Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e32342e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          Al/gw8trLZldDhc1AIGY0a8K9KYV0HJw+aHvqwEd7Zo=
Subject key identifier:   06:E8:8A:80:4C:77:65:88:B9:86:DE:81:82:2D:D5:D6:59:C4:28:2C
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       7E77CC8C96AFF06F3C417A22B6EA98C092F08826
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:21:23 +0000
ROA not before:           Fri 17 Nov 2023 07:16:23 +0000
ROA not after:            Fri 15 Nov 2024 07:21:23 +0000
asID:                     10217
IP address blocks:        202.171.24.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:cc:8c:96:af:f0:6f:3c:41:7a:22:b6:ea:98:c0:92:f0:88:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:16:23 2023 GMT
            Not After : Nov 15 07:21:23 2024 GMT
        Subject: CN=06E88A804C776588B986DE81822DD5D659C4282C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:01:6b:29:7d:9c:fa:6f:c5:f9:66:2d:3a:
                    f3:be:00:1a:bf:ff:5b:80:d0:e2:49:e2:aa:b5:a0:
                    44:7e:47:ae:06:10:3e:cb:09:75:e4:ea:4b:76:b6:
                    48:fe:35:14:87:66:5a:b8:eb:04:5c:f7:97:61:4e:
                    1d:ef:00:55:5b:69:fb:6c:7c:13:6c:2b:aa:39:03:
                    d0:f9:de:be:94:1f:77:4c:2e:66:2b:93:f5:44:6e:
                    a4:2e:16:f4:f5:35:41:d5:8c:b3:cf:ec:b7:24:a2:
                    10:b0:e5:1a:e9:6d:03:20:79:c5:2b:0f:53:4e:20:
                    8d:09:68:9c:a1:e0:d7:fe:cc:5c:cb:66:96:c2:99:
                    1d:a7:40:9b:25:52:12:7f:2c:e4:57:64:bc:69:19:
                    30:cb:54:9d:ff:d1:4e:6e:a5:e2:bd:47:bf:f9:26:
                    9b:ce:ad:ba:d3:32:68:d5:7b:26:9d:c6:7d:55:dd:
                    d7:f8:d8:c4:e0:00:d3:49:ab:30:e1:a9:10:df:a7:
                    86:e7:7e:96:06:ee:58:8c:21:63:ff:24:ca:86:23:
                    d7:2b:f4:8c:d9:b0:ff:b9:dc:ca:52:f6:b7:a9:49:
                    9b:b6:c5:92:21:61:7d:50:19:81:b2:00:74:a0:e4:
                    ba:51:fb:e9:8f:df:29:cc:07:44:78:75:ea:2e:0b:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:8A:80:4C:77:65:88:B9:86:DE:81:82:2D:D5:D6:59:C4:28:2C
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:a4:9a:6e:81:42:a3:42:20:03:69:ca:31:d1:57:b7:10:
         4e:ba:43:94:9f:72:bc:37:81:97:c9:65:f5:10:04:6a:d7:87:
         4b:be:1d:38:db:94:8a:e8:64:3d:13:36:8e:ce:af:d7:9e:b3:
         67:0e:8a:4d:5b:63:9a:56:b3:b9:a3:9a:01:38:a4:6a:9f:70:
         fc:6c:87:0c:d8:3a:4c:f2:b3:c8:12:4d:9c:b5:45:d7:ca:7d:
         47:d5:0d:fa:76:02:59:75:99:bf:ce:a8:73:80:8d:46:ef:27:
         e5:a1:56:ff:5e:e9:00:a0:fc:ac:48:1a:34:38:f8:48:11:ad:
         9e:e4:d8:1f:6a:40:e7:0d:0c:44:da:62:a0:8f:28:b8:44:d4:
         f0:cd:4a:17:8e:1b:9e:ad:13:b1:19:03:f5:8b:fb:ab:9d:4f:
         35:e1:1a:bb:30:9c:cd:01:f8:11:38:eb:ce:f4:2b:3c:6a:db:
         44:07:2e:6e:18:2d:a1:85:bf:98:83:91:ef:8e:04:1c:30:36:
         b4:02:fd:66:93:51:85:cc:e5:01:99:2c:8d:70:f8:61:53:35:
         f1:a7:25:7a:50:e4:1e:f2:74:57:60:09:16:9a:58:26:5e:40:
         2d:dd:15:c1:24:b0:fb:fb:3e:ab:15:08:95:ac:f8:89:f0:f8:
         e5:ba:52:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----