Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37382e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3131342e37382e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          fIeIvbygbma3KM8z/j4WQqCN3VTqUgR8D9ClyNHNJBA=
Subject key identifier:   9C:25:67:1E:AF:51:36:17:73:11:25:D8:0C:D6:EC:54:0E:90:B5:8E
Certificate issuer:       /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial:       1A2A08F875D2AD650F99FDC3DE943ED68911E38D
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37382e302f32342d3234203d3e20313338383138.roa
Signing time:             Fri 20 Jan 2023 10:52:34 +0000
ROA not before:           Fri 20 Jan 2023 10:47:34 +0000
ROA not after:            Fri 19 Jan 2024 10:52:34 +0000
asID:                     138818
IP address blocks:        103.114.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2a:08:f8:75:d2:ad:65:0f:99:fd:c3:de:94:3e:d6:89:11:e3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
        Validity
            Not Before: Jan 20 10:47:34 2023 GMT
            Not After : Jan 19 10:52:34 2024 GMT
        Subject: CN=9C25671EAF513617731125D80CD6EC540E90B58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:27:cc:16:18:10:83:2b:13:2f:c7:99:53:
                    af:54:f4:a9:b8:44:1b:2f:6c:8a:fd:23:fe:47:32:
                    53:3c:56:dd:54:a0:ff:80:61:ce:73:6c:2f:8e:3e:
                    73:99:a9:14:29:72:f8:e8:fb:0e:ab:fe:f6:47:b8:
                    ad:fd:47:6c:00:2d:91:3f:28:a5:b6:4d:6f:10:13:
                    7a:a1:1e:6e:0d:a6:c9:bd:86:9c:99:ad:9e:9a:49:
                    bd:72:e7:df:b5:48:37:09:63:6f:a0:7e:02:78:e4:
                    01:43:80:0a:ba:c4:36:fa:cf:5d:42:4a:dc:3f:6f:
                    cc:2a:1e:0d:4a:72:2c:4c:b7:b1:d6:de:14:45:a0:
                    9d:6e:28:46:14:68:c5:4d:9d:20:a7:74:ce:16:80:
                    dd:14:12:37:60:f6:86:93:1d:2d:7d:ff:1f:4d:22:
                    68:9f:71:7b:9c:4a:0b:2d:ae:d6:c9:20:ea:f6:0f:
                    4f:76:58:75:1a:8d:98:5b:4a:8c:62:d4:40:64:6d:
                    fd:12:4b:8d:b6:47:8e:c6:6f:7e:c0:c5:f8:68:2e:
                    05:b3:1a:8c:6b:88:91:1e:94:83:eb:81:81:15:35:
                    f5:3a:29:a3:4c:5d:d2:f0:31:14:72:11:59:da:07:
                    ec:a3:f4:bd:11:2d:00:ae:1b:45:68:df:b5:30:5d:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:67:1E:AF:51:36:17:73:11:25:D8:0C:D6:EC:54:0E:90:B5:8E
            X509v3 Authority Key Identifier:
                keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37382e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:46:52:6d:82:b9:c3:58:d7:32:45:f7:4a:a6:86:72:20:
         43:e6:25:74:bf:41:68:44:4c:22:a3:0f:cc:0a:eb:0f:2e:22:
         8f:89:e9:e8:d7:42:65:04:49:74:42:de:0d:3f:6f:37:a8:ea:
         b6:ad:cd:87:fd:2b:e2:9e:14:64:38:f8:5d:a4:70:01:57:95:
         da:45:7a:df:85:42:58:f9:da:51:47:2f:e4:d6:6b:20:8d:0a:
         89:48:ae:25:99:52:40:0c:10:74:f1:dd:ac:74:23:d4:c0:cf:
         e3:30:30:d0:89:e6:ae:a5:71:8a:da:28:4a:7e:b8:85:f6:4d:
         82:ad:1a:73:a1:44:6e:92:ae:8a:10:10:95:4d:46:80:23:0d:
         e4:22:44:98:e6:a8:99:72:a7:23:6c:fc:2d:b8:40:35:7e:c9:
         e4:45:95:99:17:54:0e:a2:70:41:f9:52:b9:8d:02:c4:5b:79:
         ef:7f:6c:9d:d1:0d:25:61:42:1b:0b:46:c6:63:2d:ac:76:ac:
         e1:59:4d:e2:95:3e:49:a8:dd:e0:97:c6:36:d4:62:69:d5:65:
         d5:4f:58:e5:3c:50:c7:91:c2:da:c8:88:e0:5e:c3:fa:0d:dd:
         dc:87:58:5e:17:66:17:ac:f4:f9:0d:56:da:9d:d7:cd:6f:9c:
         0b:95:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:22 2023 by rpki-client on console.sobornost.net