Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32322d3232203d3e203130323137.roa
File:                     3230322e3137312e382e302f32322d3232203d3e203130323137.roa (raw, json)
Hash identifier:          CfrgHvpJCZU3ST1GiB9PH2ATBNrZ90WMLDwbKhirZsA=
Subject key identifier:   9C:AB:22:CD:A6:E6:0D:A8:9F:B4:7D:F7:35:C1:68:69:01:92:91:0C
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       7FD116F64894298653376236BC85B0149307F5C9
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32322d3232203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:05:55 +0000
ROA not before:           Fri 17 Nov 2023 07:00:55 +0000
ROA not after:            Fri 15 Nov 2024 07:05:55 +0000
asID:                     10217
IP address blocks:        202.171.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d1:16:f6:48:94:29:86:53:37:62:36:bc:85:b0:14:93:07:f5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:00:55 2023 GMT
            Not After : Nov 15 07:05:55 2024 GMT
        Subject: CN=9CAB22CDA6E60DA89FB47DF735C168690192910C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:c5:c6:d2:ff:b9:ea:b7:8b:ab:3e:22:8b:
                    bb:6d:19:94:f6:ba:58:30:b4:1c:92:5f:55:2c:4a:
                    db:8a:3b:51:b6:00:51:3f:9c:74:b5:b9:03:4c:a0:
                    94:92:a4:a6:98:93:2b:6e:f2:c3:c8:e8:ef:ba:e1:
                    09:4e:d8:36:1b:9d:14:ab:ae:13:d7:70:f7:aa:38:
                    da:df:a1:94:6f:a8:60:74:2f:5f:5d:20:b0:f3:c3:
                    b6:78:b2:8d:e3:ff:3d:20:69:59:f2:22:2f:dd:95:
                    1f:7c:bc:5e:d6:7f:ce:e4:17:7e:0e:69:3c:ec:b8:
                    44:11:c1:0f:39:fa:02:e7:b2:f8:b2:4d:8d:d1:65:
                    f6:60:c3:9d:73:5e:03:0a:1d:c6:e2:17:85:c3:d7:
                    9f:85:92:51:db:38:7e:60:80:0f:44:48:00:ad:4a:
                    dd:ca:0a:f9:b1:4d:41:0b:63:49:20:66:95:26:82:
                    1b:9f:60:cc:f1:d2:d3:f6:e5:f2:3d:79:48:fb:80:
                    c0:dc:bc:dd:a1:b8:1a:a6:7e:40:ad:fe:fc:04:da:
                    6e:7e:ad:8b:bb:cb:35:0a:96:73:b6:f3:45:fc:9f:
                    2b:fc:68:c9:f4:e6:04:99:17:3d:21:8d:c4:ac:1d:
                    f6:3e:f2:22:93:fb:1c:99:95:f3:08:e0:53:19:e7:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AB:22:CD:A6:E6:0D:A8:9F:B4:7D:F7:35:C1:68:69:01:92:91:0C
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32322d3232203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:94:02:59:ad:02:56:42:74:3b:be:9c:25:38:40:ce:71:5b:
         77:d6:2e:14:78:24:e7:63:55:43:ad:90:c6:b3:7d:b9:16:44:
         bb:50:90:7d:49:c6:97:90:54:e3:1b:f2:6d:0e:ba:66:23:37:
         34:b8:b6:2e:c6:18:64:48:9a:88:fe:de:f0:15:00:ed:eb:e5:
         c0:fb:fe:d9:98:c3:d6:93:89:26:ba:70:a0:4f:ad:ac:9c:2f:
         91:42:67:84:47:b3:82:e6:98:3a:ae:9e:3e:3e:01:e0:0b:72:
         1e:5f:a9:11:35:fe:75:fc:57:da:4f:e4:68:ff:86:c7:18:81:
         90:1e:b7:34:9b:3d:84:d8:ed:90:d7:ca:22:8b:99:d4:7a:5f:
         e4:f2:cf:e6:68:d3:b9:b6:4f:8c:db:6b:cb:fd:31:a9:b2:4c:
         6c:d1:b2:1f:61:be:24:31:0d:d7:3f:4b:b2:2f:ef:b9:bd:7a:
         03:2e:46:95:92:b9:29:9c:88:ad:53:91:c3:74:39:a8:a7:d3:
         3c:4e:93:3a:ce:e3:24:aa:f4:58:3b:34:6b:15:1a:2e:9f:51:
         09:ff:db:ae:a6:50:15:3b:28:de:70:f6:3e:b6:83:f3:a3:a3:
         fe:e4:87:7b:fa:49:2f:11:eb:52:70:d6:91:72:4b:c9:cb:6e:
         b7:6f:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----