Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3233203d3e203338333230.roa
File:                     3130332e3136392e37322e302f32332d3233203d3e203338333230.roa (raw, json)
Hash identifier:          EyKUEFRgFZUbRpFFhB7A4wINv8vYoYfuXsD6Bl1N5jU=
Subject key identifier:   34:C3:DA:CA:E7:F8:AE:DE:43:84:6B:63:0B:8B:F0:C4:8A:87:80:38
Certificate issuer:       /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Certificate serial:       114F989270788544A78D1FA84CB9E98B6F436069
Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3233203d3e203338333230.roa
Signing time:             Thu 21 Jul 2022 07:29:54 +0000
ROA not before:           Thu 21 Jul 2022 07:24:54 +0000
ROA not after:            Thu 20 Jul 2023 07:29:54 +0000
asID:                     38320
IP address blocks:        103.169.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4f:98:92:70:78:85:44:a7:8d:1f:a8:4c:b9:e9:8b:6f:43:60:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
        Validity
            Not Before: Jul 21 07:24:54 2022 GMT
            Not After : Jul 20 07:29:54 2023 GMT
        Subject: CN=34C3DACAE7F8AEDE43846B630B8BF0C48A878038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:b1:96:03:ed:9b:81:94:d5:cf:19:42:fa:
                    71:cc:27:11:41:2c:b6:22:7f:60:5f:7b:9c:5b:e4:
                    a7:60:65:33:bf:16:98:5d:25:ba:c8:b5:fe:7b:00:
                    04:d0:a6:62:31:7c:16:ff:86:7f:87:09:f5:6d:d7:
                    ad:18:9e:c6:4b:b6:f9:2e:88:3f:f6:3e:ab:12:6c:
                    f3:29:97:91:04:57:14:1d:f1:3b:be:4a:23:c2:c9:
                    b6:19:fc:ee:28:a9:2d:e4:44:85:84:35:c5:52:b7:
                    a7:b3:e1:4c:73:7f:ba:dd:e8:86:e9:b2:8f:d9:59:
                    54:51:e9:08:0a:9b:7c:e3:67:7f:95:19:e0:50:4f:
                    6f:4d:56:d1:c0:55:3a:0b:f6:38:87:2a:46:fc:f2:
                    52:6e:4a:25:07:04:ba:74:a6:fe:4b:dc:27:56:1e:
                    38:dc:39:e5:4d:14:27:fb:f9:de:53:52:f7:fa:f1:
                    7d:c2:4b:0f:cf:40:cf:fa:71:3d:2e:d4:f7:d9:c5:
                    bc:b2:5f:a2:76:07:be:a1:44:e2:e7:ef:ea:c2:ce:
                    b0:ac:30:00:69:34:25:bd:d8:b9:fc:6d:6e:6a:ca:
                    10:f1:49:17:2a:45:6f:54:ee:f2:97:fc:51:3e:a5:
                    9e:88:dc:ef:f1:c2:c5:d9:16:ab:c2:c9:3b:39:79:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C3:DA:CA:E7:F8:AE:DE:43:84:6B:63:0B:8B:F0:C4:8A:87:80:38
            X509v3 Authority Key Identifier:
                keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3233203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:00:0e:01:9b:47:0f:5e:ed:c9:45:aa:a2:9d:41:54:68:
         54:dc:a5:26:d5:7b:83:a4:8e:6f:ae:c2:23:ab:34:c8:f0:ef:
         6a:51:36:7d:76:c7:b6:d9:9c:fa:8a:fd:1c:e4:8d:0e:3f:d8:
         d7:46:17:6f:fc:9a:1b:b2:01:22:15:47:af:a5:dd:2a:6e:b3:
         35:b0:7c:fd:cd:af:1c:6d:bf:03:05:33:bf:76:99:6c:be:f6:
         c3:ac:49:51:97:d3:00:01:40:f4:d2:4e:ff:e0:bf:53:d6:8f:
         d0:19:34:6f:6f:7d:1e:b8:54:41:37:17:1f:05:7d:b4:ae:a3:
         75:d6:86:78:da:a0:6a:63:56:ef:7d:2c:0c:62:cd:60:50:e0:
         77:f0:45:2a:ed:48:08:e9:d7:03:75:a5:9e:ea:0e:1a:14:b7:
         de:d7:4f:ef:2b:9f:af:6c:3d:53:d4:85:cb:d3:0e:f1:48:dc:
         87:57:a5:4f:20:d0:d9:23:17:fc:49:b8:59:d2:fb:c2:46:94:
         85:51:6b:5e:f4:b8:6e:26:dd:0b:39:db:a0:bb:7d:9b:cd:17:
         a1:2b:7b:b5:c1:a7:68:c7:ec:d1:af:f6:b1:29:04:4c:f3:d0:
         e9:4d:8c:2f:25:2c:8c:72:f5:e0:21:f5:62:fd:ba:9f:75:17:
         43:aa:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----