Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32372e302f32342d3234203d3e203130323137.roa
File:                     3230322e3137312e32372e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier:          g8VezVgt4knqHMVASi3dXXXewIm7IrNjVdofzM7Ri5g=
Subject key identifier:   00:FD:9D:1D:CA:81:E2:F0:B8:B8:F7:6B:FE:37:D9:45:8B:E4:9D:DE
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       47B0B0E5814EFE356C0A7B9E8AC3D49225DE68CD
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32372e302f32342d3234203d3e203130323137.roa
Signing time:             Thu 31 Aug 2023 06:00:04 +0000
ROA not before:           Thu 31 Aug 2023 05:55:04 +0000
ROA not after:            Thu 29 Aug 2024 06:00:04 +0000
asID:                     10217
IP address blocks:        202.171.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b0:b0:e5:81:4e:fe:35:6c:0a:7b:9e:8a:c3:d4:92:25:de:68:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Aug 31 05:55:04 2023 GMT
            Not After : Aug 29 06:00:04 2024 GMT
        Subject: CN=00FD9D1DCA81E2F0B8B8F76BFE37D9458BE49DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:78:d0:04:f8:51:df:a5:44:d3:34:2d:74:
                    99:6d:67:45:c9:90:ee:1d:f4:5b:8e:96:80:8c:af:
                    c5:c3:e3:ba:5d:71:e1:70:c0:1a:bd:ae:1b:1d:1e:
                    45:65:7c:b2:47:ee:79:e5:b1:2a:dc:05:ba:6e:95:
                    a7:6e:e7:ab:04:42:9d:44:43:ec:44:a5:13:ce:35:
                    30:49:b5:56:aa:19:96:4c:2a:f0:e7:93:cd:bd:40:
                    12:ea:4e:26:48:71:52:00:6e:41:05:1d:ba:6a:0c:
                    d0:5b:19:80:54:72:c1:c3:bc:de:c5:73:7c:2b:d8:
                    2e:09:ea:58:98:7c:63:fa:d5:d9:3d:39:c9:03:a5:
                    69:f3:77:fe:7a:bc:e6:11:eb:09:c1:c0:33:86:41:
                    48:d3:4e:3d:1f:b4:b6:39:c8:4d:9d:aa:02:8c:12:
                    01:e7:c6:1a:c1:54:91:8c:ab:c9:ea:4a:67:12:7a:
                    40:77:ef:f8:a1:49:d0:51:d6:ef:44:a2:b4:51:bf:
                    49:c6:19:a3:a2:d2:1e:f7:e6:86:7d:dd:c3:d8:b1:
                    1d:95:76:e2:7a:84:f7:0e:85:26:2d:2b:e1:ba:0e:
                    7c:74:33:df:ac:34:7c:14:e8:87:ec:18:26:99:84:
                    6d:0e:91:c2:b5:5c:48:12:16:69:c2:7f:64:a2:ce:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FD:9D:1D:CA:81:E2:F0:B8:B8:F7:6B:FE:37:D9:45:8B:E4:9D:DE
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32372e302f32342d3234203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:70:d7:9f:1a:83:a9:17:2e:1d:45:00:d0:a5:fd:21:64:
         69:51:ca:4a:13:ff:f4:62:9b:8f:11:1b:50:cc:4b:88:63:49:
         41:ca:0b:ce:4b:35:aa:2e:15:4b:d1:0e:f1:f6:fb:c2:d5:ec:
         d7:4f:bc:6e:82:46:57:c2:1b:2c:b1:7d:ad:e7:49:51:35:36:
         0d:4f:6a:96:cf:16:ac:20:9f:12:8d:3d:e5:ed:48:7d:d5:b7:
         c5:c5:5a:f8:9f:ee:eb:f5:6b:83:6d:11:60:c5:03:8a:3b:12:
         85:66:ba:3e:81:f1:4c:f6:18:3a:79:f8:8a:9e:7d:c8:d1:22:
         de:73:0f:3d:6e:2c:32:0f:3c:99:42:92:2a:81:49:dd:5e:78:
         67:27:b5:e9:58:93:57:17:28:09:0a:67:d1:b7:b2:db:00:f4:
         fa:67:75:74:54:d6:82:22:01:90:50:de:9d:e7:c0:85:58:39:
         10:99:84:11:bb:28:cd:ec:b6:91:4f:b1:a0:5d:d4:f9:d0:2f:
         90:09:b7:22:90:a5:87:eb:0f:26:8d:b5:f0:b5:d9:ba:32:76:
         cd:4a:1a:a0:6e:11:cf:e5:ac:02:d3:14:7b:a3:11:7d:08:7c:
         80:75:c7:24:ca:81:61:5a:03:f0:84:df:74:d0:df:80:83:11:
         a9:4a:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----