Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31362e302f32312d3232203d3e203138313132.roa
File:                     3230322e35372e31362e302f32312d3232203d3e203138313132.roa (raw, json)
Hash identifier:          FHpAEZ1iaxKr+UZCI3QOfevOrtZTeKdP4XIAENN6SK8=
Subject key identifier:   40:C7:47:6E:34:5B:6F:5E:1B:38:AE:6A:4C:2D:19:52:00:C2:F1:23
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       46665BE29E750EE2F02228F9A8692DF262736AD3
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31362e302f32312d3232203d3e203138313132.roa
Signing time:             Tue 18 Apr 2023 06:00:01 +0000
ROA not before:           Tue 18 Apr 2023 05:55:01 +0000
ROA not after:            Tue 16 Apr 2024 06:00:01 +0000
asID:                     18112
IP address blocks:        202.57.16.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:66:5b:e2:9e:75:0e:e2:f0:22:28:f9:a8:69:2d:f2:62:73:6a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Apr 18 05:55:01 2023 GMT
            Not After : Apr 16 06:00:01 2024 GMT
        Subject: CN=40C7476E345B6F5E1B38AE6A4C2D195200C2F123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:4d:2e:96:69:82:a3:51:2b:74:08:5a:9a:
                    04:f7:13:01:43:06:84:96:9d:6c:23:5b:a7:6b:b8:
                    40:dd:c6:bb:91:54:73:fe:a0:b3:b5:6a:0b:42:17:
                    de:a6:a5:7f:80:f6:2c:28:8f:e4:5d:5a:45:45:66:
                    68:ea:d1:e5:8a:c3:7a:dd:57:17:c3:43:d0:5e:03:
                    c6:f4:c6:71:62:b4:da:42:66:de:97:53:c1:fd:93:
                    75:2f:ab:81:ad:57:4e:83:4d:c8:d4:c7:70:8c:9b:
                    4f:13:85:48:4f:7a:8f:3d:10:a8:8b:69:57:ce:9b:
                    7b:37:64:fc:02:af:fe:b9:c7:e4:8e:71:b6:b3:36:
                    65:6a:a9:c7:c4:62:e0:39:a9:dc:b8:a4:6a:0a:80:
                    eb:67:29:c9:ad:e3:7a:7d:b7:05:80:fd:e0:4b:0e:
                    a7:78:f5:6d:a4:43:83:9a:1f:9f:7e:db:b0:c5:0d:
                    54:12:cf:7d:5f:57:11:17:d6:91:19:7c:7d:87:e3:
                    ea:81:1d:2d:22:91:b2:7e:28:81:11:7f:b3:8d:a7:
                    ad:f6:ff:6c:4d:c6:19:37:d3:22:5a:85:62:84:a7:
                    47:e4:ba:c2:c5:01:f3:ef:d4:b5:a6:8f:47:ae:31:
                    f8:12:d1:63:5a:78:e9:d6:2d:d1:f1:2c:23:58:30:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:47:6E:34:5B:6F:5E:1B:38:AE:6A:4C:2D:19:52:00:C2:F1:23
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31362e302f32312d3232203d3e203138313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:10:bf:40:39:5d:2f:e0:1d:35:cb:83:b0:2b:1d:57:e0:95:
         4b:54:26:20:73:9f:07:e0:50:0a:40:67:3e:d3:5b:38:30:4a:
         4a:52:00:7a:55:0d:ac:a2:52:3a:66:c3:19:7c:73:c9:18:5b:
         f6:0d:b9:a5:9b:e7:97:41:b1:87:0b:d5:67:15:ca:3a:92:fd:
         9f:44:8d:0d:cb:ea:5c:27:60:35:d0:a5:44:44:11:8b:d2:cb:
         52:23:89:72:15:c3:05:72:36:25:f1:c3:31:db:73:9b:6e:2c:
         15:c1:fc:5a:c0:79:c4:8f:80:68:d5:6b:26:db:29:80:c9:b1:
         36:90:b4:28:ab:2e:b0:5e:22:f9:43:7b:ff:46:c3:a5:67:90:
         7d:59:4a:30:c5:42:0f:b9:22:d9:0c:aa:7a:fe:1c:47:39:c8:
         fc:af:da:64:26:8f:ef:72:e7:3d:de:db:6c:17:a0:a8:76:37:
         d5:58:6a:a6:73:46:9d:11:6c:a4:0e:8c:a3:7e:41:71:cd:b9:
         ea:2e:b6:84:7c:08:00:ab:d6:5c:74:96:ba:75:f2:86:2c:c3:
         15:d2:a8:bf:28:c2:cf:52:59:93:41:fe:91:f6:49:bf:17:5d:
         db:6a:46:ad:91:15:39:9a:72:e5:3b:80:ac:3f:d7:7d:49:24:
         00:be:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----