Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa
File:                     3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (raw, json)
Hash identifier:          VTeFeIA7xzXPGNT9QP9GSt9kHT2OMF9AUUqebcB8q7g=
Subject key identifier:   0F:3D:47:2E:24:FA:E1:0C:F4:5E:DA:8C:1B:76:90:61:B7:08:28:95
Certificate issuer:       /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939
Certificate serial:       32736D941B4EC0914334CE798E069A3413943D36
Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa
Signing time:             Thu 12 Oct 2023 15:00:01 +0000
ROA not before:           Thu 12 Oct 2023 14:55:01 +0000
ROA not after:            Thu 10 Oct 2024 15:00:01 +0000
asID:                     141600
IP address blocks:        103.160.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 10:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:73:6d:94:1b:4e:c0:91:43:34:ce:79:8e:06:9a:34:13:94:3d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939
        Validity
            Not Before: Oct 12 14:55:01 2023 GMT
            Not After : Oct 10 15:00:01 2024 GMT
        Subject: CN=0F3D472E24FAE10CF45EDA8C1B769061B7082895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:3a:fc:75:18:6d:5d:1b:c4:e4:f4:07:de:
                    0a:0e:35:55:f8:e0:e8:3e:9c:fc:fe:92:ec:35:bf:
                    96:8d:2c:29:b5:d2:a2:60:d9:4b:e4:43:2b:77:d1:
                    f5:d7:57:d5:e8:c2:b3:35:7d:70:66:0c:3c:6f:f7:
                    fd:7e:c4:49:26:15:5f:2b:b1:0e:e1:6d:9a:99:73:
                    f1:dc:4f:e1:de:97:9b:ea:b8:6c:ec:45:59:07:4e:
                    0c:f2:64:41:bd:d0:a9:a1:1b:fb:6a:bf:4d:2c:e6:
                    6c:d3:43:68:8f:61:75:ea:1a:df:dd:38:fd:7c:68:
                    4f:80:23:f6:f6:68:98:45:04:53:ac:63:a4:23:43:
                    1d:97:51:b5:60:d5:c0:e0:05:17:08:4e:47:9f:6c:
                    06:25:6a:3c:0f:33:1c:1b:98:a3:d3:5a:0a:e5:19:
                    a6:d0:db:7e:70:de:94:fd:27:1b:f3:3e:10:39:3d:
                    91:7a:7a:95:b1:37:35:ec:8d:d0:a6:e3:4b:13:47:
                    9a:ee:0f:2c:f4:25:94:62:28:1d:3d:88:92:7e:7f:
                    26:a4:96:e5:de:aa:2e:9c:32:ae:35:da:14:a3:73:
                    07:ca:2d:af:d2:fe:ea:4d:8c:35:24:8a:c9:d7:25:
                    3b:35:2c:91:c9:0f:57:63:04:1a:f0:10:ee:9f:fe:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3D:47:2E:24:FA:E1:0C:F4:5E:DA:8C:1B:76:90:61:B7:08:28:95
            X509v3 Authority Key Identifier:
                keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:77:2d:71:4e:fe:f1:e6:f4:22:12:1d:81:bf:d0:3f:48:c3:
         ce:9d:23:d0:3b:a9:2f:26:c2:71:1c:c5:87:69:ef:32:d1:b5:
         74:23:db:f7:e5:40:68:06:36:72:6d:1e:83:90:c8:87:00:0c:
         2b:8a:ff:e2:26:ad:db:07:a0:ed:d0:ca:da:b1:d9:15:60:87:
         6a:5d:e6:ff:68:d6:78:14:23:73:04:ad:06:a4:c7:9f:be:ce:
         fb:1a:71:58:65:e5:e4:82:33:a1:b8:50:fc:9f:cf:1c:35:c0:
         54:48:7d:67:41:95:ac:57:09:c4:11:11:77:23:06:51:97:5c:
         9e:1f:7a:c9:31:38:0a:13:4c:32:c0:e1:a7:8f:e7:c6:8f:24:
         10:21:10:0c:fa:2a:09:1c:7d:8e:00:0a:a9:7e:8d:28:9c:2e:
         87:b7:cb:fa:b8:f3:7a:d2:e0:93:20:3e:73:59:42:44:92:61:
         07:75:02:72:6a:08:3d:5d:44:b6:4c:22:11:99:8d:31:cf:d0:
         66:85:36:9c:df:39:a9:41:44:f2:18:f8:e7:86:fb:01:13:67:
         0a:50:94:48:81:83:11:68:09:22:a9:15:1c:1a:40:9c:b6:51:
         a5:08:1a:4a:e8:57:4e:0e:ba:d6:52:f5:a9:5d:ac:f1:c1:bc:
         0b:1c:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org