Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31382d3138203d3e203130323137.roa
File:                     3131392e31312e3132382e302f31382d3138203d3e203130323137.roa (raw, json)
Hash identifier:          KcsSdvlkkd93OKFCt9tg/bPc3vc2POu6AIsHLJS15cU=
Subject key identifier:   70:47:A5:B0:EB:51:23:D4:B6:15:DE:19:B7:1B:78:BD:1B:98:70:B3
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       6DB65D1F15AA800990ED04534D904951DE3FACD1
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31382d3138203d3e203130323137.roa
Signing time:             Thu 31 Aug 2023 06:00:07 +0000
ROA not before:           Thu 31 Aug 2023 05:55:07 +0000
ROA not after:            Thu 29 Aug 2024 06:00:07 +0000
asID:                     10217
IP address blocks:        119.11.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:5d:1f:15:aa:80:09:90:ed:04:53:4d:90:49:51:de:3f:ac:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Aug 31 05:55:07 2023 GMT
            Not After : Aug 29 06:00:07 2024 GMT
        Subject: CN=7047A5B0EB5123D4B615DE19B71B78BD1B9870B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1b:07:55:b9:12:da:0c:7d:e5:ae:38:de:91:
                    46:2f:57:77:ef:cd:04:c2:45:11:a7:32:b9:6a:b6:
                    58:43:97:78:d6:48:35:06:42:9e:0f:cb:60:e9:8d:
                    97:5d:3f:9d:5c:c7:ff:0a:f0:49:8e:af:5a:d6:b0:
                    56:0a:13:79:d5:ee:47:bc:5c:87:b8:0e:d0:d8:23:
                    a2:cf:be:ae:42:da:d3:8e:de:81:1c:07:3f:2a:66:
                    21:38:99:d5:df:1a:ff:76:68:dd:00:c9:98:b8:24:
                    8c:01:b8:76:3a:7a:04:14:83:5f:1c:49:db:39:38:
                    2b:9c:7c:da:3a:ea:e9:59:56:02:12:92:54:2c:08:
                    be:55:42:bd:d5:2c:07:31:7f:f1:ad:9e:08:52:c0:
                    b2:cf:33:88:4d:c5:fd:2b:b1:87:5b:08:b6:3e:04:
                    c2:58:6a:09:f0:4a:6f:ea:5a:62:06:e7:8c:59:17:
                    99:f2:bb:a2:eb:b4:42:6d:83:4a:3a:10:a6:2b:d6:
                    06:20:7a:f9:ef:f7:15:19:f3:26:a5:06:2f:8a:b5:
                    5f:f5:5a:74:f5:42:30:c8:c8:0f:35:1a:ae:9a:93:
                    a8:52:1c:07:dd:9c:d6:5a:88:09:64:a7:4b:54:99:
                    cf:f7:5e:1f:9e:75:7c:47:a3:ff:2d:09:c9:5a:3e:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:47:A5:B0:EB:51:23:D4:B6:15:DE:19:B7:1B:78:BD:1B:98:70:B3
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31382d3138203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:ff:89:ca:ab:5d:d7:fb:ce:6e:7d:c2:e8:0d:a1:db:87:
         03:29:b3:97:17:f9:5d:5e:aa:42:8b:f8:3b:c6:12:98:da:c9:
         05:4b:b2:37:21:4e:e8:7e:8e:b5:70:16:20:4e:5c:1b:86:14:
         2a:91:75:37:5f:1a:7a:fa:34:d1:27:77:d3:a3:2c:78:b0:79:
         19:f3:1a:a9:6d:5c:20:1b:23:b2:3e:1f:6c:f9:da:85:12:02:
         59:6b:ca:3a:9b:a3:a3:c6:c2:10:59:18:45:53:1b:b7:b6:73:
         a3:c6:82:ad:1a:e0:57:d0:16:9b:8d:47:f3:71:3d:74:d6:33:
         89:d6:fa:8e:7c:fc:f8:3a:40:d2:b5:87:94:d9:44:71:da:52:
         b4:2f:ac:2a:9a:39:bf:e4:32:87:b3:4c:98:05:df:39:46:af:
         08:c0:12:8d:8c:a0:f1:89:18:3d:de:33:f2:72:6e:48:de:65:
         63:80:54:3e:35:66:41:cd:ba:a4:87:0a:e8:48:24:50:df:06:
         47:16:88:9f:c3:63:44:69:c7:f8:7a:be:49:73:63:d2:38:cc:
         15:07:8d:45:a6:2c:35:e7:54:53:86:fb:86:ab:36:87:68:f3:
         37:fb:83:0a:38:7a:a6:68:5e:d1:b8:a7:62:0b:88:ef:8d:13:
         d6:4b:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----