Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3232342e302f32302d3230203d3e203130323137.roa
File:                     3131392e31312e3232342e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier:          tvfmFA6bGgZrHNfMXVPZFNRW3J46PM2532O8MzkrTXI=
Subject key identifier:   6C:22:8E:58:62:48:78:6A:FC:FA:53:EE:84:12:32:B7:57:42:5B:E3
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       5E415F73CA482257F76F9ACAF9274974ADB560D6
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3232342e302f32302d3230203d3e203130323137.roa
Signing time:             Wed 22 Nov 2023 08:29:47 +0000
ROA not before:           Wed 22 Nov 2023 08:24:47 +0000
ROA not after:            Wed 20 Nov 2024 08:29:47 +0000
asID:                     10217
IP address blocks:        119.11.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:41:5f:73:ca:48:22:57:f7:6f:9a:ca:f9:27:49:74:ad:b5:60:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 22 08:24:47 2023 GMT
            Not After : Nov 20 08:29:47 2024 GMT
        Subject: CN=6C228E586248786AFCFA53EE841232B757425BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:60:42:7e:ca:82:92:03:65:3a:18:97:ed:
                    57:73:0a:8b:bb:d7:27:f6:a5:53:85:1c:0c:1b:74:
                    b7:50:2f:81:57:99:53:6c:f0:4b:f3:87:7c:72:6a:
                    84:b0:12:88:c1:f9:42:1f:8f:3c:80:a2:98:d0:d9:
                    38:65:0b:09:35:e0:43:50:6c:54:cb:db:bc:78:9c:
                    fa:66:bc:bf:f3:26:ba:23:d9:3a:ab:30:fe:19:ab:
                    6b:c9:94:17:fc:c7:e3:9d:29:49:59:08:73:be:1d:
                    03:39:c7:2a:cc:13:c6:a7:3f:0f:71:cb:09:41:5c:
                    cc:a9:c4:50:0c:cd:6f:ba:31:8a:82:31:fa:74:e3:
                    13:54:36:6a:f0:d0:33:1c:87:09:15:d8:fe:a1:0d:
                    89:d0:68:bf:51:f7:8f:16:58:7b:b6:c2:41:c5:2c:
                    ef:17:67:73:fd:dc:64:62:e3:97:6d:16:f2:d0:8e:
                    7a:cf:24:ef:73:96:6a:19:26:6e:21:e5:1c:7b:ce:
                    48:12:47:64:cb:fc:10:4d:bb:85:fb:ed:28:b5:0a:
                    ec:dc:4a:75:61:65:94:d2:72:5a:e2:78:10:14:db:
                    91:d7:c3:93:e2:07:dd:70:71:95:05:e7:33:9b:be:
                    15:dc:a0:e7:1f:72:1b:bc:87:07:ff:b9:3e:85:7a:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:22:8E:58:62:48:78:6A:FC:FA:53:EE:84:12:32:B7:57:42:5B:E3
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3232342e302f32302d3230203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:7f:0f:a6:f6:09:bc:57:ae:d1:5d:34:d5:a3:66:41:4e:
         56:f3:94:f8:65:0b:84:83:d1:70:17:18:17:a8:b6:44:12:4c:
         e8:1f:3a:c2:be:7d:cb:09:91:b0:a6:94:06:9d:e6:8f:dc:4e:
         05:34:97:bb:24:9a:fc:f0:18:b1:ff:8f:ed:52:77:55:a6:b5:
         72:19:84:c9:22:2f:22:e1:77:31:36:b2:41:bc:62:9e:7f:5e:
         f3:a7:d9:a9:79:a9:b2:b2:a9:99:c0:0b:98:44:e0:dc:e8:5b:
         8a:9d:37:3d:cc:b3:1b:12:af:2b:c5:0a:a1:97:42:21:e2:fa:
         1b:af:68:aa:ba:c0:53:b1:44:1f:ca:a6:eb:db:cf:bb:8e:2a:
         50:f3:3a:29:61:db:b6:0f:d3:11:18:48:a1:8e:04:63:4b:f9:
         80:86:77:3d:c9:e3:96:c0:85:57:70:af:80:1f:e4:35:fa:1c:
         69:03:e4:fb:79:79:0d:d1:c1:46:1a:25:ad:49:ab:57:da:d6:
         28:06:ea:00:53:1b:9b:47:41:19:f4:aa:7c:8a:aa:9e:fc:35:
         4a:18:79:66:8c:98:ab:ba:20:e5:42:21:cc:04:65:33:58:a7:
         32:6b:f9:5b:71:aa:9f:96:99:1c:83:9e:02:13:eb:45:d5:9c:
         7f:37:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----