Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3137362e302f32302d3230203d3e203130323137.roa
File:                     3131392e31312e3137362e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier:          86d/Xnarwp6bBLmCzBFbY411wYzL/wlZ2EZXv+Jksg4=
Subject key identifier:   57:0A:E4:AE:CA:26:31:D1:CB:C3:B2:FA:20:72:E0:46:DA:2E:06:90
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       42E8B533419ACFAB9B59AF79F7037506A057DC8E
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3137362e302f32302d3230203d3e203130323137.roa
Signing time:             Wed 22 Nov 2023 08:27:47 +0000
ROA not before:           Wed 22 Nov 2023 08:22:47 +0000
ROA not after:            Wed 20 Nov 2024 08:27:47 +0000
asID:                     10217
IP address blocks:        119.11.176.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:b5:33:41:9a:cf:ab:9b:59:af:79:f7:03:75:06:a0:57:dc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 22 08:22:47 2023 GMT
            Not After : Nov 20 08:27:47 2024 GMT
        Subject: CN=570AE4AECA2631D1CBC3B2FA2072E046DA2E0690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:e1:46:0c:c5:e8:9b:e1:7b:88:8b:a6:8e:
                    24:40:37:4b:53:e0:b9:9e:96:7d:c8:c8:fb:db:f3:
                    30:c7:67:49:9c:2f:54:9f:82:14:8f:5b:4c:a5:2f:
                    49:e4:6a:51:42:68:45:7d:f0:56:c9:86:c4:a2:b7:
                    a9:f9:4c:ce:c0:de:5b:6b:15:66:38:a5:ba:40:57:
                    fb:6f:97:ab:fe:cc:f8:d4:88:b0:2d:fa:83:24:30:
                    4c:47:a1:4b:e3:1f:aa:06:5d:12:4a:b6:ca:79:4f:
                    a8:9b:79:88:47:67:6c:97:86:8e:2b:59:01:85:43:
                    7a:0b:74:93:2e:b2:fa:9e:4b:7e:97:88:93:d7:45:
                    8a:e8:8a:3b:cc:07:13:cc:12:5a:40:1c:bf:98:65:
                    5e:9b:ea:15:72:db:19:a1:40:18:eb:29:0e:e7:93:
                    aa:8b:bd:96:12:17:cd:c9:62:67:da:0c:9e:4a:3c:
                    0d:43:26:9c:cf:20:cd:c2:3a:37:48:09:b3:c7:c3:
                    61:f3:e1:da:b2:58:d9:fa:44:36:59:ea:c5:8c:cc:
                    e7:d2:fb:46:1b:22:78:ae:ac:63:de:8b:0f:f1:e9:
                    a9:e6:cb:64:03:bc:1b:b5:14:15:d9:dc:d4:98:0c:
                    c9:ea:ef:5f:0a:16:21:9f:b9:7b:b1:d7:78:58:66:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0A:E4:AE:CA:26:31:D1:CB:C3:B2:FA:20:72:E0:46:DA:2E:06:90
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3137362e302f32302d3230203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:a6:7a:24:a1:b7:dc:5d:61:1c:11:4c:c2:d9:1b:99:ee:
         26:c2:5f:5c:e4:d6:03:a8:8a:7e:ec:f2:e9:b1:e3:93:54:13:
         7c:00:c5:15:80:ce:99:b4:7a:67:be:b7:95:b0:af:c7:40:ba:
         be:a2:b0:bf:64:1e:2e:da:40:2a:ad:e1:c5:e3:9e:e9:7e:dc:
         19:f1:98:91:e5:e1:82:a3:97:ac:37:46:e3:fe:aa:01:c2:78:
         d2:2c:38:48:8e:49:d8:56:5d:22:fa:32:77:81:7e:2d:c3:43:
         14:ae:a6:2f:de:d6:03:ad:25:6d:50:89:ef:1a:75:91:1b:ff:
         00:7a:5e:31:81:41:97:3d:69:bf:a7:a0:f9:86:ff:8b:84:bf:
         e0:1d:32:94:63:5c:8b:c2:10:c5:74:63:2b:27:77:1d:11:18:
         6d:00:f8:e3:01:e8:c5:cc:62:bb:97:fe:a1:70:77:0a:93:39:
         36:38:db:17:83:09:0c:d9:26:b2:84:f2:bf:46:99:57:21:68:
         5b:07:f5:56:d0:4a:db:10:c5:e3:40:52:ed:b9:96:f5:e2:a7:
         63:ef:75:26:e7:24:77:41:a3:73:66:5d:dc:86:ac:98:c6:87:
         3b:d3:f3:3f:f4:9f:89:83:9c:eb:cd:77:1c:10:22:e2:cf:92:
         c6:02:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----