Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e362e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e362e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          1ftneoVg+ZLDz3aF1NhWskn06b4AH08qwpqQ/DuH8V8=
Subject key identifier:   29:21:FE:C7:FF:C0:45:71:1F:83:A7:43:A9:5C:0E:6D:01:69:72:44
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       4121A43ED1E4AE85B69AC295011589349B4F9AFB
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e362e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:14:48 +0000
ROA not before:           Fri 17 Nov 2023 07:09:48 +0000
ROA not after:            Fri 15 Nov 2024 07:14:48 +0000
asID:                     10217
IP address blocks:        202.171.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:21:a4:3e:d1:e4:ae:85:b6:9a:c2:95:01:15:89:34:9b:4f:9a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:09:48 2023 GMT
            Not After : Nov 15 07:14:48 2024 GMT
        Subject: CN=2921FEC7FFC045711F83A743A95C0E6D01697244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:71:5b:7c:5e:7a:04:82:9a:f8:ee:70:95:
                    8c:d9:bf:7f:fb:6a:6d:65:7e:2b:22:db:03:a1:38:
                    f6:87:81:4d:bd:9d:15:7d:0c:ba:f1:36:f8:2d:e4:
                    d4:ea:f7:d0:f1:7d:9e:8b:46:e9:8a:3b:63:8a:54:
                    be:4e:46:e8:be:e9:28:11:90:a4:c0:7d:e7:fb:fc:
                    27:2f:63:93:70:0c:a8:44:d0:b9:d9:f6:f8:ac:72:
                    72:b5:b2:c2:3e:9c:ea:8d:77:93:56:89:9d:d2:0a:
                    df:79:72:82:ce:83:9b:da:6f:9c:f0:4e:34:33:87:
                    3b:fe:c2:89:6c:cb:dd:d9:c1:c1:4c:9e:3f:df:f1:
                    ff:e3:70:82:8b:8b:49:80:ac:4d:bf:3c:16:6b:1a:
                    8a:ad:fd:d6:d5:ec:69:21:bc:e9:c5:65:77:65:6e:
                    f0:ff:bd:85:0e:ee:94:ff:61:fb:37:f2:0d:5c:4c:
                    08:b8:d6:57:d9:41:46:2c:9c:f0:66:9b:6a:c7:0c:
                    c0:7b:0b:86:9a:14:bc:9b:ed:a3:4e:1e:f5:27:ed:
                    c0:27:f9:a2:40:5f:77:c6:76:05:4d:74:4c:45:e6:
                    4e:8f:c3:7f:41:fc:4e:1d:d4:ec:2f:1c:79:71:8c:
                    f2:55:ca:26:e5:72:43:87:c7:59:99:c9:0a:da:44:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:FE:C7:FF:C0:45:71:1F:83:A7:43:A9:5C:0E:6D:01:69:72:44
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e362e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:07:02:fc:be:a8:cc:dc:cb:b8:a7:fa:75:10:3e:c7:0a:
         12:7c:17:68:77:05:09:3e:6e:77:56:08:72:f6:54:a5:57:3a:
         a3:a7:d7:a6:89:e8:c6:82:50:3c:f2:4e:c3:5f:49:6c:31:a9:
         35:9c:9f:c2:a2:10:e8:27:6c:47:34:cd:0c:b2:65:c4:e4:16:
         e6:a3:bc:98:7d:36:23:1f:0d:c6:67:1a:6d:f4:bd:59:c0:61:
         1a:5f:52:de:fa:7f:1d:df:76:0b:c3:10:9b:67:01:17:56:9c:
         81:34:05:91:69:da:8f:f5:a8:65:26:e8:b3:90:85:a7:94:7c:
         dd:33:7a:46:f4:52:af:cb:ef:25:e5:c2:98:8c:f2:23:5c:72:
         a0:71:d5:c0:d5:77:3d:ac:49:92:90:da:9c:3e:ce:05:88:72:
         7c:b3:a7:6d:cb:e3:92:de:fd:63:8e:fe:df:bf:c8:dd:ba:48:
         f7:1e:ba:d5:0d:5c:b1:6d:97:aa:90:f9:8b:e3:1f:35:10:1c:
         0c:5a:6d:a3:3a:b3:98:81:be:56:e2:7f:6d:62:4f:65:79:b4:
         63:3d:e6:c3:61:dc:cd:62:2c:74:0b:42:10:ce:7a:5a:cb:b6:
         a7:36:61:8c:c2:f0:d7:ed:a0:09:1e:4e:78:bf:ba:47:7b:d8:
         26:a2:34:a4
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQSGkPtHkroW2msKVARWJNJtPmvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMTcwNzA5NDhaFw0yNDExMTUwNzE0NDhaMDMxMTAvBgNV
BAMTKDI5MjFGRUM3RkZDMDQ1NzExRjgzQTc0M0E5NUMwRTZEMDE2OTcyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFY3FbfF56BIKa+O5wlYzZv3/7
am1lfisi2wOhOPaHgU29nRV9DLrxNvgt5NTq99DxfZ6LRumKO2OKVL5ORui+6SgR
kKTAfef7/CcvY5NwDKhE0LnZ9viscnK1ssI+nOqNd5NWiZ3SCt95coLOg5vab5zw
TjQzhzv+wolsy93ZwcFMnj/f8f/jcIKLi0mArE2/PBZrGoqt/dbV7GkhvOnFZXdl
bvD/vYUO7pT/Yfs38g1cTAi41lfZQUYsnPBmm2rHDMB7C4aaFLyb7aNOHvUn7cAn
+aJAX3fGdgVNdExF5k6Pw39B/E4d1OwvHHlxjPJVyiblckOHx1mZyQraRP3nAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUKSH+x//ARXEfg6dDqVwObQFpckQwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMyMzAzMjJlMzEzNzMxMmUzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzAzMjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKqwYwDQYJKoZIhvcN
AQELBQADggEBACapBwL8vqjM3Mu4p/p1ED7HChJ8F2h3BQk+bndWCHL2VKVXOqOn
16aJ6MaCUDzyTsNfSWwxqTWcn8KiEOgnbEc0zQyyZcTkFuajvJh9NiMfDcZnGm30
vVnAYRpfUt76fx3fdgvDEJtnARdWnIE0BZFp2o/1qGUm6LOQhaeUfN0zekb0Uq/L
7yXlwpiM8iNccqBx1cDVdz2sSZKQ2pw+zgWIcnyzp23L45Le/WOO/t+/yN26SPce
utUNXLFtl6qQ+YvjHzUQHAxabaM6s5iBvlbif21iT2V5tGM95sNh3M1iLHQLQhDO
elrLtqc2YYzC8NftoAkeTni/ukd72CaiNKQ=
-----END CERTIFICATE-----