Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31382e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e31382e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          1pHoAac/Bx8g63i3u4qtEUHnN2qv24FvAyI+PpFIXtA=
Subject key identifier:   DE:80:44:8B:1E:D9:5A:26:E7:F3:FD:01:54:59:C3:14:2F:EF:DA:59
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       2FC2F0C0E5E4F84B6DB126F99000C3F4C37C61FB
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31382e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:19:15 +0000
ROA not before:           Fri 17 Nov 2023 07:14:15 +0000
ROA not after:            Fri 15 Nov 2024 07:19:15 +0000
asID:                     10217
IP address blocks:        202.171.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c2:f0:c0:e5:e4:f8:4b:6d:b1:26:f9:90:00:c3:f4:c3:7c:61:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:14:15 2023 GMT
            Not After : Nov 15 07:19:15 2024 GMT
        Subject: CN=DE80448B1ED95A26E7F3FD015459C3142FEFDA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:39:55:3f:6a:f9:88:b5:33:e5:0c:cc:33:
                    07:45:e2:10:f2:cb:9f:a7:a3:29:0d:25:02:c4:bb:
                    2f:4a:4e:ff:cf:a3:76:da:da:f3:48:bb:8d:a0:ed:
                    f6:13:69:0f:c5:44:6d:ab:1c:41:31:a2:1b:a3:1d:
                    82:ad:12:a8:1d:e3:f3:55:d0:9d:27:19:87:d1:54:
                    30:8a:e1:b8:27:3d:a2:0d:00:5f:ff:3f:aa:21:3f:
                    e6:e9:bd:85:cd:68:85:39:96:60:75:a8:47:dd:e1:
                    4c:e5:02:6b:4b:84:95:ee:b3:05:8a:8d:76:50:50:
                    ee:87:46:ba:31:cf:91:46:d1:29:2b:db:3e:c6:48:
                    95:2e:0e:4e:fa:eb:82:a7:b2:12:60:bf:d6:48:00:
                    b4:a6:17:de:29:06:43:7b:ef:be:c8:97:b8:2f:48:
                    a9:c6:80:63:fe:34:f9:a1:28:14:2c:69:cf:4b:59:
                    c4:79:f2:4a:b4:6b:36:44:0c:9f:64:46:ae:df:e9:
                    d2:2f:4b:ee:6e:2d:52:7e:0c:61:eb:0f:58:0a:30:
                    dd:88:46:fe:b3:3f:32:82:5b:aa:6c:11:19:07:df:
                    08:9c:da:30:53:14:97:52:f6:18:f5:17:07:7c:4d:
                    b2:e4:c3:82:88:18:af:bc:25:b0:95:08:8e:43:ce:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:80:44:8B:1E:D9:5A:26:E7:F3:FD:01:54:59:C3:14:2F:EF:DA:59
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31382e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:c9:b6:24:d4:d9:b7:3e:83:7d:71:17:42:ac:ed:23:1f:
         22:09:8a:3e:5f:a2:c5:d2:34:5b:15:76:bb:b8:4b:08:dd:84:
         c8:ef:a5:8f:e2:56:30:93:7a:42:14:54:93:a4:a1:0b:eb:9f:
         42:c2:39:bb:09:c7:06:5d:45:5b:ea:45:c0:60:fd:42:af:76:
         5b:ec:b7:1c:92:bc:dc:75:02:0a:8c:f0:01:2a:3a:87:38:ce:
         49:48:bc:95:4a:58:ea:d9:fe:f3:0a:df:3d:8f:d7:6a:02:de:
         ed:97:c3:8f:94:14:e9:1d:46:8b:2a:41:13:6a:7a:c2:e3:7b:
         03:6c:3b:12:d7:05:ea:1a:1e:d2:42:06:68:8b:09:d0:9d:03:
         28:69:ec:e3:34:bf:60:a2:51:38:1a:41:03:7f:85:06:d5:52:
         9f:34:13:1e:5d:4e:f8:09:7c:77:bd:fd:d2:92:10:76:81:8c:
         70:78:d7:a0:c6:6b:40:a1:36:e0:19:32:ed:1d:1a:c2:a4:6c:
         94:d5:72:6a:94:7f:64:eb:05:3e:16:99:67:71:fd:0d:d4:7e:
         f8:48:b7:6e:e1:d3:8c:a4:cd:27:f6:93:9c:0a:e3:c9:fb:a4:
         1d:cb:fe:63:08:99:92:dc:2b:7c:08:8f:ed:ff:94:1f:c3:8c:
         97:bb:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----