Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32332d3233203d3e20313338383831.roa
File:                     3130332e3134302e3138382e302f32332d3233203d3e20313338383831.roa (raw, json)
Hash identifier:          4UFJuq2asNtzx/q3TqcUyI1Pm8V4kV7Ti1RPkTDnY2w=
Subject key identifier:   1D:23:5F:C8:21:2E:C0:CD:EB:20:BA:87:D5:E5:C7:76:A2:11:00:73
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       628488AEA225707465EF405B8153F66F71250586
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32332d3233203d3e20313338383831.roa
Signing time:             Wed 21 Sep 2022 10:00:35 +0000
ROA not before:           Wed 21 Sep 2022 09:55:35 +0000
ROA not after:            Wed 20 Sep 2023 10:00:35 +0000
asID:                     138881
IP address blocks:        103.140.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:84:88:ae:a2:25:70:74:65:ef:40:5b:81:53:f6:6f:71:25:05:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: Sep 21 09:55:35 2022 GMT
            Not After : Sep 20 10:00:35 2023 GMT
        Subject: CN=1D235FC8212EC0CDEB20BA87D5E5C776A2110073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:d3:f7:a6:38:f9:09:4c:d3:bb:a5:5b:38:
                    ac:92:83:45:6d:fe:25:f2:f8:d1:61:db:0a:e1:48:
                    7c:f6:91:b4:f8:e6:c1:47:cd:cd:3f:c2:d5:e7:a9:
                    88:04:42:65:21:54:29:9e:9e:20:0c:75:9f:11:ee:
                    fa:e6:5e:11:84:0f:b2:4d:3c:5f:3d:df:95:12:94:
                    7f:4e:24:7a:26:a4:76:3f:5f:4d:c4:6a:09:44:8a:
                    eb:a0:df:9d:e0:65:84:8a:53:fc:1a:28:a4:76:49:
                    d3:76:83:81:91:38:4a:a4:56:d6:20:15:a8:9c:83:
                    0e:2a:9f:77:ed:7b:8f:eb:6f:15:79:e5:f4:2c:36:
                    f5:5f:41:dd:ac:d0:fe:ac:0b:9d:ed:97:fe:ff:81:
                    f7:d0:15:df:56:d0:e5:b5:49:93:99:8f:f9:2b:1e:
                    16:1d:38:0d:df:57:52:8e:5e:ca:c9:66:ee:d9:11:
                    94:81:a1:88:ad:34:51:bb:82:81:00:25:66:63:f5:
                    bb:f8:55:5e:76:44:ff:a5:81:cd:1c:d2:15:15:38:
                    be:11:9d:bd:15:c3:f8:b7:91:1c:88:e0:31:50:8c:
                    4e:16:aa:00:51:f1:05:41:76:db:cd:39:d9:2b:d8:
                    9e:b8:cd:07:0f:8c:ab:ee:9a:15:f6:1f:2e:96:95:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:23:5F:C8:21:2E:C0:CD:EB:20:BA:87:D5:E5:C7:76:A2:11:00:73
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32332d3233203d3e20313338383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:03:44:2e:18:13:68:df:d1:88:74:e3:bf:32:52:72:f1:c3:
         f0:7a:c1:46:30:c1:57:6b:7a:ca:d2:53:e6:11:7c:7e:a3:e0:
         96:88:bd:14:73:32:3a:16:b5:78:ce:f3:2a:84:f1:f1:36:29:
         b7:b4:fb:8e:44:1a:8c:bb:39:c0:f9:f5:32:68:14:3c:1f:f9:
         49:4f:91:67:e3:d8:ba:c9:a0:f8:ac:93:99:1a:c7:98:57:9f:
         07:cf:f6:2a:4f:98:b7:77:82:66:c3:55:16:6b:16:3b:28:0e:
         2c:37:7c:86:05:da:a1:24:b7:67:17:04:fe:98:d8:25:9b:24:
         61:fa:b9:7c:8b:2c:39:ed:38:9e:be:3b:5a:56:eb:77:64:2a:
         1d:46:4e:91:d4:a2:cf:b3:85:3b:55:29:25:fe:78:7e:ca:fc:
         4c:05:e2:ba:dc:c8:af:44:02:78:ca:7e:fd:a1:e6:4c:1a:18:
         51:64:18:a1:3d:ba:69:5a:74:02:61:ab:bb:23:f3:6e:49:56:
         fc:68:39:be:08:c3:14:30:66:c1:db:a3:2e:a0:65:bf:b4:ca:
         f6:6b:e4:ce:91:e3:82:e1:e3:99:0e:42:fb:14:54:66:51:3a:
         02:11:87:da:7e:02:94:84:9d:31:4a:8d:0d:df:45:56:0b:c1:
         3b:65:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----