Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/3230322e362e3230382e302f32302d3234203d3e203137343530.roa
File:                     3230322e362e3230382e302f32302d3234203d3e203137343530.roa (raw, json)
Hash identifier:          zddXZgYIqd4hok1RMvIHVHbFeCG/tHaQpm4yetBonX4=
Subject key identifier:   71:14:CC:0A:1C:C8:71:5F:1D:75:50:1A:C7:73:4C:09:22:92:87:02
Certificate issuer:       /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
Certificate serial:       7CCD26F29E3E7BA124522CE989A20D1AA363908F
Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/3230322e362e3230382e302f32302d3234203d3e203137343530.roa
Signing time:             Mon 31 Jul 2023 00:07:27 +0000
ROA not before:           Mon 31 Jul 2023 00:02:27 +0000
ROA not after:            Mon 29 Jul 2024 00:07:27 +0000
asID:                     17450
IP address blocks:        202.6.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cd:26:f2:9e:3e:7b:a1:24:52:2c:e9:89:a2:0d:1a:a3:63:90:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242
        Validity
            Not Before: Jul 31 00:02:27 2023 GMT
            Not After : Jul 29 00:07:27 2024 GMT
        Subject: CN=7114CC0A1CC8715F1D75501AC7734C0922928702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:4f:71:b6:48:fb:8d:41:14:21:7f:b6:ec:
                    c7:b9:0c:6b:74:be:1c:fa:59:ec:6e:c3:79:d4:45:
                    2d:df:b3:6c:88:d7:92:c9:c6:af:85:26:c5:81:f0:
                    7e:b5:17:1c:e2:f7:59:83:c8:6b:bd:38:84:38:48:
                    dc:90:c5:ab:17:3b:49:2a:56:f3:d0:6e:f4:c2:36:
                    96:e0:35:51:29:2e:4d:4f:7e:b6:ec:19:60:83:aa:
                    77:43:5f:61:68:ac:c4:44:ad:3e:e6:3d:49:b1:63:
                    56:10:ad:da:a7:87:34:4b:e5:dc:50:ee:05:99:1f:
                    13:c5:c2:fe:f9:79:c2:da:cd:d5:c5:e4:60:2a:31:
                    76:95:7e:ac:04:78:3e:d3:d8:68:15:61:ab:07:99:
                    59:2a:7b:ed:13:ee:cf:19:a7:49:3e:14:27:fa:5f:
                    5f:76:42:0e:3c:1b:ff:c5:91:d3:05:e2:75:aa:cb:
                    af:fb:e6:05:67:6f:70:0f:92:a1:86:e4:fa:9d:54:
                    8d:8e:b9:5f:9e:5c:a0:e6:8d:bb:1d:86:27:b5:47:
                    aa:bd:b3:39:3d:3c:a4:66:3c:e7:62:de:78:c4:94:
                    51:9c:1a:16:86:ea:09:c9:86:9d:2c:af:19:87:82:
                    0a:38:57:0f:11:c5:78:a2:a9:f1:25:e0:04:78:14:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:CC:0A:1C:C8:71:5F:1D:75:50:1A:C7:73:4C:09:22:92:87:02
            X509v3 Authority Key Identifier:
                keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/3230322e362e3230382e302f32302d3234203d3e203137343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:47:48:ce:69:4d:13:44:fb:fd:13:c5:e1:99:19:7e:b7:e1:
         eb:bc:dd:db:c2:74:24:23:66:27:e1:c8:4c:10:2d:16:3f:88:
         40:1c:83:c1:bb:9e:e5:5c:84:a6:17:43:85:de:61:6b:78:2e:
         84:80:c2:ab:85:c2:d0:04:aa:9a:f3:3a:81:c8:06:16:a8:d3:
         57:6a:c8:a3:2d:12:3c:fc:5a:38:89:0c:95:48:ac:e6:ba:1e:
         e8:f3:25:09:6e:cf:bd:8a:2a:05:7b:f5:5a:91:b3:51:9e:7e:
         a0:35:42:4c:14:5a:d0:b0:99:81:e4:a2:c3:26:cd:44:10:8d:
         6b:43:b5:0a:53:28:41:ef:01:c1:c6:f7:3e:3e:67:a3:84:7b:
         04:da:d3:18:7b:e6:53:1d:40:84:c4:cb:0e:38:bc:f7:49:7b:
         0c:62:8c:29:16:84:5d:e7:9d:41:71:83:c2:b1:a2:8d:fb:5c:
         bd:10:9c:03:4b:ff:0f:39:a9:a1:be:97:7e:18:1e:8d:0b:03:
         5e:14:66:70:3b:67:4a:bb:92:77:9a:2e:fa:ce:2b:79:a3:02:
         fd:25:df:f1:cd:07:92:b0:4f:2b:8e:57:f4:cc:81:99:b6:94:
         39:15:93:f2:10:7a:e7:76:60:f5:4d:82:e7:a7:de:2b:d3:74:
         3c:c9:1d:2d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUfM0m8p4+e6EkUizpiaINGqNjkI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx
Q0UzQjI0MjAeFw0yMzA3MzEwMDAyMjdaFw0yNDA3MjkwMDA3MjdaMDMxMTAvBgNV
BAMTKDcxMTRDQzBBMUNDODcxNUYxRDc1NTAxQUM3NzM0QzA5MjI5Mjg3MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxG09xtkj7jUEUIX+27Me5DGt0
vhz6Wexuw3nURS3fs2yI15LJxq+FJsWB8H61Fxzi91mDyGu9OIQ4SNyQxasXO0kq
VvPQbvTCNpbgNVEpLk1PfrbsGWCDqndDX2ForMRErT7mPUmxY1YQrdqnhzRL5dxQ
7gWZHxPFwv75ecLazdXF5GAqMXaVfqwEeD7T2GgVYasHmVkqe+0T7s8Zp0k+FCf6
X192Qg48G//FkdMF4nWqy6/75gVnb3APkqGG5PqdVI2OuV+eXKDmjbsdhie1R6q9
szk9PKRmPOdi3njElFGcGhaG6gnJhp0srxmHggo4Vw8RxXiiqfEl4AR4FPOhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUcRTMChzIcV8ddVAax3NMCSKShwIwHwYDVR0j
BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3
QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz
QjI0Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMwLTk1ZGMtNGI3Mi1h
ZTFiLWFkMWU5OGIwZTE3OS8wLzMyMzAzMjJlMzYyZTMyMzAzODJlMzAyZjMyMzAy
ZDMyMzQyMDNkM2UyMDMxMzczNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKBtAwDQYJKoZIhvcN
AQELBQADggEBAF5HSM5pTRNE+/0TxeGZGX634eu83dvCdCQjZifhyEwQLRY/iEAc
g8G7nuVchKYXQ4XeYWt4LoSAwquFwtAEqprzOoHIBhao01dqyKMtEjz8WjiJDJVI
rOa6HujzJQluz72KKgV79VqRs1GefqA1QkwUWtCwmYHkosMmzUQQjWtDtQpTKEHv
AcHG9z4+Z6OEewTa0xh75lMdQITEyw44vPdJewxijCkWhF3nnUFxg8Kxoo37XL0Q
nANL/w85qaG+l34YHo0LA14UZnA7Z0q7kneaLvrOK3mjAv0l3/HNB5KwTyuOV/TM
gZm2lDkVk/IQeud2YPVNguen3ivTdDzJHS0=
-----END CERTIFICATE-----