Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31342e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e31342e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          Iyp/WWqLGb99QePZ9AvXzkvwE5wbN/pgnkBZwtD5+Sk=
Subject key identifier:   D9:D0:5C:5E:0A:F9:8E:77:A1:6F:26:E2:A1:E5:8A:90:05:91:68:7B
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       46BEBA7ACFBE67A79C82E3848E29CA0F09B58F52
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31342e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:18:03 +0000
ROA not before:           Fri 17 Nov 2023 07:13:03 +0000
ROA not after:            Fri 15 Nov 2024 07:18:03 +0000
asID:                     10217
IP address blocks:        202.171.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:be:ba:7a:cf:be:67:a7:9c:82:e3:84:8e:29:ca:0f:09:b5:8f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:13:03 2023 GMT
            Not After : Nov 15 07:18:03 2024 GMT
        Subject: CN=D9D05C5E0AF98E77A16F26E2A1E58A900591687B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:a4:89:9a:7a:61:57:88:22:a3:87:07:cf:
                    40:fb:16:25:f3:60:0c:31:f0:57:f0:99:a0:5e:8b:
                    1c:3c:7a:ba:bd:5a:ef:da:2d:34:be:66:e2:d5:6e:
                    af:84:94:d7:c7:82:cc:cc:15:3d:2c:f0:d9:27:c5:
                    b6:12:75:9d:11:f1:7f:15:04:6b:a3:90:19:15:f6:
                    d1:b2:7d:08:29:52:cf:3e:17:dc:7a:ce:7b:30:15:
                    e6:82:15:4b:9f:e6:73:33:fa:4f:62:73:51:da:a6:
                    e6:fe:67:1c:f6:0e:98:a9:94:ac:77:d8:20:9f:5e:
                    2a:a4:c2:89:3c:25:40:f3:00:18:50:b6:8e:a6:e0:
                    89:49:ea:70:2d:82:d3:67:dd:64:6b:da:5e:23:3d:
                    a0:d7:76:4d:e8:88:4e:0a:c5:4a:d3:0a:2b:d7:1b:
                    39:a2:09:52:44:65:fc:49:61:21:7b:8d:86:05:ee:
                    02:4c:ab:9b:c5:56:db:9b:b4:a1:b7:b7:4b:25:47:
                    af:ca:7f:7f:55:98:fc:8e:48:13:c7:56:03:1c:5b:
                    29:2c:c2:98:5e:48:62:42:1f:50:e1:7e:23:22:ec:
                    81:19:97:76:d9:42:ec:e7:62:ae:0f:85:cf:f9:7d:
                    0f:84:2d:39:91:8b:69:ef:9b:59:eb:bd:d1:38:64:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:5C:5E:0A:F9:8E:77:A1:6F:26:E2:A1:E5:8A:90:05:91:68:7B
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31342e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:c4:fa:e0:cc:15:ee:ea:0f:b6:38:1c:92:08:2c:64:94:9f:
         0d:22:38:95:97:ba:91:6f:3d:15:93:ab:0e:3a:89:d0:d3:4c:
         3d:f8:4c:79:c1:fe:d4:39:20:71:20:8a:20:9f:ae:c3:1f:4b:
         f7:e8:21:f2:98:6f:12:9b:3c:08:02:c5:5a:16:34:48:e3:ca:
         a9:6f:06:76:ea:bf:35:ab:a4:ea:da:06:2f:33:51:77:a6:da:
         25:66:82:d4:b6:fb:5a:3f:7a:20:1f:55:1d:ea:e9:58:4c:95:
         08:72:88:cc:0d:f4:1f:65:0e:7f:ab:d3:8e:05:a5:03:dd:9c:
         b3:7d:b9:d0:50:0d:8e:56:de:ba:86:db:fe:d7:3b:5c:75:b1:
         7c:a4:3b:b5:0d:13:42:4e:5f:6d:95:1f:8f:d4:98:7a:dd:44:
         09:a3:1c:a7:b7:06:9b:5b:b1:35:45:96:42:d8:48:e5:bd:60:
         6f:7a:14:7e:1d:68:fa:06:de:0f:87:cb:c6:2b:16:ae:f6:6a:
         f7:c9:e6:73:0f:46:f7:c1:6e:96:01:45:01:e9:0d:15:bb:02:
         62:82:3b:93:99:12:43:dd:8d:13:8b:17:26:4e:8e:6c:f7:97:
         67:b7:20:ba:34:b4:98:40:43:40:e8:c7:7e:0d:1d:f5:8f:4a:
         b2:d2:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----