Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3136302e302f31392d3139203d3e203130323137.roa
File:                     3131392e31312e3136302e302f31392d3139203d3e203130323137.roa (raw, json)
Hash identifier:          fapOSh2wR7LyXQMf0tJiirqpUL5+k6tcNDUUKknEboU=
Subject key identifier:   5E:3D:C6:70:6E:8D:9B:54:E7:63:33:4A:48:F4:AA:4D:44:FE:11:A9
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       1AC85825A176FD1EAB8E80D85EA6B598A16B50A1
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3136302e302f31392d3139203d3e203130323137.roa
Signing time:             Wed 22 Nov 2023 08:15:06 +0000
ROA not before:           Wed 22 Nov 2023 08:10:06 +0000
ROA not after:            Wed 20 Nov 2024 08:15:06 +0000
asID:                     10217
IP address blocks:        119.11.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c8:58:25:a1:76:fd:1e:ab:8e:80:d8:5e:a6:b5:98:a1:6b:50:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 22 08:10:06 2023 GMT
            Not After : Nov 20 08:15:06 2024 GMT
        Subject: CN=5E3DC6706E8D9B54E763334A48F4AA4D44FE11A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:6c:e6:48:ab:29:59:5d:ed:11:58:a9:32:
                    72:3d:2f:86:e2:13:39:84:32:aa:5d:87:75:2e:da:
                    d5:0f:f7:00:cf:c6:9c:c6:e6:95:c6:9f:21:9c:8d:
                    03:a1:ad:f0:e7:c9:fe:da:ca:7b:2c:62:bb:fd:a2:
                    08:ea:42:21:34:00:72:33:ae:a2:0c:b4:e8:c7:55:
                    89:06:12:1a:86:13:c0:ad:eb:dc:ce:b2:03:1f:9d:
                    71:4e:3c:e2:2b:31:60:78:36:38:54:a1:62:e3:f7:
                    ff:5c:d6:ba:be:73:72:54:d8:8a:4a:93:dc:ec:29:
                    8f:e1:f1:d5:e9:83:25:b6:21:98:b5:3f:ef:67:5d:
                    3b:03:9e:f3:57:f3:68:82:fb:2f:6c:e3:4d:fe:db:
                    27:e8:4f:26:03:8e:12:a9:10:ee:b9:02:a7:ad:7e:
                    18:84:d6:a6:e0:1d:56:85:ed:d9:71:13:a2:e0:67:
                    b4:3e:b4:ef:96:be:b9:d0:44:50:5e:d0:39:58:b2:
                    4b:60:d0:a8:2a:d4:e2:06:b1:aa:b2:13:e5:f3:d5:
                    8b:62:32:7a:46:08:40:42:b4:d2:9e:30:65:5d:98:
                    77:3c:38:51:2e:d3:24:3a:6a:a1:21:9e:84:90:83:
                    22:d4:70:7b:78:d4:c7:38:1c:da:26:06:5e:36:1b:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:C6:70:6E:8D:9B:54:E7:63:33:4A:48:F4:AA:4D:44:FE:11:A9
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3136302e302f31392d3139203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:50:90:21:2d:4e:8a:c1:ad:9d:1a:dc:26:ba:0b:58:dd:40:
         1e:2f:c2:c4:1b:de:5e:c6:13:85:39:a7:3e:44:c8:2a:b4:eb:
         30:a1:46:77:bc:0c:6a:1c:08:57:d5:85:31:78:37:1d:9e:f5:
         8e:9a:b5:b6:49:6b:3f:97:fb:79:67:cc:8b:1e:f9:5e:09:e8:
         75:8d:23:0f:5e:0d:97:80:eb:5c:7a:a3:65:a4:bc:84:cb:b9:
         c7:af:20:7c:ec:7f:07:3b:51:3c:97:c4:6d:91:75:10:2d:18:
         d9:21:c9:57:c4:1d:3d:d0:e3:5b:cd:c1:a1:45:23:fa:44:de:
         f8:9f:36:d0:1a:52:ba:2b:d8:fd:b7:e5:1a:94:57:5e:bf:d5:
         21:d8:26:d7:bf:52:4d:25:4e:a7:5b:4a:31:a7:dc:71:30:5a:
         6e:bd:76:2b:f0:f6:fa:25:64:5f:7a:37:74:5d:0e:86:09:65:
         b5:9a:90:3c:92:a6:49:db:58:e8:1a:6d:84:5c:ec:37:d5:41:
         52:b3:ff:43:15:4c:8e:71:13:e2:20:4d:4f:b6:b9:f6:8a:fe:
         42:75:fa:5f:a3:c1:0b:e5:0c:8c:c9:65:d6:67:2e:87:bd:b9:
         a6:d4:fc:28:d1:71:6c:d4:96:e3:9f:15:e2:c8:16:8e:63:4b:
         e9:53:b8:a3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGshYJaF2/R6rjoDYXqa1mKFrUKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMjIwODEwMDZaFw0yNDExMjAwODE1MDZaMDMxMTAvBgNV
BAMTKDVFM0RDNjcwNkU4RDlCNTRFNzYzMzM0QTQ4RjRBQTRENDRGRTExQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXWzmSKspWV3tEVipMnI9L4bi
EzmEMqpdh3Uu2tUP9wDPxpzG5pXGnyGcjQOhrfDnyf7aynssYrv9ogjqQiE0AHIz
rqIMtOjHVYkGEhqGE8Ct69zOsgMfnXFOPOIrMWB4NjhUoWLj9/9c1rq+c3JU2IpK
k9zsKY/h8dXpgyW2IZi1P+9nXTsDnvNX82iC+y9s403+2yfoTyYDjhKpEO65Aqet
fhiE1qbgHVaF7dlxE6LgZ7Q+tO+WvrnQRFBe0DlYsktg0Kgq1OIGsaqyE+Xz1Yti
MnpGCEBCtNKeMGVdmHc8OFEu0yQ6aqEhnoSQgyLUcHt41Mc4HNomBl42G3lZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXj3GcG6Nm1TnYzNKSPSqTUT+EakwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMxMzEzOTJlMzEzMTJlMzEzNjMwMmUzMDJmMzEz
OTJkMzEzOTIwM2QzZTIwMzEzMDMyMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXcLoDANBgkqhkiG
9w0BAQsFAAOCAQEAAVCQIS1OisGtnRrcJroLWN1AHi/CxBveXsYThTmnPkTIKrTr
MKFGd7wMahwIV9WFMXg3HZ71jpq1tklrP5f7eWfMix75XgnodY0jD14Nl4DrXHqj
ZaS8hMu5x68gfOx/BztRPJfEbZF1EC0Y2SHJV8QdPdDjW83BoUUj+kTe+J820BpS
uivY/bflGpRXXr/VIdgm179STSVOp1tKMafccTBabr12K/D2+iVkX3o3dF0Ohgll
tZqQPJKmSdtY6BpthFzsN9VBUrP/QxVMjnET4iBNT7a59or+QnX6X6PBC+UMjMll
1mcuh725ptT8KNFxbNSW458V4sgWjmNL6VO4ow==
-----END CERTIFICATE-----