Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31322e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e31322e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          CRuYFGrsHfyDMPH9b95Up8ZKwsyDpHmVPptkYiXZu9M=
Subject key identifier:   33:E5:AE:96:B8:6E:5E:5F:A6:3F:96:B2:2E:74:24:10:0B:8C:A0:E9
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       62FFF03324B4100055C098C786663E4BF6FB9E95
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31322e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:17:06 +0000
ROA not before:           Fri 17 Nov 2023 07:12:06 +0000
ROA not after:            Fri 15 Nov 2024 07:17:06 +0000
asID:                     10217
IP address blocks:        202.171.12.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ff:f0:33:24:b4:10:00:55:c0:98:c7:86:66:3e:4b:f6:fb:9e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:12:06 2023 GMT
            Not After : Nov 15 07:17:06 2024 GMT
        Subject: CN=33E5AE96B86E5E5FA63F96B22E7424100B8CA0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:8d:44:82:53:a2:cd:07:9c:7e:a3:be:0c:
                    19:f8:8b:1b:12:2a:2b:57:34:5c:de:15:32:0d:fb:
                    51:fd:27:76:d0:a6:5b:e5:e3:09:7c:c7:bd:40:8c:
                    73:31:05:5c:d2:29:2d:23:79:57:3b:d3:c1:8f:32:
                    e6:22:60:8f:b5:fa:9d:a3:f8:ac:77:3c:03:f1:97:
                    66:3b:43:ec:fe:a5:ca:fc:2c:05:09:42:4d:23:64:
                    38:8d:61:29:77:bf:64:9a:5e:6e:d2:84:5f:2f:4e:
                    16:65:8d:24:3e:03:a8:13:b9:a4:be:ca:ad:80:a0:
                    17:ca:ad:10:d8:46:f2:50:b3:20:dc:a7:6e:08:50:
                    8c:8d:48:da:02:51:a0:3a:4b:e3:05:f2:82:23:56:
                    bc:0c:11:e0:ea:15:38:92:84:f4:57:36:06:74:91:
                    13:f3:69:fa:48:21:d9:a7:20:8c:f7:cf:76:9b:f9:
                    fd:92:35:54:ce:71:74:2b:9e:e9:3c:7e:3c:43:1b:
                    29:6f:ca:19:75:65:02:d8:c9:21:37:fe:61:a7:5c:
                    b4:37:14:db:e8:3a:33:17:a1:fc:dc:05:03:99:09:
                    ba:f8:89:05:15:16:c7:17:45:8e:1e:d7:82:f2:cf:
                    7c:89:f9:5e:bf:00:c3:12:00:b8:da:e4:cf:4c:ed:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E5:AE:96:B8:6E:5E:5F:A6:3F:96:B2:2E:74:24:10:0B:8C:A0:E9
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31322e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:de:1e:7a:5e:88:05:60:a9:64:18:27:ac:50:39:c7:db:81:
         30:01:d8:0e:0e:9c:84:9d:ed:6b:df:6f:d1:90:35:1d:62:71:
         d5:fe:b0:d4:be:73:ef:07:e3:32:8e:b3:fa:99:4e:3f:50:13:
         62:b9:a2:61:ab:8d:50:1f:ec:3a:0c:31:cb:bc:98:54:e9:97:
         b3:1c:0b:71:21:1c:68:7f:8d:1b:a8:29:bd:1d:d8:07:7f:78:
         08:5a:56:6b:41:14:54:9b:06:d9:63:da:c8:66:51:fa:7f:d2:
         dc:17:d3:2c:b4:be:cb:95:30:63:a1:d9:40:0a:30:b0:cf:4d:
         ae:5e:b5:06:16:8c:88:d2:bf:e7:2c:a3:1c:93:66:6b:e0:28:
         64:1d:01:4c:58:ca:17:0f:05:8f:e0:87:47:12:a6:46:61:1f:
         67:8e:27:73:75:d3:ee:40:b3:e2:21:4d:88:33:87:37:00:bc:
         12:50:5a:7c:93:b8:14:d3:7e:56:ec:1f:b8:b6:e4:e5:e5:13:
         ef:4b:6a:76:8f:cb:d6:c9:c7:c5:93:8a:f0:6a:2f:97:07:8b:
         b4:42:f1:b0:b2:d4:47:aa:bd:78:cd:26:d6:bf:14:a6:68:5a:
         6c:6d:2b:16:cb:35:e6:43:62:a6:50:6a:4d:a4:75:91:df:60:
         01:63:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----