Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32362e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e32362e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          YSzHDjEpNtxZH2JV1RncOp4oyVLfrEJIVlIY5qbLLT0=
Subject key identifier:   E3:B2:FC:CA:B4:43:B7:C3:1E:32:22:30:EF:10:ED:18:D5:79:35:B5
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       5DD81A9725B9C143004C49CC328C775413CF88B8
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32362e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:22:31 +0000
ROA not before:           Fri 17 Nov 2023 07:17:31 +0000
ROA not after:            Fri 15 Nov 2024 07:22:31 +0000
asID:                     10217
IP address blocks:        202.171.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d8:1a:97:25:b9:c1:43:00:4c:49:cc:32:8c:77:54:13:cf:88:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:17:31 2023 GMT
            Not After : Nov 15 07:22:31 2024 GMT
        Subject: CN=E3B2FCCAB443B7C31E322230EF10ED18D57935B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:d4:dc:72:d6:e3:34:9c:8a:92:95:60:45:
                    20:22:dd:61:54:34:19:80:ea:90:9f:1a:cf:f3:69:
                    d7:8a:53:3b:81:fd:e2:cf:31:ca:99:84:fe:4b:0a:
                    71:a6:cb:6b:6d:c9:6d:92:77:8c:ce:15:1f:b7:77:
                    e5:a3:73:5d:3c:95:92:91:64:39:d0:32:d8:db:cf:
                    1a:41:76:57:b5:7c:19:e3:9a:6c:96:e3:59:bf:f0:
                    d7:98:46:76:0c:0b:e3:81:8e:6e:21:5e:95:95:aa:
                    fb:46:ec:b9:63:c2:0b:78:55:25:6a:27:0a:1e:ff:
                    79:97:eb:4c:30:ef:07:4c:76:3b:fa:e3:f1:b6:40:
                    fe:29:7e:83:2c:f9:8f:89:b5:ad:6f:79:69:33:35:
                    48:09:39:ca:cb:48:3d:9b:31:b2:82:ca:5f:82:43:
                    7c:3b:6d:dd:bf:dd:a0:6a:93:90:eb:d8:cb:24:0a:
                    7d:ce:f9:30:7b:af:e5:ae:45:59:69:3f:e6:49:e0:
                    81:41:be:fe:3a:4a:e2:5f:40:af:1f:3e:4b:10:9e:
                    76:04:20:5b:bc:6e:57:e9:57:74:c2:68:e7:16:83:
                    c8:5e:a0:45:3b:1f:a0:4a:48:26:89:64:c5:17:55:
                    38:8c:fb:c8:02:19:ae:1c:63:93:5b:3f:e6:d7:a4:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B2:FC:CA:B4:43:B7:C3:1E:32:22:30:EF:10:ED:18:D5:79:35:B5
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32362e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:2a:b4:d6:6f:26:ba:13:41:32:10:8a:27:11:0f:e9:91:09:
         12:83:74:90:55:b0:8f:5d:af:57:cd:47:c5:57:ac:e0:ba:75:
         fe:a5:ca:4e:49:b3:ee:e1:2c:ed:14:12:90:f8:84:dc:68:6b:
         75:52:b7:92:6d:2e:51:fc:31:4b:e7:d2:28:16:75:2e:34:cd:
         82:0f:bd:9b:df:ee:be:30:ce:24:0b:0d:dd:48:5b:aa:7f:74:
         f1:47:7d:2e:0d:25:d5:22:4a:45:a4:55:28:23:c6:a6:35:22:
         27:45:8e:94:a8:8e:84:b4:28:4d:c1:5f:78:7b:70:19:43:91:
         77:34:fb:6d:da:0a:1d:91:8f:c3:f1:44:af:33:b5:2a:a4:57:
         4f:9c:b9:44:dd:80:b0:ee:c2:07:01:e3:e5:35:ee:56:df:fd:
         4c:03:86:fd:fa:1e:bc:5d:0f:77:b7:8f:ba:ee:ce:61:bb:6d:
         a7:9d:8c:3e:7f:b5:73:16:c4:1c:0c:69:75:23:bb:d5:61:7f:
         16:00:f0:2f:fc:a4:ed:e1:36:ac:04:2b:64:12:6c:19:a2:20:
         ab:2e:77:1c:e0:4d:99:98:c9:98:8d:5d:3e:78:a0:8c:7d:0e:
         91:5c:f2:46:47:f5:ec:02:0c:d9:bd:75:45:90:96:db:49:07:
         00:04:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----