Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32332d3233203d3e20313439393234.roa
File:                     3130332e3139312e3136382e302f32332d3233203d3e20313439393234.roa (raw, json)
Hash identifier:          fgpQxhIKpRLXoFAzHAzUsuhTb7+N3wcMpvAGAnwcctk=
Subject key identifier:   B4:EB:00:D4:1F:36:B1:2A:C8:9C:4B:00:AC:F0:8B:64:FF:57:97:56
Certificate issuer:       /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
Certificate serial:       6031B9DAB771019F598C15A6D4F7A0917714E0DB
Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32332d3233203d3e20313439393234.roa
Signing time:             Sun 23 Jul 2023 12:37:34 +0000
ROA not before:           Sun 23 Jul 2023 12:32:34 +0000
ROA not after:            Sun 21 Jul 2024 12:37:34 +0000
asID:                     149924
IP address blocks:        103.191.168.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 23:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:31:b9:da:b7:71:01:9f:59:8c:15:a6:d4:f7:a0:91:77:14:e0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
        Validity
            Not Before: Jul 23 12:32:34 2023 GMT
            Not After : Jul 21 12:37:34 2024 GMT
        Subject: CN=B4EB00D41F36B12AC89C4B00ACF08B64FF579756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:05:6d:04:7d:48:a2:35:d5:94:2a:3d:99:
                    12:04:fb:57:be:f8:b1:4d:80:1a:bc:93:83:d2:24:
                    07:91:8e:f0:d0:e2:1f:f9:3d:34:9a:0f:06:e3:47:
                    64:88:52:fc:d5:7e:ed:bc:07:78:6b:58:45:4a:56:
                    35:a0:22:51:4c:ba:33:9e:71:bf:5b:9f:9c:07:33:
                    10:ab:d6:ad:67:cc:5c:c3:a9:ff:5f:1c:91:00:81:
                    c9:29:20:a2:cc:f1:b5:b8:ad:56:89:38:c9:a8:85:
                    df:18:54:8f:5a:84:40:68:91:df:90:4b:b1:77:8b:
                    81:a8:9d:48:96:7d:24:17:d7:e9:d0:b7:5b:b3:ad:
                    81:1d:1a:d8:79:14:9e:9f:11:0b:cc:20:df:87:87:
                    76:3a:94:1f:e4:4e:51:f1:24:18:df:ea:d8:f3:a4:
                    b9:38:ef:f3:63:c2:35:99:e2:70:49:18:82:a9:96:
                    16:13:6d:1c:de:0c:98:59:03:9f:29:18:05:70:14:
                    ec:39:f5:65:2f:01:ce:ff:64:8a:e3:78:56:b5:b5:
                    0a:fb:4f:3c:ac:00:8a:2e:85:72:49:54:71:c7:82:
                    0f:f8:b5:47:1b:e0:98:19:b7:cd:99:8f:49:85:fe:
                    84:c8:6c:f5:b4:62:20:e0:f8:d1:db:d7:b2:ea:a9:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EB:00:D4:1F:36:B1:2A:C8:9C:4B:00:AC:F0:8B:64:FF:57:97:56
            X509v3 Authority Key Identifier:
                keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32332d3233203d3e20313439393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:19:07:fc:4b:4d:d1:6e:76:da:be:38:87:a0:fb:75:d9:ba:
         dc:c2:9c:93:2b:45:87:a8:3b:ac:53:b5:db:01:c3:4b:e7:b8:
         f9:c9:bf:83:64:93:00:8d:8f:a3:28:88:e1:d9:17:07:aa:1c:
         65:39:98:75:00:ea:68:d3:fc:d8:02:16:30:f6:30:9b:95:30:
         31:0e:07:89:d1:5c:b6:64:3d:78:ed:e4:ec:83:eb:ed:ff:7b:
         b7:59:7c:a8:97:9d:10:3c:a3:01:f4:57:00:4c:98:69:5f:73:
         1e:e3:ba:1e:02:84:5d:d2:98:e7:bf:bc:4e:56:c4:91:64:2e:
         65:d7:f8:74:c5:c7:ae:23:eb:e1:4e:7d:58:2d:b9:7c:97:a6:
         75:b4:d9:46:60:94:a3:da:f3:be:71:c8:3e:af:c7:eb:d0:9b:
         01:8a:44:2f:d7:b8:fc:03:64:ba:1f:74:f3:3e:07:ec:51:ec:
         f8:3a:c8:24:9a:86:3c:f9:67:c3:54:1c:e9:ce:87:6d:71:fc:
         b7:df:0b:20:3a:72:c1:c7:b8:b6:4e:ff:f7:9f:7c:1d:08:3c:
         1b:e3:09:08:1c:b9:54:91:a1:de:26:b9:41:77:9c:c1:41:00:
         aa:5c:c8:33:b6:6d:b6:57:1d:ce:6f:bd:e0:cb:19:9f:bc:1f:
         ee:ed:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org