Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/3130332e3137352e3131322e302f32342d3234203d3e20313437313131.roa
File:                     3130332e3137352e3131322e302f32342d3234203d3e20313437313131.roa (raw, json)
Hash identifier:          2wP6iW6/d3mV0X/mVV5P5FpivDnQ8ttgdgJJXDfuG0E=
Subject key identifier:   8B:F9:4E:27:1F:79:CD:70:AB:CB:B1:36:D7:97:14:0E:DC:2E:D0:99
Certificate issuer:       /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC
Certificate serial:       51A65F370A093203F3820A94083A0D2D8B18B74C
Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/3130332e3137352e3131322e302f32342d3234203d3e20313437313131.roa
Signing time:             Fri 15 Sep 2023 08:00:29 +0000
ROA not before:           Fri 15 Sep 2023 07:55:29 +0000
ROA not after:            Fri 13 Sep 2024 08:00:29 +0000
asID:                     147111
IP address blocks:        103.175.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a6:5f:37:0a:09:32:03:f3:82:0a:94:08:3a:0d:2d:8b:18:b7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC
        Validity
            Not Before: Sep 15 07:55:29 2023 GMT
            Not After : Sep 13 08:00:29 2024 GMT
        Subject: CN=8BF94E271F79CD70ABCBB136D797140EDC2ED099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:d0:cf:48:85:38:1d:7d:d7:04:02:c4:14:
                    7e:43:71:4f:78:ef:a2:99:a0:59:cf:3a:45:85:b2:
                    41:d6:96:23:4f:cd:60:b8:bf:78:8e:36:e9:f3:e3:
                    d3:a1:65:07:b1:a7:88:27:9e:cc:c2:e3:e8:e2:06:
                    3a:5e:0c:02:34:23:b1:87:af:3d:f9:e4:3f:f4:bd:
                    24:66:6a:a8:f2:26:b3:a1:b6:f8:3c:31:4f:62:8b:
                    3f:04:ad:ae:35:38:03:e3:73:e4:a4:94:38:a5:d9:
                    a9:4d:58:20:ce:d7:fd:f6:40:ed:25:3b:c6:51:50:
                    04:8c:ed:11:05:4f:95:74:6c:c3:b6:34:5e:98:49:
                    53:1a:de:80:99:1e:64:1a:dc:2e:db:b3:f5:28:dd:
                    e4:51:e3:7f:12:de:92:e1:f6:1d:37:50:5b:fa:00:
                    d9:1e:cb:0f:56:9e:1f:94:b4:1e:57:34:7d:bf:40:
                    aa:6b:9f:8f:14:3b:66:aa:e7:60:3c:16:ce:6f:bb:
                    19:71:de:43:46:84:31:5c:50:88:53:19:9c:2a:40:
                    54:9d:86:22:8b:b5:98:c1:21:52:b8:02:10:af:1c:
                    50:63:68:6f:60:1a:ae:24:bc:7b:df:14:d1:9b:f4:
                    32:d4:8f:0c:6a:ad:a8:45:9d:11:65:78:66:66:6b:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:4E:27:1F:79:CD:70:AB:CB:B1:36:D7:97:14:0E:DC:2E:D0:99
            X509v3 Authority Key Identifier:
                keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/3130332e3137352e3131322e302f32342d3234203d3e20313437313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:17:2e:7d:1d:af:2a:a7:31:6b:d2:f5:ad:70:88:fd:99:e2:
         86:14:bf:f2:cf:96:cc:4f:a8:00:d7:88:28:5c:1c:b0:47:c7:
         54:f6:fb:c9:0f:c6:e4:b7:94:31:aa:65:5e:4a:86:36:05:30:
         27:78:43:2e:a0:7c:97:4a:7a:10:39:69:17:6b:a9:bc:b5:51:
         f7:fe:4b:16:d5:d6:b0:ba:70:12:31:22:99:9f:09:c0:6f:db:
         69:1c:85:f3:90:d5:e9:83:d4:ae:01:ae:33:da:54:62:68:6c:
         db:e1:05:67:a7:b7:bb:06:4e:91:0c:47:c0:a4:92:e7:ab:12:
         45:8d:48:89:39:c9:3b:8d:08:9b:1e:32:52:5f:23:03:98:cf:
         e4:4c:ef:b6:b2:eb:af:0e:e0:85:59:ce:f0:e4:11:bd:12:1b:
         6d:bd:f8:8b:35:0c:71:58:fd:b1:4e:28:87:91:55:f6:99:54:
         68:73:e3:d2:8a:51:89:44:af:bd:2a:ba:cc:8d:df:25:29:60:
         0c:36:cd:4d:79:be:a7:d1:34:1b:be:b5:1d:2a:92:de:2d:c9:
         e4:18:98:28:6b:1d:6d:1c:92:ba:8a:6c:fb:61:eb:87:7f:f6:
         c2:f2:95:4e:17:cf:65:3d:4c:4b:b6:8c:05:61:b7:25:b5:59:
         4c:14:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org