Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e302e302f31392d3139203d3e203130323137.roa
File:                     3230322e3137312e302e302f31392d3139203d3e203130323137.roa (raw, json)
Hash identifier:          SypNOK/uj04FKKokWRvywDLALzdUxTXtVF/SQ6EfeVo=
Subject key identifier:   F1:D2:D1:DE:36:1C:B8:CD:66:76:C7:40:B5:AF:48:51:B8:E1:A1:F1
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       47DEA9DCAE492D1071739F19B0FD052D41CE25A4
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e302e302f31392d3139203d3e203130323137.roa
Signing time:             Thu 31 Aug 2023 06:00:04 +0000
ROA not before:           Thu 31 Aug 2023 05:55:04 +0000
ROA not after:            Thu 29 Aug 2024 06:00:04 +0000
asID:                     10217
IP address blocks:        202.171.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:de:a9:dc:ae:49:2d:10:71:73:9f:19:b0:fd:05:2d:41:ce:25:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Aug 31 05:55:04 2023 GMT
            Not After : Aug 29 06:00:04 2024 GMT
        Subject: CN=F1D2D1DE361CB8CD6676C740B5AF4851B8E1A1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:8d:03:ad:4d:be:6c:9f:3d:59:b4:4b:c5:
                    49:7a:d3:37:19:b9:3a:4a:b2:10:9b:4d:4f:13:b6:
                    6f:c3:97:9d:7e:81:13:d0:d7:30:76:75:b8:83:a7:
                    5c:2c:3b:e4:ab:83:4b:f8:77:5f:ac:97:af:15:1d:
                    5a:8e:75:52:68:c4:8a:2e:81:64:8c:bc:48:0c:17:
                    b7:08:b2:87:e0:55:8d:4d:1d:65:e5:fe:89:94:1c:
                    3e:32:02:84:a8:cc:6d:df:16:36:2a:00:29:e1:b8:
                    16:6d:a4:d6:43:ea:6e:12:0f:97:06:0f:de:d1:e6:
                    9c:f2:a4:bd:58:2e:4c:a1:aa:dd:f6:c3:13:79:46:
                    8b:a4:95:3b:86:98:87:31:ca:09:5e:eb:a1:b8:9a:
                    ee:9b:b5:8a:8c:b9:ee:1f:b3:e3:96:cd:a9:f8:91:
                    1f:b8:15:45:b8:99:af:10:98:18:4e:d3:52:a6:d8:
                    13:3c:3f:a8:13:1e:59:8d:f4:ac:3d:42:5c:79:bb:
                    0f:b7:19:07:cf:49:6b:bd:8a:ab:df:ff:1f:92:73:
                    65:1a:4a:14:b7:ef:24:87:03:d0:b8:03:33:b7:20:
                    7e:3a:50:70:2a:b8:82:7a:2e:97:ab:fa:e8:96:99:
                    c0:c3:6c:81:a0:d3:c1:37:68:61:6f:24:f4:5c:eb:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D2:D1:DE:36:1C:B8:CD:66:76:C7:40:B5:AF:48:51:B8:E1:A1:F1
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e302e302f31392d3139203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:f1:90:7c:51:e8:8c:ef:2c:f0:2a:5f:f9:ec:67:96:75:3b:
         c4:3a:f9:84:ca:96:da:68:8f:a8:4b:8d:a9:c0:9f:4b:bd:f8:
         4d:31:a1:28:d7:01:16:42:84:7a:fd:de:dd:5f:e1:3f:c0:ab:
         3b:a3:00:38:ea:0d:83:bd:86:14:73:80:d2:42:59:fb:c3:91:
         c3:8d:a5:b7:35:4a:cf:6b:db:50:c9:85:92:ce:c6:b1:3c:80:
         34:8d:1a:99:84:1c:ec:bb:f6:03:3e:c2:9d:f3:b5:29:2f:56:
         33:cf:c9:f3:b9:22:41:4f:2f:0a:3f:73:d5:da:8e:bf:9f:91:
         8d:60:dc:58:d9:cf:df:72:d3:d1:43:e1:3f:db:e0:13:b3:f0:
         a7:85:d0:dd:d8:25:ac:77:a2:10:29:6e:4d:a8:2b:d9:84:39:
         2d:9b:68:02:a5:55:84:92:a2:fe:a7:24:2a:55:00:ea:21:ee:
         95:37:04:da:8f:52:93:d1:5e:55:57:88:6b:92:72:2a:1c:c5:
         8a:ac:9f:85:83:cd:d5:09:c9:9d:71:3b:93:0c:7b:62:8b:5d:
         21:63:3c:80:8c:73:65:90:4d:be:e2:9a:1d:36:20:b7:6e:c3:
         d0:45:67:20:29:da:5c:2d:1e:b1:9a:93:50:a4:31:8a:36:00:
         e1:52:e4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----