4e:5f:71:
         e1:f3:69:c7:a5:52:7d:a6:7b:8a:c3:f4:40:76:fc:d7:0c:69:
         8e:2d:dc:79:d1:9f:65:b0:f5:4f:f0:65:33:fb:49:9b:d8:f1:
         5d:19:bb:b3:82:e1:5b:b3:a4:ca:e1:f8:be:24:ab:f7:9f:36:
         05:29:6e:62:3c:19:ae:aa:44:37:18:d7:10:30:1f:bb:35:22:
         79:65:1e:93:24:dd:1c:45:c4:29:48:21:cd:56:55:e8:a3:63:
         81:9d:5c:6d:ac:fa:1e:9c:10:d1:81:79:40:2d:80:8f:bb:06:
         bb:0e:58:9c:81:94:8b:a9:a4:e6:22:c7:b8:5d:d2:17:0d:e4:
         aa:5e:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org