Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31352e302f32342d3234203d3e203130323137.roa
File:                     3230322e3137312e31352e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier:          Nxx7lQFsuNTlrMojN6V+Di/Fx0jgOH5qvyHNGzvsLjc=
Subject key identifier:   63:8A:85:C9:B0:9C:AC:E4:34:18:30:FA:52:A1:83:B2:5E:8F:3A:E9
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       5E356330C81E6FFA4FB78987529D8504DFA9C649
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31352e302f32342d3234203d3e203130323137.roa
Signing time:             Thu 31 Aug 2023 06:00:05 +0000
ROA not before:           Thu 31 Aug 2023 05:55:05 +0000
ROA not after:            Thu 29 Aug 2024 06:00:05 +0000
asID:                     10217
IP address blocks:        202.171.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:35:63:30:c8:1e:6f:fa:4f:b7:89:87:52:9d:85:04:df:a9:c6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Aug 31 05:55:05 2023 GMT
            Not After : Aug 29 06:00:05 2024 GMT
        Subject: CN=638A85C9B09CACE4341830FA52A183B25E8F3AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:5b:f5:7f:70:ba:18:b8:0e:bf:aa:0c:1f:
                    6e:26:22:f1:29:4b:fe:ce:b7:94:57:e9:cc:2d:25:
                    c1:f0:b2:82:1b:c1:2e:0d:05:4a:d4:e7:2e:b9:b1:
                    f2:51:ed:da:05:86:61:0c:7b:00:21:f8:6e:fd:c6:
                    8f:df:b8:5d:5e:6d:ea:e1:34:31:ba:1c:34:ce:39:
                    2e:89:d0:12:5c:d7:de:76:ed:51:41:32:fa:4b:fd:
                    63:21:75:09:c5:ea:e1:bd:6f:1e:2c:32:2e:47:df:
                    e6:25:6b:9f:30:f5:56:cf:a6:9e:8f:cf:2e:bd:ac:
                    77:97:ec:9f:6d:9c:53:d1:30:3d:e7:58:60:7d:dc:
                    e4:83:c7:bc:4d:5b:f8:7b:85:17:48:73:f7:22:d6:
                    68:76:27:09:32:1d:1d:03:3f:b7:b7:01:39:f9:56:
                    44:14:51:b4:12:14:30:79:74:bd:e0:23:52:fb:ca:
                    75:f7:d7:4f:37:96:0e:07:fc:f4:55:fa:a3:ae:dd:
                    f6:46:71:af:b3:7c:e1:63:e2:15:b6:fd:a1:f8:e4:
                    07:d4:a7:58:77:81:87:2d:c9:09:98:e4:19:9d:3f:
                    3e:73:8c:d5:f0:fa:8f:46:2e:6d:9e:3d:3d:1a:76:
                    db:24:6b:9c:a6:52:2d:d3:0f:01:36:4a:4e:4d:23:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8A:85:C9:B0:9C:AC:E4:34:18:30:FA:52:A1:83:B2:5E:8F:3A:E9
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31352e302f32342d3234203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:94:a8:fb:5a:00:f6:98:e8:d7:0c:7a:c0:2e:52:56:9d:76:
         54:e9:cf:78:ca:24:05:1b:3c:c7:dc:b8:9f:d9:11:e9:bc:57:
         f5:06:38:fd:85:85:40:68:d7:18:64:8e:9a:70:da:a4:72:1d:
         af:3f:4a:42:4d:49:63:6d:d2:c9:0b:0c:65:ce:d5:09:d7:38:
         7f:0f:f2:f3:c1:0f:fa:2e:82:c2:81:57:ef:64:46:19:bb:fe:
         89:75:4d:73:b4:ce:8e:bc:a9:0a:5c:13:c3:d6:ce:e4:51:91:
         fa:01:8a:02:a8:9b:9c:c2:a5:13:70:43:4f:8e:8b:a7:eb:2e:
         09:30:d2:fa:89:ac:a3:ca:91:c9:7c:ea:24:21:7f:7a:35:ca:
         63:75:9b:3b:fa:fd:f6:f5:dd:b2:e8:7a:17:bf:d4:31:c4:be:
         0c:35:7f:ed:e1:ed:1b:96:52:e3:48:d1:cb:78:31:77:04:b5:
         ac:d5:eb:f8:8d:1c:c3:f7:ae:16:7b:27:ae:76:bb:3f:bb:10:
         97:ee:e1:a6:13:9a:36:2c:88:62:c5:92:d0:6b:55:98:4d:7a:
         05:4e:50:4e:eb:d8:b7:ce:50:15:4a:5f:25:78:86:e6:ad:3a:
         f1:c6:0f:6d:92:fe:83:bd:e8:25:67:0e:f0:38:b6:ae:db:b0:
         c0:06:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----