Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa
File:                     3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa (raw, json)
Hash identifier:          THs0Jzvuof5fM6/VOHldn9J12WLdByAKwQyODOPBVVo=
Subject key identifier:   7D:F9:26:A6:92:74:C2:05:49:E8:D5:B6:20:38:B2:BE:8B:CD:25:3A
Certificate issuer:       /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial:       4A8A253083CA442B45A52D2F6889DC216E9B7AC4
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa
Signing time:             Thu 13 Jul 2023 13:01:43 +0000
ROA not before:           Thu 13 Jul 2023 12:56:43 +0000
ROA not after:            Thu 11 Jul 2024 13:01:43 +0000
asID:                     138072
IP address blocks:        103.123.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8a:25:30:83:ca:44:2b:45:a5:2d:2f:68:89:dc:21:6e:9b:7a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
        Validity
            Not Before: Jul 13 12:56:43 2023 GMT
            Not After : Jul 11 13:01:43 2024 GMT
        Subject: CN=7DF926A69274C20549E8D5B62038B2BE8BCD253A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:36:65:2e:9b:16:3c:3a:ce:f6:80:af:e5:
                    84:86:65:9d:67:6e:47:50:ee:b1:f7:35:61:e9:dd:
                    25:da:74:da:07:86:e4:3b:dd:a6:ce:aa:01:0f:5d:
                    cc:3f:93:fb:fd:9b:53:b9:b6:01:98:f3:ed:5f:ac:
                    0a:dd:43:62:26:ad:4a:63:ac:f3:a2:90:ea:5e:b6:
                    9b:dc:06:1a:eb:f6:f1:01:a0:80:3b:31:8b:ea:72:
                    c1:5b:8b:b1:f9:1f:91:57:21:76:d5:c9:f4:e1:e2:
                    22:6a:1e:cc:2c:9d:3b:4c:d5:18:a3:f1:5f:ce:6e:
                    50:36:6b:3a:49:e2:cc:cc:2f:89:d7:29:8e:a5:54:
                    7b:f4:b4:29:a8:a4:66:99:82:ed:cf:f3:01:f7:df:
                    fc:e2:40:57:59:47:a2:12:5d:39:85:3c:41:dd:a6:
                    14:c0:aa:76:f4:6f:63:7a:d0:36:83:b9:35:ea:2a:
                    5f:0c:1c:6f:d4:d5:c4:f8:43:40:b2:be:b8:fb:68:
                    10:51:e4:a5:2f:af:33:d2:bf:d3:91:2e:bd:38:38:
                    b1:b6:f6:e5:48:4f:aa:e0:f9:2d:6b:8b:15:5d:d8:
                    d3:32:d2:7a:18:ed:8f:9f:4b:97:8d:31:21:64:86:
                    96:94:fe:1e:85:4e:fc:9e:61:6f:f0:5d:81:fd:30:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F9:26:A6:92:74:C2:05:49:E8:D5:B6:20:38:B2:BE:8B:CD:25:3A
            X509v3 Authority Key Identifier:
                keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32322d3232203d3e20313338303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:d2:aa:c4:e7:34:00:07:39:7c:5a:52:ea:e8:93:d3:f6:83:
         33:53:1d:9d:cd:b0:55:9a:41:5d:7e:80:35:e9:36:ef:05:57:
         04:78:07:af:2a:79:a5:71:98:d1:5d:1d:a6:4b:0c:cd:fd:6b:
         8e:cf:c0:08:69:b2:88:ab:a1:11:87:95:f9:2c:29:2d:04:c8:
         f0:cf:3e:32:d2:2d:92:19:9d:29:cf:b5:f3:36:4b:f4:ab:71:
         8b:4b:05:1d:47:a2:ab:52:96:20:2a:f2:14:b1:7b:cd:22:ac:
         cd:ae:22:22:7d:f9:19:df:7a:c4:76:af:bf:13:be:09:03:83:
         16:0f:ea:81:34:46:78:c3:ea:15:a7:55:b3:92:d1:f4:7d:e5:
         16:58:48:2b:83:04:17:70:3f:ae:d1:6a:68:e6:d8:61:0c:7f:
         d7:09:10:fc:e1:db:59:c7:c2:64:8e:01:bc:ae:fa:bc:c0:e2:
         7a:54:c8:9a:7d:53:f9:12:9f:ff:fc:ee:63:a5:7a:ae:fa:b4:
         b9:c4:b9:37:35:f7:f7:15:43:e3:a6:e5:57:3e:31:87:5a:6d:
         75:89:53:6c:cd:c9:55:28:1d:f6:76:02:f0:92:a3:b5:2b:fd:
         e0:05:8f:74:06:ee:4f:9e:df:92:cd:c3:85:9e:c7:5d:1f:b1:
         ea:57:30:04
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSoolMIPKRCtFpS0vaIncIW6besQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2
MUJEQjk3QzAeFw0yMzA3MTMxMjU2NDNaFw0yNDA3MTExMzAxNDNaMDMxMTAvBgNV
BAMTKDdERjkyNkE2OTI3NEMyMDU0OUU4RDVCNjIwMzhCMkJFOEJDRDI1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQDZlLpsWPDrO9oCv5YSGZZ1n
bkdQ7rH3NWHp3SXadNoHhuQ73abOqgEPXcw/k/v9m1O5tgGY8+1frArdQ2ImrUpj
rPOikOpetpvcBhrr9vEBoIA7MYvqcsFbi7H5H5FXIXbVyfTh4iJqHswsnTtM1Rij
8V/OblA2azpJ4szML4nXKY6lVHv0tCmopGaZgu3P8wH33/ziQFdZR6ISXTmFPEHd
phTAqnb0b2N60DaDuTXqKl8MHG/U1cT4Q0Cyvrj7aBBR5KUvrzPSv9ORLr04OLG2
9uVIT6rg+S1rixVd2NMy0noY7Y+fS5eNMSFkhpaU/h6FTvyeYW/wXYH9MCQdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUffkmppJ0wgVJ6NW2IDiyvovNJTowHwYDVR0j
BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG
RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE
Qjk3Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2MjY2MzlhLTlhMWMtNGMwZS1i
YTE3LWY2NzlmMDUwNmNiYy8wLzMxMzAzMzJlMzEzMjMzMmUzMTMyMzAyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzgzMDM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJne3gwDQYJ
KoZIhvcNAQELBQADggEBAK7SqsTnNAAHOXxaUurok9P2gzNTHZ3NsFWaQV1+gDXp
Nu8FVwR4B68qeaVxmNFdHaZLDM39a47PwAhpsoiroRGHlfksKS0EyPDPPjLSLZIZ
nSnPtfM2S/SrcYtLBR1HoqtSliAq8hSxe80irM2uIiJ9+RnfesR2r78TvgkDgxYP
6oE0RnjD6hWnVbOS0fR95RZYSCuDBBdwP67Ramjm2GEMf9cJEPzh21nHwmSOAbyu
+rzA4npUyJp9U/kSn//87mOleq76tLnEuTc19/cVQ+Om5Vc+MYdabXWJU2zNyVUo
HfZ2AvCSo7Ur/eAFj3QG7k+e35LNw4Wex10fsepXMAQ=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:14 2023 by rpki-client on console.sobornost.net