Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31392d3139203d3e203130323137.roa
File:                     3131392e31312e3139322e302f31392d3139203d3e203130323137.roa (raw, json)
Hash identifier:          3phXpIUzTZDERcx+5uXSvlVP6BMa6VOzq1M59ZUvsWA=
Subject key identifier:   DA:90:AA:67:9F:22:43:EF:AF:AE:17:4B:B3:BD:C0:16:5D:4E:0A:37
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       43B59DD16343709215E69C3D2CD439E5BD3F605C
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31392d3139203d3e203130323137.roa
Signing time:             Wed 22 Nov 2023 08:15:50 +0000
ROA not before:           Wed 22 Nov 2023 08:10:50 +0000
ROA not after:            Wed 20 Nov 2024 08:15:50 +0000
asID:                     10217
IP address blocks:        119.11.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b5:9d:d1:63:43:70:92:15:e6:9c:3d:2c:d4:39:e5:bd:3f:60:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 22 08:10:50 2023 GMT
            Not After : Nov 20 08:15:50 2024 GMT
        Subject: CN=DA90AA679F2243EFAFAE174BB3BDC0165D4E0A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:fd:0f:38:94:a1:d6:03:42:83:7b:9f:07:
                    3b:36:19:39:1b:d4:91:68:ad:f9:53:f6:75:cf:b5:
                    6c:6a:99:16:e5:39:71:43:d9:f0:1c:98:02:eb:7f:
                    d7:af:cb:6a:af:ad:1e:a5:6f:99:c7:08:03:86:40:
                    61:9b:42:88:5e:e9:cc:6c:e5:b3:25:21:82:05:52:
                    2d:75:b9:0c:cf:2e:35:d2:78:0a:c8:fb:41:6a:0c:
                    2e:86:6e:81:e0:1a:e3:c6:0b:99:ad:c9:1f:67:88:
                    76:e0:31:8e:18:ef:83:fb:3e:e7:84:1e:1d:2a:07:
                    11:6f:03:87:9f:ac:5a:fa:ab:39:b7:19:ca:ec:7d:
                    65:f3:c2:c4:93:31:c1:29:d4:91:61:ca:df:6e:c6:
                    82:1b:84:66:55:b8:e8:0f:f8:94:6f:36:b3:91:42:
                    86:83:e8:0a:5e:a3:fb:80:03:cc:12:8c:79:8e:cf:
                    62:a6:cf:e4:0c:7c:88:ac:ff:b8:fd:e0:b1:3b:f5:
                    dd:ac:8e:c9:e5:57:70:a5:93:ca:aa:ab:58:46:73:
                    02:92:64:2e:60:62:9d:12:7d:c0:0a:8e:f4:f0:12:
                    90:ac:76:ec:d3:55:83:8b:30:f8:53:f3:68:d0:b4:
                    20:e9:3c:7b:3f:25:34:df:ce:4a:dd:ff:99:c8:95:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:90:AA:67:9F:22:43:EF:AF:AE:17:4B:B3:BD:C0:16:5D:4E:0A:37
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31392d3139203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:be:0d:39:55:00:ce:0e:38:22:f8:88:d9:93:65:67:8a:08:
         f6:38:b5:bf:6e:72:87:82:bb:a2:df:5f:72:e1:88:17:d0:0a:
         b6:b6:12:26:63:a8:2d:e3:1e:70:52:b1:0d:76:29:e8:7d:d2:
         55:0d:42:15:92:87:69:d9:e8:68:58:b5:23:4a:2b:3f:b9:42:
         f5:77:43:d0:50:66:36:44:3e:a6:0e:6b:ac:c2:38:f9:16:27:
         be:c9:f5:d3:7e:6d:22:fe:9d:c0:12:c0:62:0a:ab:a7:2f:44:
         dd:3f:58:41:51:b9:76:b1:0c:9d:22:07:1d:1e:43:78:06:31:
         4d:76:9d:5d:24:03:69:b0:00:fd:85:73:86:cd:dd:ee:56:9a:
         10:ef:ba:26:ee:ac:c9:a7:8c:5e:ed:2c:53:74:3e:a6:ed:18:
         e3:4e:23:1f:b1:5b:58:0d:2e:1c:c0:cb:b2:f2:02:57:51:ba:
         94:94:47:a0:a3:c5:0c:e9:d8:f6:e1:e6:21:97:c8:94:67:8d:
         c6:b4:c0:72:6a:c0:01:df:9e:39:df:d2:b0:01:a7:58:ef:b7:
         63:9c:90:6f:1e:f0:1b:53:86:72:20:7a:40:59:b1:a7:76:77:
         54:14:01:90:2a:a0:c3:23:c2:bf:4c:56:e4:c4:40:7a:71:64:
         de:d0:ae:a2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQ7Wd0WNDcJIV5pw9LNQ55b0/YFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMjIwODEwNTBaFw0yNDExMjAwODE1NTBaMDMxMTAvBgNV
BAMTKERBOTBBQTY3OUYyMjQzRUZBRkFFMTc0QkIzQkRDMDE2NUQ0RTBBMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fP0POJSh1gNCg3ufBzs2GTkb
1JForflT9nXPtWxqmRblOXFD2fAcmALrf9evy2qvrR6lb5nHCAOGQGGbQohe6cxs
5bMlIYIFUi11uQzPLjXSeArI+0FqDC6GboHgGuPGC5mtyR9niHbgMY4Y74P7PueE
Hh0qBxFvA4efrFr6qzm3GcrsfWXzwsSTMcEp1JFhyt9uxoIbhGZVuOgP+JRvNrOR
QoaD6Apeo/uAA8wSjHmOz2Kmz+QMfIis/7j94LE79d2sjsnlV3Clk8qqq1hGcwKS
ZC5gYp0SfcAKjvTwEpCsduzTVYOLMPhT82jQtCDpPHs/JTTfzkrd/5nIlRqLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2pCqZ58iQ++vrhdLs73AFl1OCjcwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMxMzEzOTJlMzEzMTJlMzEzOTMyMmUzMDJmMzEz
OTJkMzEzOTIwM2QzZTIwMzEzMDMyMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXcLwDANBgkqhkiG
9w0BAQsFAAOCAQEAYL4NOVUAzg44IviI2ZNlZ4oI9ji1v25yh4K7ot9fcuGIF9AK
trYSJmOoLeMecFKxDXYp6H3SVQ1CFZKHadnoaFi1I0orP7lC9XdD0FBmNkQ+pg5r
rMI4+RYnvsn1035tIv6dwBLAYgqrpy9E3T9YQVG5drEMnSIHHR5DeAYxTXadXSQD
abAA/YVzhs3d7laaEO+6Ju6syaeMXu0sU3Q+pu0Y404jH7FbWA0uHMDLsvICV1G6
lJRHoKPFDOnY9uHmIZfIlGeNxrTAcmrAAd+eOd/SsAGnWO+3Y5yQbx7wG1OGciB6
QFmxp3Z3VBQBkCqgwyPCv0xW5MRAenFk3tCuog==
-----END CERTIFICATE-----