Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32332d3233203d3e203130323137.roa
File:                     3131392e31312e3132382e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          KYFKbmQ+ZUdepFH0QHRYaLTg8bBEOTieFC0uy2O7PWM=
Subject key identifier:   93:0B:C2:67:3C:61:E6:6F:89:CB:7B:CC:D4:F6:61:C4:74:CB:8B:D0
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       59CF92DE34BC48FC83D8E2A0A1C5663A18B22FCD
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32332d3233203d3e203130323137.roa
Signing time:             Wed 15 Nov 2023 05:01:01 +0000
ROA not before:           Wed 15 Nov 2023 04:56:01 +0000
ROA not after:            Wed 13 Nov 2024 05:01:01 +0000
asID:                     10217
IP address blocks:        119.11.128.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cf:92:de:34:bc:48:fc:83:d8:e2:a0:a1:c5:66:3a:18:b2:2f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 15 04:56:01 2023 GMT
            Not After : Nov 13 05:01:01 2024 GMT
        Subject: CN=930BC2673C61E66F89CB7BCCD4F661C474CB8BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:16:00:c7:21:f8:42:eb:c1:c1:39:a2:e1:
                    e7:16:8e:e2:87:c0:2e:0e:fe:18:19:c3:a6:40:2b:
                    c1:24:26:73:a7:c2:c7:1c:b0:e0:78:b7:74:14:ec:
                    4b:86:7a:c7:51:af:54:7e:e0:91:ef:9e:92:51:e1:
                    67:a6:19:1c:81:ac:90:d5:cd:ae:c7:a6:18:1f:25:
                    ef:87:43:71:eb:07:5a:48:3a:ab:f0:87:a9:34:99:
                    cf:93:02:dd:0d:71:cb:61:56:48:aa:b1:41:07:d4:
                    9b:0a:83:79:c8:d0:70:f1:08:d3:ce:d1:19:99:3d:
                    4d:36:d3:38:69:73:ec:01:f6:89:dc:e3:e7:20:20:
                    17:9a:08:66:b1:d3:78:6a:a5:a5:83:58:09:a8:01:
                    7c:bb:f8:30:37:2c:18:ee:f4:58:0e:ef:b9:38:7f:
                    8e:cb:81:57:1f:ca:ee:82:53:c2:54:8d:fc:43:6c:
                    ee:6e:b1:b8:29:57:3e:ff:e3:37:d9:17:09:55:9f:
                    c4:91:bf:b1:b4:cb:ac:fa:26:a4:73:a3:b5:86:b8:
                    6d:5f:72:ab:5f:29:98:6a:68:63:50:32:30:f3:a8:
                    3a:eb:07:69:e6:b6:aa:d9:5f:55:ed:15:9b:20:79:
                    e3:0a:4e:94:92:4d:0c:2d:8b:fc:b2:0e:25:fc:3a:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0B:C2:67:3C:61:E6:6F:89:CB:7B:CC:D4:F6:61:C4:74:CB:8B:D0
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:59:90:91:57:0f:83:31:72:44:fd:fc:bb:cc:0e:a7:f5:bd:
         d8:08:20:b6:a3:d2:e0:6e:00:d6:59:40:ec:3b:04:74:ab:aa:
         ae:d7:c9:81:0e:db:c8:33:30:8f:1d:2f:40:ec:23:ac:2c:23:
         ac:5e:93:9a:1e:bc:80:b7:63:8e:4b:b4:c5:b2:ad:a6:ed:ce:
         95:ce:17:2d:92:95:e1:0c:2d:39:75:c0:d4:1b:15:ff:8f:68:
         ad:43:45:6f:55:6e:64:06:9b:97:28:26:81:07:56:70:f9:40:
         ba:c1:25:ca:3f:f3:d2:88:4e:41:aa:d0:3c:56:62:47:44:5e:
         f8:73:78:4d:f0:40:b7:dc:32:c5:9f:99:f2:c9:80:1d:be:cd:
         bf:73:f5:81:e8:86:e5:40:53:4d:fd:c2:5c:ef:f4:29:14:d2:
         8e:73:ed:b2:b1:ac:17:bb:db:ae:18:28:49:92:67:cb:06:59:
         bb:ae:3b:c7:93:e5:9e:50:0d:37:62:15:1e:55:05:6c:19:7d:
         54:21:0c:77:2c:73:9c:97:2a:ba:e6:0a:3a:b0:50:c6:d1:00:
         b3:2b:e5:64:6e:e9:db:80:c8:36:a6:ab:c6:5b:a3:5d:9f:27:
         1a:a8:00:41:2f:3f:ee:bb:39:e6:e8:7c:4c:b4:6d:63:fc:bf:
         1a:8d:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----