Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3235302e302f32342d3234203d3e203130323137.roa
File:                     3131392e31312e3235302e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier:          ywJjDfcDm+1B1kCpyWXKEaa85LHiERuSlpLFdql6W1A=
Subject key identifier:   AC:4F:5D:2B:64:8B:5F:C8:82:5F:27:B7:73:47:E4:6A:3F:25:2A:A9
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       14FF848C144D6AA9E760AF2AEFF8D4C7694BCE4E
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3235302e302f32342d3234203d3e203130323137.roa
Signing time:             Mon 28 Aug 2023 04:01:17 +0000
ROA not before:           Mon 28 Aug 2023 03:56:17 +0000
ROA not after:            Mon 26 Aug 2024 04:01:17 +0000
asID:                     10217
IP address blocks:        119.11.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ff:84:8c:14:4d:6a:a9:e7:60:af:2a:ef:f8:d4:c7:69:4b:ce:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Aug 28 03:56:17 2023 GMT
            Not After : Aug 26 04:01:17 2024 GMT
        Subject: CN=AC4F5D2B648B5FC8825F27B77347E46A3F252AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:94:63:4d:c4:49:60:46:2e:e7:a4:a0:83:7e:
                    ca:71:8c:9a:2e:ff:ac:23:95:36:25:1d:fa:23:b5:
                    7b:e2:11:9a:07:af:27:d3:83:f8:94:2e:10:2d:8f:
                    9f:3c:19:0f:c3:ed:96:30:b1:a3:f7:76:28:dc:a0:
                    f6:35:74:b8:a6:90:e4:65:d0:6e:96:08:7e:c1:e5:
                    56:ac:e5:22:05:fa:d1:c8:6c:e6:96:80:60:93:a9:
                    af:7b:bf:af:1c:85:a2:1f:b7:d0:cb:a7:32:d2:9c:
                    1c:27:26:1f:42:78:32:2f:cf:91:73:fa:6e:fb:3a:
                    40:a3:92:86:07:d5:13:e7:96:84:b6:b7:55:95:97:
                    5d:9e:c0:4d:e9:d6:fb:92:d9:3d:ea:8e:53:d0:a8:
                    8b:14:72:cd:d5:76:f2:2e:f9:a5:3a:af:be:29:19:
                    c9:b9:d0:c2:79:7b:f1:01:4b:4a:c9:88:4e:90:1d:
                    4c:b1:87:1f:47:af:3c:21:df:07:c2:27:0d:13:f4:
                    72:bb:a6:77:4d:81:00:41:e0:b2:21:cb:c6:9a:97:
                    b0:c9:c1:03:43:a8:ae:ab:7d:33:75:99:b0:73:b8:
                    3d:ca:60:a9:e4:ad:42:cc:72:cb:9d:3b:f3:fa:0e:
                    6d:96:fe:7b:13:fa:8f:c5:cc:2f:7c:04:5a:ea:be:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:5D:2B:64:8B:5F:C8:82:5F:27:B7:73:47:E4:6A:3F:25:2A:A9
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3235302e302f32342d3234203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.11.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:41:52:3b:dc:92:c0:68:b2:67:23:52:f3:60:fa:21:14:6e:
         6a:93:59:92:ba:96:0d:10:f9:61:51:9c:33:f6:d9:d0:ef:d9:
         a1:9f:d7:44:83:6f:ee:18:c0:5d:bb:5f:c9:01:f3:49:34:00:
         11:c2:b5:96:4c:27:ff:2b:ff:00:1c:42:56:ed:b0:a7:9b:49:
         44:22:91:87:63:01:33:1a:14:bd:fb:90:df:52:5e:67:0f:9e:
         60:60:a7:4a:97:25:cb:33:8f:34:ff:1a:55:81:43:75:94:d2:
         f3:96:50:95:d8:67:0b:06:32:3b:ea:35:18:ce:22:1a:8f:4c:
         73:5f:b6:59:10:0f:f1:83:f6:e5:66:34:ab:98:c6:c1:64:ad:
         d2:52:9b:1d:f9:af:5f:cb:3c:6f:28:da:d1:f1:5f:c5:39:33:
         6b:11:b3:44:7c:cf:be:5f:e3:a7:5c:69:b2:fc:02:b0:99:dd:
         8c:1f:bc:61:cc:0b:87:7e:95:65:0f:d4:fc:e3:e1:a3:ab:58:
         2b:3a:1c:03:c5:fd:28:b6:73:2c:36:38:ef:8a:a7:28:81:61:
         73:3f:3e:ff:1e:0a:4c:3e:bf:b8:a1:93:30:24:92:a5:6d:8b:
         8e:d9:1e:89:11:03:b9:52:33:7d:5b:af:43:c6:5b:07:03:f1:
         23:81:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 10:32:48 2023 by rpki-client on console-ams.rpki-client.org