Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32332d3234203d3e20313439393434.roa
File:                     3130332e37332e3139322e302f32332d3234203d3e20313439393434.roa (raw, json)
Hash identifier:          oka9MiTKIvSh0kOojGqwSvlyHqmKI4sHGXCiLqo0wEE=
Subject key identifier:   E5:40:B8:C3:52:D7:4F:A9:E9:1F:32:C1:A1:D0:BA:EB:46:CE:05:FA
Certificate issuer:       /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial:       099B37B139C311BE1FCF09FCA590F6CDB3A658CA
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32332d3234203d3e20313439393434.roa
Signing time:             Wed 29 May 2024 13:13:19 +0000
ROA not before:           Wed 29 May 2024 13:08:19 +0000
ROA not after:            Wed 28 May 2025 13:13:19 +0000
asID:                     149944
IP address blocks:        103.73.192.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 00:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9b:37:b1:39:c3:11:be:1f:cf:09:fc:a5:90:f6:cd:b3:a6:58:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
        Validity
            Not Before: May 29 13:08:19 2024 GMT
            Not After : May 28 13:13:19 2025 GMT
        Subject: CN=E540B8C352D74FA9E91F32C1A1D0BAEB46CE05FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:61:b5:91:e2:07:55:a4:9c:33:9a:05:03:
                    c6:d3:ba:f0:d9:6b:16:e4:9c:68:de:ae:5d:5c:2c:
                    a4:02:39:43:bb:d1:05:8c:07:08:6b:77:bf:55:8c:
                    c4:16:1e:d2:dc:f4:8d:72:b4:d1:dc:40:c7:d0:d2:
                    2f:9e:41:1d:75:57:3b:d5:62:1e:17:a4:07:01:e7:
                    b5:91:ab:d6:63:5e:23:f4:41:f7:83:9f:95:9f:18:
                    e4:20:77:3b:cc:d5:57:06:ff:7e:9c:6d:a4:68:ee:
                    2a:8b:b5:6a:fa:64:62:35:03:3a:e2:fa:21:39:74:
                    55:a8:63:dc:52:38:ef:c6:31:41:2a:c6:a5:89:97:
                    bb:6d:7c:17:54:b6:eb:1d:54:0d:4b:7d:ff:83:23:
                    86:ba:97:0c:df:76:db:cb:9a:8b:57:42:96:cc:8b:
                    03:a2:bd:50:62:bc:e4:aa:78:ad:d6:f0:7e:e5:fc:
                    db:02:bc:77:9f:86:1e:e9:0c:11:98:0d:aa:73:13:
                    c9:5c:4b:1c:a9:6d:e3:e1:64:83:6f:41:2e:4b:8f:
                    37:91:5d:25:0b:30:ef:cb:ad:12:a9:83:e8:8e:42:
                    7c:c3:0e:21:fc:94:1f:40:a8:2e:6b:4e:7f:34:0a:
                    a6:fb:13:88:3c:56:d7:5b:db:1f:5e:a9:88:a3:d5:
                    8c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:40:B8:C3:52:D7:4F:A9:E9:1F:32:C1:A1:D0:BA:EB:46:CE:05:FA
            X509v3 Authority Key Identifier:
                keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32332d3234203d3e20313439393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:2e:75:28:fd:11:a7:bd:a2:19:9f:a4:f8:3c:0d:38:83:
         83:f9:d8:4a:c6:4a:d1:4a:d1:c5:d4:bb:ea:a2:4b:80:bf:59:
         c0:da:4b:fd:f1:dd:86:88:28:06:df:d6:d4:85:84:6d:c9:f9:
         7e:08:87:3d:f7:73:f9:87:8b:25:94:0c:53:4f:99:77:6f:c7:
         45:be:5a:43:b7:38:68:4e:0f:0d:ec:2a:59:1f:c9:77:a0:22:
         6b:e2:cf:fd:95:66:10:e6:10:d3:28:e8:c1:71:2b:0f:3b:8c:
         60:1d:7c:17:59:7f:46:eb:c9:25:06:0b:e9:84:60:eb:f1:7f:
         38:e0:87:b3:59:6f:a2:4e:83:34:bb:62:f8:37:fb:6b:83:8a:
         c0:0a:d8:5a:ec:31:f5:7e:89:44:19:f9:fb:98:b3:53:79:53:
         64:9b:15:06:a2:e9:bd:2f:2d:23:95:2f:86:b2:6d:0e:9c:1f:
         e6:00:5b:c1:ab:a4:f0:77:31:4a:de:b1:36:ad:e4:0c:3b:c1:
         9c:38:c0:20:98:d9:d8:1a:76:38:d3:19:9f:07:28:80:48:44:
         ce:37:ab:e0:14:bc:5a:f6:db:6c:0d:98:d8:62:f9:e8:23:a6:
         34:c6:02:40:e7:12:08:c2:ba:92:1e:89:1d:97:42:88:2e:2d:
         d4:70:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org