Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32312d3231203d3e203130323137.roa
File:                     3131392e31312e3132382e302f32312d3231203d3e203130323137.roa (raw, json)
Hash identifier:          ThwV4vElDNpBRXebroh2IHmGYEFgWDbCImxFGImN0aQ=
Subject key identifier:   07:0D:2F:1E:25:40:0F:D2:3A:E3:F9:B3:6B:AD:D2:79:16:96:55:33
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       3961D261E5E2461460BC302E06C5D6CA4B4A31DD
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32312d3231203d3e203130323137.roa
Signing time:             Wed 22 Nov 2023 08:38:02 +0000
ROA not before:           Wed 22 Nov 2023 08:33:02 +0000
ROA not after:            Wed 20 Nov 2024 08:38:02 +0000
asID:                     10217
IP address blocks:        119.11.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:61:d2:61:e5:e2:46:14:60:bc:30:2e:06:c5:d6:ca:4b:4a:31:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 22 08:33:02 2023 GMT
            Not After : Nov 20 08:38:02 2024 GMT
        Subject: CN=070D2F1E25400FD23AE3F9B36BADD27916965533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a9:9c:5a:22:b8:c9:93:ae:d1:63:10:aa:00:
                    4e:0e:d6:a5:4d:ed:10:ab:bd:7e:66:c7:0c:6b:4d:
                    1b:94:ad:96:76:8a:d4:8a:ad:25:a7:d2:f7:2d:04:
                    b3:9c:1a:15:25:cc:0c:c4:4c:c0:bc:69:38:64:d2:
                    70:d9:72:3b:eb:1d:a3:77:a2:60:0d:74:ee:e5:bb:
                    a4:3c:fe:5d:97:80:d5:06:73:6a:ba:80:55:48:eb:
                    65:c8:2d:19:8c:84:a3:cb:91:3d:a2:4f:22:fc:70:
                    2e:36:5e:b4:43:cf:5f:c0:13:b6:25:1b:ff:8e:f3:
                    fe:ae:a6:c9:6f:7e:b1:90:1a:25:f1:be:59:e9:ea:
                    97:d7:a2:0c:5f:f8:2d:93:b7:3a:77:e4:e3:96:64:
                    06:58:2a:fb:e8:11:51:06:c9:5c:7c:e8:49:3f:ca:
                    de:6f:55:eb:e5:14:b3:83:ee:40:e3:61:d7:b7:c5:
                    20:ec:9d:f1:91:7a:55:ea:e9:c2:a5:ab:e4:61:24:
                    03:ff:8d:d3:45:fd:50:02:9f:d8:9b:58:7c:d0:0e:
                    21:c7:92:21:55:5d:4c:04:a5:bc:a7:f3:0f:56:79:
                    fa:7e:03:e1:50:00:35:45:d3:99:cd:62:fc:37:93:
                    03:05:11:d6:f2:46:b4:79:09:0f:5c:58:fc:b7:6e:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:2F:1E:25:40:0F:D2:3A:E3:F9:B3:6B:AD:D2:79:16:96:55:33
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32312d3231203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:96:a0:b8:c5:8c:79:7c:e0:b0:fe:f1:7c:94:30:00:f4:58:
         f6:af:3f:91:a8:d6:54:e0:f3:01:f7:9f:45:e6:c2:c8:21:c1:
         3f:86:85:84:c5:2f:7a:d9:f4:ce:03:93:3e:9c:e7:c2:d3:1e:
         41:ef:4b:f4:67:f0:ed:6b:98:23:16:58:1a:bb:a2:2b:4c:c8:
         63:4a:e2:40:b7:c7:71:f2:f7:d2:20:cb:fc:19:9f:e1:02:9c:
         8b:7c:0f:91:57:a0:e9:3c:9a:91:f9:c8:9f:65:ca:6c:cc:3f:
         7e:3e:9f:55:1c:68:16:24:2b:4d:d5:58:49:56:04:84:10:1e:
         44:27:a5:32:60:fd:70:57:8d:06:65:66:26:f6:ba:07:e7:b2:
         b4:13:8e:4b:6f:b1:84:5a:ee:74:77:21:ea:7f:7d:c8:4a:92:
         84:f8:aa:c3:68:2e:aa:04:63:01:4a:b3:22:a2:19:7b:83:4b:
         d4:48:67:37:ad:b2:ef:e9:7b:5c:04:7b:ca:66:28:77:48:fa:
         4b:60:17:82:a0:29:12:3d:6f:f4:38:e0:96:75:ab:8e:05:9b:
         0d:a2:b9:26:db:61:8d:f2:cc:0f:a7:a3:4a:49:62:25:17:84:
         5f:07:77:1e:a8:14:c3:66:a4:0d:d4:cb:10:c5:c3:6d:bb:87:
         88:d7:34:42
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOWHSYeXiRhRgvDAuBsXWyktKMd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMjIwODMzMDJaFw0yNDExMjAwODM4MDJaMDMxMTAvBgNV
BAMTKDA3MEQyRjFFMjU0MDBGRDIzQUUzRjlCMzZCQUREMjc5MTY5NjU1MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwqZxaIrjJk67RYxCqAE4O1qVN
7RCrvX5mxwxrTRuUrZZ2itSKrSWn0vctBLOcGhUlzAzETMC8aThk0nDZcjvrHaN3
omANdO7lu6Q8/l2XgNUGc2q6gFVI62XILRmMhKPLkT2iTyL8cC42XrRDz1/AE7Yl
G/+O8/6upslvfrGQGiXxvlnp6pfXogxf+C2Ttzp35OOWZAZYKvvoEVEGyVx86Ek/
yt5vVevlFLOD7kDjYde3xSDsnfGRelXq6cKlq+RhJAP/jdNF/VACn9ibWHzQDiHH
kiFVXUwEpbyn8w9Wefp+A+FQADVF05nNYvw3kwMFEdbyRrR5CQ9cWPy3bjjnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBw0vHiVAD9I64/mza63SeRaWVTMwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMxMzEzOTJlMzEzMTJlMzEzMjM4MmUzMDJmMzIz
MTJkMzIzMTIwM2QzZTIwMzEzMDMyMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cLgDANBgkqhkiG
9w0BAQsFAAOCAQEAopaguMWMeXzgsP7xfJQwAPRY9q8/kajWVODzAfefRebCyCHB
P4aFhMUvetn0zgOTPpznwtMeQe9L9Gfw7WuYIxZYGruiK0zIY0riQLfHcfL30iDL
/Bmf4QKci3wPkVeg6TyakfnIn2XKbMw/fj6fVRxoFiQrTdVYSVYEhBAeRCelMmD9
cFeNBmVmJva6B+eytBOOS2+xhFrudHch6n99yEqShPiqw2guqgRjAUqzIqIZe4NL
1EhnN62y7+l7XAR7ymYod0j6S2AXgqApEj1v9DjglnWrjgWbDaK5JtthjfLMD6ej
SkliJReEXwd3HqgUw2akDdTLEMXDbbuHiNc0Qg==
-----END CERTIFICATE-----