Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e31362e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          yRyErAVlZgt0KCoGvxcWPBa7X5hBovM6YS02EMsq6oA=
Subject key identifier:   09:C4:5B:3F:83:EE:B1:F8:D4:91:89:78:31:FE:B3:1E:95:35:3A:B0
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       677228CBD6BC06B16164704C067424DC1E9A070C
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:18:45 +0000
ROA not before:           Fri 17 Nov 2023 07:13:45 +0000
ROA not after:            Fri 15 Nov 2024 07:18:45 +0000
asID:                     10217
IP address blocks:        202.171.16.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:72:28:cb:d6:bc:06:b1:61:64:70:4c:06:74:24:dc:1e:9a:07:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:13:45 2023 GMT
            Not After : Nov 15 07:18:45 2024 GMT
        Subject: CN=09C45B3F83EEB1F8D491897831FEB31E95353AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:6a:fe:48:d8:20:c5:1d:26:16:5e:ed:89:
                    cb:64:d3:86:2b:c9:fd:7c:5c:62:b0:4b:1b:35:2a:
                    81:e1:d1:98:3b:cb:9b:96:4e:df:da:e8:90:3b:11:
                    c9:8b:8c:98:25:1a:9e:09:de:c1:75:80:d0:63:19:
                    70:e4:ae:3f:86:14:46:36:7e:4c:d3:4d:40:8d:3d:
                    e9:1f:61:22:0c:08:b2:8e:13:6f:d4:98:c3:08:62:
                    24:e2:83:11:5b:37:56:93:f8:bb:10:98:9f:d2:d0:
                    79:a8:22:5f:55:2e:ce:94:c3:a3:7f:3b:3e:ce:3a:
                    24:d7:ff:cf:bb:38:c6:66:91:4b:12:c8:cb:c0:ea:
                    9f:ab:7c:52:8b:77:76:03:e0:36:f8:88:47:75:03:
                    45:2f:87:7c:c0:10:0d:72:31:ea:92:3f:ba:11:39:
                    00:72:fa:36:37:d1:95:66:7d:ac:a1:7c:6a:92:fa:
                    ba:a7:0b:59:6b:66:8f:93:2b:aa:38:21:a8:d7:6c:
                    e5:fb:1e:0e:1c:7e:99:2a:59:9f:9d:f8:fc:91:36:
                    24:de:00:7d:26:13:fc:3f:a2:ed:7a:76:e8:d8:be:
                    ce:6a:6c:aa:42:17:64:40:ff:18:69:17:48:b4:3d:
                    b2:7e:f8:b2:26:69:f2:f9:f3:f4:06:ff:26:ea:75:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:5B:3F:83:EE:B1:F8:D4:91:89:78:31:FE:B3:1E:95:35:3A:B0
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:ec:73:3b:50:af:6d:06:e0:f3:1c:ec:1c:92:ab:10:c9:
         6f:24:31:24:f0:10:75:b9:ec:6f:62:71:06:4b:07:bd:f0:19:
         be:f9:51:7d:7b:70:98:72:97:6e:44:18:43:f5:60:f7:34:d1:
         98:0e:12:f0:fd:6c:0c:bd:e7:9e:63:0e:52:f4:27:bf:38:7b:
         9b:7d:e2:66:95:a4:e1:d8:a2:06:2a:06:60:8a:34:f1:5b:c9:
         70:ad:c6:d2:ed:90:63:82:db:7b:a6:31:a9:ad:b9:82:9a:f3:
         09:47:4b:49:82:d7:54:82:5a:f1:be:08:81:7d:90:42:9a:24:
         64:27:40:f0:e9:3a:eb:3f:68:c3:c9:c2:1b:f5:a9:d2:df:75:
         8b:e1:c2:a1:70:9b:74:f8:c3:2f:a5:55:7e:2b:07:a9:c2:62:
         34:85:41:a1:48:11:32:cf:ed:06:24:ef:01:05:65:ce:b8:20:
         8a:40:62:de:3f:8c:f6:8e:e6:cf:bb:47:7d:79:b5:0f:5c:75:
         c2:44:1a:b4:10:da:1f:1d:1b:1a:d5:59:a1:5d:8f:2e:66:6c:
         7c:11:f7:d8:ed:c6:43:b2:ff:b9:45:75:a1:bf:5e:f0:4c:e8:
         a7:35:11:58:80:28:ae:05:26:76:8c:1b:78:82:31:b9:cf:1a:
         83:c4:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----