Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3233203d3e20313532303134.roa
File:                     3230332e3137352e3130322e302f32332d3233203d3e20313532303134.roa (raw, json)
Hash identifier:          KIjgMLzJ70hdB/mgLhQtaBlD9Agg2ia7js8TioMjkyk=
Subject key identifier:   D7:23:CE:08:48:4A:FF:3E:92:92:B8:FE:DA:CC:47:B6:B0:89:03:7A
Certificate issuer:       /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
Certificate serial:       642CC29C935F5BF1EBFACF69D266B576D90CFD95
Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3233203d3e20313532303134.roa
Signing time:             Wed 27 Mar 2024 07:21:41 +0000
ROA not before:           Wed 27 Mar 2024 07:16:41 +0000
ROA not after:            Wed 26 Mar 2025 07:21:41 +0000
asID:                     152014
IP address blocks:        203.175.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 15:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2c:c2:9c:93:5f:5b:f1:eb:fa:cf:69:d2:66:b5:76:d9:0c:fd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
        Validity
            Not Before: Mar 27 07:16:41 2024 GMT
            Not After : Mar 26 07:21:41 2025 GMT
        Subject: CN=D723CE08484AFF3E9292B8FEDACC47B6B089037A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:18:1c:94:fd:17:9e:fc:e6:b7:82:11:46:
                    e4:4c:01:f5:ac:5a:f1:56:85:58:89:ae:3a:ba:25:
                    9c:95:fb:8a:27:a1:70:a6:ab:b3:04:5f:55:44:c3:
                    da:3c:33:c7:b6:3f:67:d4:05:31:1b:8e:d6:bd:62:
                    d3:1d:39:20:b4:ee:9d:e3:89:23:2d:60:e0:48:16:
                    d5:1b:56:25:51:6e:12:44:bf:ce:3f:50:b8:4e:ac:
                    eb:a4:d6:4a:1a:cd:04:a6:a0:4c:29:5e:6a:af:56:
                    42:06:76:9d:f6:01:ae:9b:72:7e:49:e7:1a:88:7b:
                    91:9f:0b:eb:b5:ba:93:e5:4d:2c:48:20:ca:2a:5e:
                    0a:4e:50:27:c1:00:6f:1e:33:84:01:31:95:6d:50:
                    a1:72:35:96:8c:54:37:b2:a5:fd:b9:72:5e:f5:53:
                    6e:84:a7:3c:24:f4:99:c8:74:d3:68:ab:a2:8f:f9:
                    9f:67:6c:46:b6:27:de:dd:d6:ab:b6:eb:cd:28:84:
                    dc:35:82:1a:fb:c2:91:26:b0:72:3c:60:e2:23:50:
                    1a:ac:00:86:40:a7:90:94:3b:3f:d6:19:71:f1:7a:
                    6b:1b:f3:4c:c4:42:5c:df:43:d7:cb:bb:e8:e1:15:
                    73:dc:01:4f:fc:5b:5c:0a:0d:5e:45:da:0b:30:62:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:23:CE:08:48:4A:FF:3E:92:92:B8:FE:DA:CC:47:B6:B0:89:03:7A
            X509v3 Authority Key Identifier:
                keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3233203d3e20313532303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:17:a5:ae:e6:2c:a5:30:3b:15:ca:1c:42:f6:7a:6b:9e:4c:
         46:7d:6c:74:4f:00:71:8b:9d:52:a0:3d:a5:9c:4d:b9:2e:fc:
         cd:e0:91:65:84:6a:c9:6b:f6:c3:9c:d0:f1:73:34:ef:29:30:
         28:95:bd:42:bf:7b:a1:4c:b8:7f:d1:2f:0a:44:81:35:ed:9a:
         26:9a:0a:0d:da:57:af:c0:40:3d:e6:89:f8:72:74:81:ea:8b:
         92:b1:74:53:90:db:71:41:2e:a6:66:aa:e6:cd:fa:c8:d0:72:
         63:59:8e:8f:30:39:be:f3:25:e1:47:ee:94:d9:96:98:a8:9b:
         be:21:cf:5f:07:c0:1e:b9:5c:2d:57:1c:93:3b:d4:85:7c:b7:
         60:a1:4c:27:d2:66:5a:67:f8:2e:76:3f:83:30:bd:03:4b:26:
         98:d3:94:6a:40:70:26:ea:a3:e8:90:ba:24:9c:0d:dc:81:9d:
         9e:7d:7d:1d:7d:3f:31:c3:3d:06:1c:2b:1a:9e:b6:91:6e:a6:
         0e:dc:7b:4c:24:fc:31:a0:0d:80:f8:58:7d:99:c0:02:88:52:
         14:14:17:5a:7e:83:c9:aa:95:47:74:4c:95:ec:1e:c3:98:84:
         f5:d9:2c:c0:02:80:28:d4:d7:1b:13:08:a0:c5:8a:33:92:d6:
         6f:67:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org