Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3234302e302f32302d3230203d3e203130323137.roa
File:                     3131392e31312e3234302e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier:          PMlakxHfjs5k2+dzE1ZlRzRw9CMttDW3DmZyx5CFbjo=
Subject key identifier:   64:F1:E8:4D:AC:9F:62:47:45:4F:E2:8A:C6:F8:0D:CB:73:5F:A9:46
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       34BFE86373B8ACDD68E8C288D93B5645FEF7892C
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3234302e302f32302d3230203d3e203130323137.roa
Signing time:             Wed 22 Nov 2023 08:30:26 +0000
ROA not before:           Wed 22 Nov 2023 08:25:26 +0000
ROA not after:            Wed 20 Nov 2024 08:30:26 +0000
asID:                     10217
IP address blocks:        119.11.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bf:e8:63:73:b8:ac:dd:68:e8:c2:88:d9:3b:56:45:fe:f7:89:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 22 08:25:26 2023 GMT
            Not After : Nov 20 08:30:26 2024 GMT
        Subject: CN=64F1E84DAC9F6247454FE28AC6F80DCB735FA946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3f:f5:a3:55:3f:d4:5a:37:49:88:f6:b3:15:
                    c5:c4:95:3c:4e:87:9c:ad:a9:91:87:09:40:15:4e:
                    aa:69:30:5c:0f:93:9a:ba:7c:2f:ae:34:a2:f1:3d:
                    42:e9:22:d4:a8:2e:e8:8b:5b:89:e1:7b:11:4d:a7:
                    ac:7a:9b:00:98:eb:39:5f:19:62:bf:55:1b:8f:0f:
                    39:6d:f4:4f:0b:24:c7:0a:4c:1c:88:a2:19:b7:c8:
                    fa:5e:74:a8:ee:c8:21:95:8a:a3:10:a2:ff:45:25:
                    b2:b7:26:83:3c:d6:bc:ee:cf:cd:cc:5b:25:35:87:
                    a2:57:73:e8:3a:33:ad:5d:6a:ee:ad:18:57:78:ca:
                    6c:dc:26:9d:5b:9b:dd:2c:bd:36:b2:99:24:6c:11:
                    f8:0b:4a:e2:00:1e:e4:77:63:5f:1d:9b:fd:6f:e8:
                    ff:77:4c:6f:0c:42:3f:f2:51:48:4d:e8:86:42:8a:
                    60:92:64:51:b9:3d:4b:57:0b:2e:84:62:fa:9f:7c:
                    84:2f:52:72:83:8b:9a:a2:0b:df:e8:24:92:5a:bc:
                    6d:2c:4b:c7:75:f5:8f:d1:24:40:c9:80:1c:f1:2a:
                    6d:1a:af:34:ff:00:ad:06:65:18:66:93:59:e0:f2:
                    7c:44:28:4d:4f:3c:9b:9e:3d:86:c9:d9:59:28:90:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F1:E8:4D:AC:9F:62:47:45:4F:E2:8A:C6:F8:0D:CB:73:5F:A9:46
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3234302e302f32302d3230203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:c1:19:24:af:2d:63:94:92:17:9b:32:55:e6:ed:cf:5f:9d:
         5c:f5:60:d0:71:bf:c8:e9:d6:7c:ae:5a:78:58:bf:29:f4:1e:
         77:4b:5f:13:2a:17:f5:8c:60:c0:bd:d6:40:a6:0c:70:3b:5a:
         e4:63:ca:aa:8b:ff:d6:32:d2:03:1f:74:df:73:85:9c:ab:49:
         d5:05:5d:28:79:0e:55:d2:b2:83:aa:2e:d2:5e:ea:bb:31:3e:
         34:d7:65:99:99:f8:30:db:eb:ee:f6:60:c4:df:c3:8a:a8:5d:
         ca:30:07:1c:0e:7a:8a:a5:d5:18:6d:c8:3b:d8:fe:3d:0d:cd:
         d8:7a:90:62:86:d2:8b:01:9b:93:aa:4a:18:77:dd:77:68:0c:
         80:a0:5b:d5:75:c0:fe:64:d8:b8:ab:68:67:a7:f0:19:62:7e:
         2c:59:f9:98:6b:f3:65:d3:93:91:1a:79:7f:1d:91:ee:ee:07:
         ae:1d:56:a3:0a:c3:8b:6f:43:9c:7b:d6:d0:0b:81:e9:10:b3:
         d6:4d:a7:61:57:cf:a2:2b:31:b2:98:c4:58:e2:4b:a9:65:9f:
         fb:8f:bc:ec:0c:6e:ac:91:da:98:3f:34:98:3b:bf:b3:17:06:
         42:db:a8:6b:b4:5f:52:3c:75:f6:95:8d:d6:f9:fb:38:36:ee:
         08:7f:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----