Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e302e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e302e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          thegE8gaT5Uf27ovK4RjS7ai54iLYo5XJnZUc//I9LU=
Subject key identifier:   70:71:0F:C1:43:AC:9C:81:67:74:12:D3:76:22:7C:42:97:6B:9C:D5
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       0FB1AD64C53CEF50FBD0EBC29C38353ED3503330
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e302e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:13:06 +0000
ROA not before:           Fri 17 Nov 2023 07:08:06 +0000
ROA not after:            Fri 15 Nov 2024 07:13:06 +0000
asID:                     10217
IP address blocks:        202.171.0.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b1:ad:64:c5:3c:ef:50:fb:d0:eb:c2:9c:38:35:3e:d3:50:33:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:08:06 2023 GMT
            Not After : Nov 15 07:13:06 2024 GMT
        Subject: CN=70710FC143AC9C81677412D376227C42976B9CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:a2:42:92:b7:bc:46:c3:e8:3f:5f:af:b7:
                    c5:73:e4:e5:58:f6:00:a8:60:ef:0c:72:c8:0f:4b:
                    9d:94:33:3d:01:5b:d9:8f:68:95:62:0c:12:35:36:
                    5e:d4:21:25:7d:3a:06:57:7c:48:45:ca:6a:7f:44:
                    65:75:cf:47:c2:bf:4e:ec:eb:eb:fc:a6:02:4c:67:
                    75:be:52:86:17:c8:61:87:48:f1:cd:a0:f6:9e:bd:
                    d1:9e:df:01:04:d0:86:39:d3:3a:3f:e7:7f:ed:d8:
                    55:3e:74:02:43:05:5a:4c:1a:5c:c8:d6:34:5f:90:
                    2b:03:0a:09:8c:44:91:6d:84:9b:72:54:3b:57:51:
                    69:8b:15:78:cb:cd:0a:cd:92:6d:0b:75:ea:4f:fe:
                    a7:14:18:8b:ca:b4:24:cf:be:ed:70:23:80:a5:b3:
                    6c:f2:65:52:9e:4e:d0:7e:bb:29:15:73:3d:3e:43:
                    2a:5a:48:61:4f:ff:6e:90:cf:c2:44:d9:cb:6b:ec:
                    52:42:c8:00:77:d7:31:e1:fe:57:85:0d:41:8d:f2:
                    38:ce:a7:5a:51:3b:29:69:3c:b4:24:03:d4:86:15:
                    7b:c5:42:e4:73:72:09:d0:5d:12:d9:fe:0b:b1:79:
                    93:bf:ce:d9:1c:22:2e:96:3b:9d:00:69:7c:e9:e0:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:0F:C1:43:AC:9C:81:67:74:12:D3:76:22:7C:42:97:6B:9C:D5
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e302e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:ef:74:65:24:2d:fa:1b:9b:c3:e4:1c:40:2b:86:8a:15:
         02:07:70:aa:9e:62:fa:b2:41:a8:d3:bd:da:52:a5:cc:55:6e:
         81:9f:e9:1b:30:61:5d:af:4f:65:bd:24:34:3c:f4:05:26:f4:
         2b:78:b9:d7:2a:83:84:40:f3:56:27:41:7e:c6:11:90:2f:73:
         ae:bd:d2:0e:95:27:2a:41:33:82:18:44:62:0a:d9:7c:bf:62:
         1a:21:33:96:a4:7a:92:ac:28:3b:ec:b6:14:21:c9:97:03:c6:
         37:55:4e:a7:de:4d:49:8c:0e:03:bc:7c:82:38:3f:2c:ac:fc:
         e9:92:21:9c:ba:ab:17:a8:36:ff:ea:96:60:9f:71:ad:0c:72:
         8f:ba:90:ed:69:25:19:fd:1c:5c:7c:3e:5c:a3:52:4c:eb:a5:
         f3:e8:75:24:fe:a6:c2:73:51:04:61:6c:09:bf:08:e9:6a:bd:
         4d:f6:02:8f:0b:63:98:f9:d8:06:74:38:4a:c6:0b:fc:97:ed:
         74:e1:2d:6d:09:14:98:ad:b9:97:0b:63:88:a9:da:a5:e7:0d:
         8b:5b:dc:7f:34:a3:ba:99:ec:c2:4c:68:5d:6d:e3:2e:b1:44:
         67:f2:21:6d:d4:3f:c1:0d:ce:97:cf:ea:7f:e0:7e:62:f1:08:
         85:3f:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----