Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/P2VqS8I-lOQBCgkVCijQdNsqraI.roa
File:                     P2VqS8I-lOQBCgkVCijQdNsqraI.roa (raw, json)
Hash identifier:          3HHXNCekq2HsRg8wbGJnzAedyNWGPD0rGJ9LXLLWHTo=
Subject key identifier:   3F:65:6A:4B:C2:3E:94:E4:01:0A:09:15:0A:28:D0:74:DB:2A:AD:A2
Certificate issuer:       /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial:       0B2A
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/P2VqS8I-lOQBCgkVCijQdNsqraI.roa
Signing time:             Mon 11 Sep 2023 10:41:31 +0000
ROA not before:           Mon 11 Sep 2023 10:41:31 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     138195
IP address blocks:        180.223.0.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2858 (0xb2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
        Validity
            Not Before: Sep 11 10:41:31 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=3F656A4BC23E94E4010A09150A28D074DB2AADA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d3:3e:a9:66:07:5f:8f:5f:16:67:84:28:f6:
                    50:d2:13:19:9f:ec:aa:62:84:62:56:d7:91:dc:bf:
                    4a:54:31:8b:3e:70:37:79:02:5b:e8:d7:36:80:2a:
                    a2:51:a4:a4:44:62:04:49:84:62:e0:3c:41:5c:e0:
                    6f:4c:1b:2c:62:f7:0d:15:25:5b:02:d9:f3:b5:b8:
                    c2:05:66:33:f8:a7:f0:75:29:8f:ca:b0:ac:f8:2a:
                    75:8f:0c:00:07:5a:d0:f1:b8:a6:71:af:51:c0:54:
                    41:85:22:a4:7c:72:64:6f:cd:5c:34:53:01:64:47:
                    f2:6b:a5:e0:c5:40:d7:3a:60:dc:7c:b3:83:7b:88:
                    a6:be:31:49:f2:23:e0:7a:76:d1:f6:2e:3e:3a:71:
                    0e:87:aa:1a:cf:7e:f6:0a:18:90:1d:e3:e8:de:d4:
                    27:77:db:3e:af:fa:a0:39:37:10:81:d8:b7:2a:32:
                    e1:f2:eb:cc:4d:30:07:c7:57:49:15:63:6f:e0:0a:
                    0e:80:1e:84:ae:ea:20:6d:c2:b9:68:a6:cc:1d:f1:
                    00:75:0e:7c:60:f3:73:69:d0:a5:d7:ee:1d:39:6e:
                    ef:2e:b3:05:e0:fc:4e:c8:ec:a9:ed:63:8a:c4:ec:
                    51:89:bf:4c:b3:30:44:c2:ba:c0:93:02:29:10:2a:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:65:6A:4B:C2:3E:94:E4:01:0A:09:15:0A:28:D0:74:DB:2A:AD:A2
            X509v3 Authority Key Identifier:
                keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/P2VqS8I-lOQBCgkVCijQdNsqraI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:a5:12:61:70:0f:ae:b6:a2:e0:a8:f4:fc:30:c3:27:0c:
         c4:14:14:7a:ba:50:6e:38:fe:ce:0e:a8:7e:87:6e:12:02:c9:
         76:da:ca:0b:1b:8d:b0:db:60:46:15:72:ef:60:e2:21:fa:a8:
         41:33:0d:31:e9:56:1a:56:87:07:cc:43:25:90:39:cc:96:79:
         d9:93:f5:75:cf:ce:ec:77:a9:7d:72:32:49:a1:55:16:d1:6c:
         e1:96:07:b4:e8:9b:2c:13:2c:16:cc:6b:7e:27:0f:69:8b:3e:
         2c:9e:af:93:d5:35:8f:ef:f9:4e:2f:16:3d:32:fa:c1:41:50:
         5e:4d:9f:ca:75:c9:dd:66:53:81:06:16:e8:76:4d:a4:b6:9c:
         36:b7:6b:d7:67:50:d2:6f:dd:e4:25:a2:4b:c0:99:42:f0:d4:
         6f:b6:40:35:50:d6:37:86:86:8b:ed:24:a3:dc:c7:1c:30:d3:
         31:07:b8:9c:bf:d1:0d:88:21:44:bc:51:38:24:70:5e:47:71:
         ba:a3:17:4c:64:24:13:85:12:17:95:f2:1b:02:a7:c4:35:6b:
         14:73:72:48:2c:32:dd:12:82:a7:de:ed:4c:b5:9a:1b:a4:d8:
         a4:3b:c6:bb:2c:db:55:71:5a:e3:f6:22:50:ed:c2:60:2b:97:
         10:02:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----