Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/3130332e3137352e3131332e302f32342d3234203d3e20313437313131.roa
File:                     3130332e3137352e3131332e302f32342d3234203d3e20313437313131.roa (raw, json)
Hash identifier:          MWUflidPXutI1gdhm5xFmbggrehXE6ogiTH3OlExEk8=
Subject key identifier:   55:71:D4:F7:14:21:10:4D:26:10:A7:75:95:4B:0D:FE:14:E0:E5:E8
Certificate issuer:       /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC
Certificate serial:       661AB50E0832CFEECFFCB23A20E52AB8D35783D3
Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/3130332e3137352e3131332e302f32342d3234203d3e20313437313131.roa
Signing time:             Fri 15 Sep 2023 08:00:29 +0000
ROA not before:           Fri 15 Sep 2023 07:55:29 +0000
ROA not after:            Fri 13 Sep 2024 08:00:29 +0000
asID:                     147111
IP address blocks:        103.175.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1a:b5:0e:08:32:cf:ee:cf:fc:b2:3a:20:e5:2a:b8:d3:57:83:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC
        Validity
            Not Before: Sep 15 07:55:29 2023 GMT
            Not After : Sep 13 08:00:29 2024 GMT
        Subject: CN=5571D4F71421104D2610A775954B0DFE14E0E5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:6f:01:47:e6:96:74:15:6a:c4:33:ad:59:
                    64:ab:58:10:95:65:61:9d:87:be:b6:30:11:39:70:
                    2f:70:54:4e:97:68:8d:6c:33:c6:b7:40:d2:d0:eb:
                    43:37:fa:b9:ee:54:e8:db:8c:d3:4f:3e:9f:38:dc:
                    24:3d:9a:ba:2b:f6:62:a0:bb:0e:d4:29:ae:11:fa:
                    c2:e6:ec:13:8d:2d:f8:8d:42:8d:37:98:3e:27:9d:
                    f4:63:b8:91:6f:08:f8:7d:31:44:bf:a2:10:cf:bd:
                    37:71:50:19:63:80:82:90:4f:44:4a:f5:8d:8c:a7:
                    b9:c2:27:48:05:88:95:c5:38:fc:c2:a2:3f:2f:71:
                    47:14:b8:d6:b7:d6:68:ec:6d:65:82:81:65:83:a8:
                    53:bb:89:cb:22:79:26:fc:22:0d:38:72:7d:64:33:
                    36:1a:0c:f7:04:40:46:b6:09:cb:e5:bb:d8:98:78:
                    8a:f8:f4:08:43:01:72:9c:60:e0:08:42:e4:02:26:
                    7c:0c:6f:5e:92:0a:36:3c:cc:3f:00:da:3d:0b:af:
                    cd:02:d1:f0:e9:ae:c6:ee:dd:6b:d3:34:be:6d:ac:
                    3d:59:3e:24:60:b9:55:ff:ba:a6:be:1b:b9:ee:b5:
                    2c:57:47:65:90:b5:bf:ad:d8:22:37:b1:1a:40:96:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:71:D4:F7:14:21:10:4D:26:10:A7:75:95:4B:0D:FE:14:E0:E5:E8
            X509v3 Authority Key Identifier:
                keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/3130332e3137352e3131332e302f32342d3234203d3e20313437313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:b1:ed:c0:0d:d3:b1:41:c0:94:cb:26:1c:17:cb:bb:57:
         d8:99:1c:05:19:a5:b9:a3:d2:a7:83:8e:66:66:dc:b9:e8:76:
         ea:4c:b8:21:a1:a2:be:63:5e:5b:49:bd:c9:d0:78:bf:c9:34:
         fa:31:71:a2:4b:fa:55:cd:93:ed:5e:05:2e:3c:ee:28:51:dc:
         2f:3f:f2:c7:1e:ba:50:46:da:e4:6f:8c:01:43:23:46:42:fc:
         74:68:24:31:85:68:04:82:46:94:f4:58:24:c6:9c:c1:c7:ce:
         76:bf:df:2a:d1:c2:cc:e0:7b:d6:b1:03:16:90:67:a0:7b:8a:
         f6:89:0e:69:5a:da:e1:b5:14:ef:7a:77:80:d3:93:d5:21:06:
         c6:3a:3d:5d:98:87:88:5a:cf:7f:34:05:e0:21:9e:1e:00:de:
         6e:91:42:92:ae:dd:25:8d:ff:ca:c9:e0:99:68:20:19:11:02:
         76:81:32:35:9c:d9:27:e9:6b:11:7d:e4:38:08:5e:e1:5c:eb:
         e6:e5:cb:da:3d:ac:24:b4:e0:67:2b:72:f6:c6:cd:f9:18:1c:
         30:70:43:01:0b:63:a7:78:f1:c3:ae:15:9a:61:8a:31:9a:b1:
         d4:7a:23:34:fa:59:6d:92:9b:81:be:01:60:45:ce:3c:ec:61:
         b5:65:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org