Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32312d3231203d3e203130323137.roa
File:                     3230322e3137312e382e302f32312d3231203d3e203130323137.roa (raw, json)
Hash identifier:          eqHTyCYNmNMKh0tMNPy/8uTyGu9yD8GvYY2uMZLMgTA=
Subject key identifier:   3F:F6:F9:BA:D8:C6:0B:3C:C0:90:A9:4F:23:21:C6:22:AE:03:73:36
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       0BEE8B3BA4252D8A3B293609646E7331FA275F8D
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32312d3231203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 06:18:40 +0000
ROA not before:           Fri 17 Nov 2023 06:13:40 +0000
ROA not after:            Fri 15 Nov 2024 06:18:40 +0000
asID:                     10217
IP address blocks:        202.171.8.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ee:8b:3b:a4:25:2d:8a:3b:29:36:09:64:6e:73:31:fa:27:5f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 06:13:40 2023 GMT
            Not After : Nov 15 06:18:40 2024 GMT
        Subject: CN=3FF6F9BAD8C60B3CC090A94F2321C622AE037336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:b1:ce:69:7f:80:1a:43:2f:c4:c3:8d:a3:
                    b0:c9:d8:41:8c:66:25:e2:ae:68:9e:3d:b7:eb:e1:
                    28:1e:90:50:74:1c:4f:03:56:16:a7:e0:b1:b4:91:
                    74:f8:df:9b:fc:c6:b3:88:49:92:2c:eb:fc:5a:f6:
                    ae:83:80:78:d8:33:e5:57:7d:68:36:1c:da:e2:cc:
                    e2:28:93:07:a7:15:b7:ea:82:66:b6:1c:ec:c2:5f:
                    60:5b:95:0b:26:bc:09:0b:25:b6:29:f5:43:a2:bb:
                    9e:0f:a5:f9:63:e7:c3:d1:69:24:15:bd:14:99:b8:
                    a2:6b:26:d6:8f:b7:4b:6a:6e:b9:8a:6f:6b:76:39:
                    1b:e0:36:36:ad:c5:e6:cb:cc:c7:67:03:a5:f7:f5:
                    0d:31:4c:97:84:7e:c6:46:c4:51:66:7b:e4:40:2f:
                    21:f7:84:e9:a8:d7:31:8c:e8:0a:34:1b:42:aa:94:
                    9f:03:ac:87:58:d3:50:ca:86:cf:8c:c0:10:ba:56:
                    80:c5:75:de:5e:75:e4:0d:e6:f0:4d:41:97:5f:3e:
                    cb:69:a4:3f:8d:79:90:fd:e2:d5:c8:4f:95:61:36:
                    ad:eb:4b:5d:cb:e5:c4:1b:68:37:2f:f0:a1:00:32:
                    70:9f:86:cb:63:b3:c6:98:6c:09:85:5a:86:b4:dc:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:F9:BA:D8:C6:0B:3C:C0:90:A9:4F:23:21:C6:22:AE:03:73:36
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32312d3231203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:61:02:cb:42:c3:a5:9b:6c:4a:9a:f1:a7:15:c3:a1:a0:61:
         3e:4a:7b:c1:07:d0:68:d9:9b:44:00:5c:04:ea:74:e7:3f:bd:
         b6:0b:c4:0c:cd:27:21:87:e0:3e:b8:84:6c:1a:e1:3b:db:58:
         6c:99:52:ae:02:d8:e3:15:b8:57:c4:a1:6e:7c:ed:40:a7:87:
         08:68:a8:31:4c:be:f2:ed:10:cd:7b:63:cb:60:3f:ea:a6:81:
         bb:3f:ef:3a:8f:12:fc:41:1f:99:13:ab:a6:ac:f7:b8:fb:16:
         f2:b5:64:8e:e5:fa:16:52:87:37:19:68:1a:89:2d:9d:7d:00:
         64:63:a8:dc:29:fd:2b:6e:75:d6:c1:6f:a8:e1:5c:0e:73:a1:
         dc:e5:e2:e9:20:13:f9:7f:b1:d9:4d:7a:cf:4c:47:a5:88:22:
         a2:6a:43:71:c8:d3:b6:48:4c:28:77:de:96:0d:35:f8:96:3c:
         6a:2d:48:12:0e:98:aa:ba:e6:2e:89:d6:1e:13:0b:89:7d:64:
         8f:59:1a:e6:04:a7:66:46:a6:8a:43:a6:72:42:02:24:ef:9b:
         14:dc:e5:bb:fc:4f:63:7f:bd:90:47:a0:79:12:ae:f0:4b:97:
         72:93:1d:a1:19:2a:6d:b2:49:b2:ba:e7:b1:67:68:72:f3:b6:
         cc:81:fa:c3
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUC+6LO6QlLYo7KTYJZG5zMfonX40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMTcwNjEzNDBaFw0yNDExMTUwNjE4NDBaMDMxMTAvBgNV
BAMTKDNGRjZGOUJBRDhDNjBCM0NDMDkwQTk0RjIzMjFDNjIyQUUwMzczMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qbHOaX+AGkMvxMONo7DJ2EGM
ZiXirmiePbfr4SgekFB0HE8DVhan4LG0kXT435v8xrOISZIs6/xa9q6DgHjYM+VX
fWg2HNrizOIokwenFbfqgma2HOzCX2BblQsmvAkLJbYp9UOiu54Ppflj58PRaSQV
vRSZuKJrJtaPt0tqbrmKb2t2ORvgNjatxebLzMdnA6X39Q0xTJeEfsZGxFFme+RA
LyH3hOmo1zGM6Ao0G0KqlJ8DrIdY01DKhs+MwBC6VoDFdd5edeQN5vBNQZdfPstp
pD+NeZD94tXIT5VhNq3rS13L5cQbaDcv8KEAMnCfhstjs8aYbAmFWoa03GgtAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUP/b5utjGCzzAkKlPIyHGIq4DczYwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMyMzAzMjJlMzEzNzMxMmUzODJlMzAyZjMyMzEy
ZDMyMzEyMDNkM2UyMDMxMzAzMjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKqwgwDQYJKoZIhvcN
AQELBQADggEBAKNhAstCw6WbbEqa8acVw6GgYT5Ke8EH0GjZm0QAXATqdOc/vbYL
xAzNJyGH4D64hGwa4TvbWGyZUq4C2OMVuFfEoW587UCnhwhoqDFMvvLtEM17Y8tg
P+qmgbs/7zqPEvxBH5kTq6as97j7FvK1ZI7l+hZShzcZaBqJLZ19AGRjqNwp/Stu
ddbBb6jhXA5zodzl4ukgE/l/sdlNes9MR6WIIqJqQ3HI07ZITCh33pYNNfiWPGot
SBIOmKq65i6J1h4TC4l9ZI9ZGuYEp2ZGpopDpnJCAiTvmxTc5bv8T2N/vZBHoHkS
rvBLl3KTHaEZKm2ySbK657FnaHLztsyB+sM=
-----END CERTIFICATE-----