Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32332d3233203d3e203633343937.roa
File:                     3130332e39302e32362e302f32332d3233203d3e203633343937.roa (raw, json)
Hash identifier:          R+NClLEasT5Bq8be99gANvA7TnsZXhPNpS/h+hqbZLY=
Subject key identifier:   F1:F6:B3:EB:2A:E5:65:95:9D:21:77:FF:CC:17:A1:68:BF:23:A3:8B
Certificate issuer:       /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial:       61F5A7189396F695EDA9E361AAC06AB038EBB41C
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32332d3233203d3e203633343937.roa
Signing time:             Mon 31 Jul 2023 00:08:11 +0000
ROA not before:           Mon 31 Jul 2023 00:03:11 +0000
ROA not after:            Mon 29 Jul 2024 00:08:11 +0000
asID:                     63497
IP address blocks:        103.90.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f5:a7:18:93:96:f6:95:ed:a9:e3:61:aa:c0:6a:b0:38:eb:b4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
        Validity
            Not Before: Jul 31 00:03:11 2023 GMT
            Not After : Jul 29 00:08:11 2024 GMT
        Subject: CN=F1F6B3EB2AE565959D2177FFCC17A168BF23A38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:f8:26:ff:b6:a9:68:4e:ad:70:a2:f2:c1:
                    2c:bb:b6:75:2a:ca:b1:89:88:5b:3a:31:ca:04:11:
                    07:1f:0a:00:d9:86:68:84:a3:7f:43:e2:dc:28:68:
                    5c:ef:e2:d6:cf:53:e1:0c:81:fa:e8:3e:d1:d8:5b:
                    ed:7a:ce:1b:bc:4d:34:24:19:dc:28:f4:79:ac:f9:
                    ec:cc:fe:8b:bf:08:6a:44:98:51:c1:a9:b6:e9:ab:
                    a8:f9:be:ac:e7:d3:07:5a:6c:59:8a:56:f7:54:a3:
                    35:45:d5:84:2c:78:f7:07:98:99:d1:26:ba:85:99:
                    1a:8e:0a:0b:a0:f6:16:82:18:76:18:96:14:df:86:
                    07:5b:73:91:42:ef:d4:87:4d:59:91:e1:1a:7f:fa:
                    72:a3:6d:71:69:f3:32:bc:14:ba:35:ed:95:de:d5:
                    e4:f9:fb:75:6d:be:b1:01:8c:7c:b8:f8:a4:5f:73:
                    df:d1:70:41:2d:c9:ae:4b:58:d1:f7:5c:7d:c5:62:
                    1a:c6:2a:90:dc:e5:d3:ad:f2:f3:c5:d7:ab:54:8d:
                    93:c0:a8:00:a4:bd:8b:60:5d:cd:d5:a1:33:9a:92:
                    0c:48:3b:4f:e4:81:c1:b7:ea:cc:38:4f:31:e9:2c:
                    eb:d0:23:69:d0:3f:48:86:f4:8a:87:fa:33:55:ee:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:B3:EB:2A:E5:65:95:9D:21:77:FF:CC:17:A1:68:BF:23:A3:8B
            X509v3 Authority Key Identifier:
                keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32332d3233203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:24:e3:ed:8a:26:c8:34:e5:d3:bd:30:0f:50:dc:6c:c6:
         ca:6e:85:61:c2:da:05:3e:79:c0:b8:f8:28:de:ff:fb:b6:6b:
         c9:2e:fc:f0:38:86:d0:47:2d:1d:08:7b:9a:5d:86:44:98:02:
         38:bd:16:47:fe:b6:88:cf:c9:b7:b4:7c:db:d3:71:6f:6b:87:
         07:f3:67:fa:9a:e7:7d:7f:44:a3:c5:e4:c4:63:b9:64:1d:10:
         dc:85:4c:6b:7c:e2:cb:c6:66:c4:5c:eb:9e:ed:ca:26:fe:30:
         e2:d1:68:18:0c:06:e1:73:06:3d:fe:f0:29:4e:59:f4:30:b7:
         ef:5d:e7:28:37:94:5b:6c:f4:87:c8:f4:ef:72:e0:f8:8e:74:
         17:74:a1:29:de:cd:6d:32:5c:24:26:f9:ad:d5:88:50:dd:04:
         40:58:66:35:91:c6:bb:e6:62:21:24:ce:45:37:5c:58:93:d3:
         a5:f0:cb:dc:7d:1e:a6:ce:4c:d5:31:68:5a:c1:98:2d:b1:74:
         64:d7:04:93:82:b8:64:0c:1c:2a:85:50:67:3a:14:85:b0:bb:
         32:a9:c9:70:0a:ef:a3:59:77:66:2d:ca:cd:69:77:eb:02:fb:
         74:30:b1:24:85:6c:08:c6:7e:7e:53:b2:76:1f:0d:1c:21:d8:
         75:1b:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----