Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3130332e3132372e3135342e302f32342d3234203d3e2039373934.roa
File:                     3130332e3132372e3135342e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          QDYTp0M9dN3eKBL5vqS3szlrcw5KQa40FTpkQjNaOCc=
Subject key identifier:   5C:1D:69:83:E0:CD:51:72:E1:A1:48:DA:53:5F:F7:06:9F:2D:07:C1
Certificate issuer:       /CN=F95ABFECD1F2CDA83B975C1651646721A611A82E
Certificate serial:       6ABFB147FB547FAD0F22CD1A446A5F650A08D339
Authority key identifier: F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3130332e3132372e3135342e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 17 Jul 2023 02:11:24 +0000
ROA not before:           Mon 17 Jul 2023 02:06:24 +0000
ROA not after:            Mon 15 Jul 2024 02:11:24 +0000
asID:                     9794
IP address blocks:        103.127.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 00:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bf:b1:47:fb:54:7f:ad:0f:22:cd:1a:44:6a:5f:65:0a:08:d3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95ABFECD1F2CDA83B975C1651646721A611A82E
        Validity
            Not Before: Jul 17 02:06:24 2023 GMT
            Not After : Jul 15 02:11:24 2024 GMT
        Subject: CN=5C1D6983E0CD5172E1A148DA535FF7069F2D07C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:3e:0e:59:f5:df:0d:c7:72:e4:c9:04:c2:
                    29:47:83:52:d9:01:23:67:66:72:89:f1:4f:e3:9f:
                    07:43:29:76:39:4d:96:ce:64:50:70:e8:d4:50:fc:
                    7e:97:36:40:e8:55:1f:96:a1:d2:de:0d:19:eb:2f:
                    4b:44:b1:ed:72:05:57:0c:09:4f:fd:ef:8d:da:5e:
                    f5:ee:b8:12:fe:2e:2c:f0:78:5a:08:d1:be:dd:ad:
                    12:42:4d:1e:56:d4:27:70:26:9c:b6:1a:80:ec:0b:
                    25:9c:e8:4c:9f:60:e5:80:2e:a2:37:10:55:dc:ee:
                    54:a3:e5:cb:5e:0a:79:56:ef:a8:bb:b3:ac:87:b0:
                    b9:8c:28:fb:e3:6c:0a:8a:0f:f7:c9:4d:6b:5a:ac:
                    c9:9f:fb:3c:f6:a9:98:c9:82:b5:de:ae:93:9a:35:
                    d4:64:74:c7:6a:a8:4d:a8:46:a5:b4:cf:a0:7c:70:
                    ce:68:e8:82:13:dd:88:6c:9f:02:23:ed:04:b7:6b:
                    b1:8c:04:49:31:68:dd:12:05:db:0e:b1:79:c0:41:
                    32:ac:77:d2:44:19:a0:0d:2b:e5:f3:00:59:fd:8e:
                    7c:f7:3c:83:96:1c:91:f4:37:21:07:28:a4:f0:2c:
                    3f:5e:8b:0e:ca:b7:99:d5:e0:50:d1:11:e7:d3:7c:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1D:69:83:E0:CD:51:72:E1:A1:48:DA:53:5F:F7:06:9F:2D:07:C1
            X509v3 Authority Key Identifier:
                keyid:F9:5A:BF:EC:D1:F2:CD:A8:3B:97:5C:16:51:64:67:21:A6:11:A8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/F95ABFECD1F2CDA83B975C1651646721A611A82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F95ABFECD1F2CDA83B975C1651646721A611A82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fcde1cfd-cbbc-4f08-89cb-435a5911f2c2/0/3130332e3132372e3135342e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:08:f8:35:04:8c:3b:5d:34:48:0f:a0:2f:9b:20:94:0a:
         64:a6:b4:9a:60:3b:12:32:f3:90:e3:2e:3d:ca:b7:44:e9:13:
         84:89:24:4b:fe:35:4e:9b:99:29:a8:32:b5:8f:00:85:8d:41:
         84:af:fc:7f:8a:fb:8a:25:4c:38:4e:74:fd:7e:79:28:4d:2f:
         52:07:52:d6:ac:84:da:e4:4d:3d:8e:38:4d:50:63:22:fe:06:
         1e:8e:66:b1:c6:3d:6e:7e:22:bf:54:3c:5a:b7:e6:dd:43:ed:
         62:c6:17:99:ec:e0:3a:1d:9c:c4:e1:d3:b3:ae:8e:6d:d1:cd:
         a7:6e:ad:e7:92:32:c8:a5:34:77:b8:3c:8f:f6:12:43:61:af:
         73:dd:d3:41:fc:fb:ee:df:16:66:24:8b:16:c4:1c:ff:26:0f:
         52:0a:7a:c5:68:6b:d9:da:58:7c:4c:60:a8:4d:f2:74:8a:b9:
         18:85:c9:89:a2:1e:ff:4e:a3:9b:bf:3f:0f:45:ae:97:c1:06:
         d9:96:4d:f4:4f:82:df:04:94:09:0b:a3:13:e8:49:4b:f6:c7:
         22:2b:d5:f0:d2:24:76:a3:ac:95:f0:f3:3a:0a:89:d0:54:9d:
         29:81:02:6b:1b:11:92:ec:ae:99:61:08:d8:d6:87:a7:ba:9b:
         76:a8:35:e0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUar+xR/tUf60PIs0aRGpfZQoI0zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFB
NjExQTgyRTAeFw0yMzA3MTcwMjA2MjRaFw0yNDA3MTUwMjExMjRaMDMxMTAvBgNV
BAMTKDVDMUQ2OTgzRTBDRDUxNzJFMUExNDhEQTUzNUZGNzA2OUYyRDA3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wz4OWfXfDcdy5MkEwilHg1LZ
ASNnZnKJ8U/jnwdDKXY5TZbOZFBw6NRQ/H6XNkDoVR+WodLeDRnrL0tEse1yBVcM
CU/9743aXvXuuBL+LizweFoI0b7drRJCTR5W1CdwJpy2GoDsCyWc6EyfYOWALqI3
EFXc7lSj5cteCnlW76i7s6yHsLmMKPvjbAqKD/fJTWtarMmf+zz2qZjJgrXerpOa
NdRkdMdqqE2oRqW0z6B8cM5o6IIT3YhsnwIj7QS3a7GMBEkxaN0SBdsOsXnAQTKs
d9JEGaANK+XzAFn9jnz3PIOWHJH0NyEHKKTwLD9eiw7Kt5nV4FDREefTfP3TAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXB1pg+DNUXLhoUjaU1/3Bp8tB8EwHwYDVR0j
BBgwFoAU+Vq/7NHyzag7l1wWUWRnIaYRqC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Y2RlMWNmZC1jYmJjLTRmMDgtODljYi00MzVhNTkxMWYyYzIvMC9GOTVBQkZFQ0Qx
RjJDREE4M0I5NzVDMTY1MTY0NjcyMUE2MTFBODJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjk1QUJGRUNEMUYyQ0RBODNCOTc1QzE2NTE2NDY3MjFBNjEx
QTgyRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjZGUxY2ZkLWNiYmMtNGYwOC04
OWNiLTQzNWE1OTExZjJjMi8wLzMxMzAzMzJlMzEzMjM3MmUzMTM1MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGd/mjANBgkqhkiG
9w0BAQsFAAOCAQEAuM0I+DUEjDtdNEgPoC+bIJQKZKa0mmA7EjLzkOMuPcq3ROkT
hIkkS/41TpuZKagytY8AhY1BhK/8f4r7iiVMOE50/X55KE0vUgdS1qyE2uRNPY44
TVBjIv4GHo5mscY9bn4iv1Q8Wrfm3UPtYsYXmezgOh2cxOHTs66ObdHNp26t55Iy
yKU0d7g8j/YSQ2Gvc93TQfz77t8WZiSLFsQc/yYPUgp6xWhr2dpYfExgqE3ydIq5
GIXJiaIe/06jm78/D0Wul8EG2ZZN9E+C3wSUCQujE+hJS/bHIivV8NIkdqOslfDz
OgqJ0FSdKYECaxsRkuyumWEI2NaHp7qbdqg14A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org