Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32332d3233203d3e203130323137.roa
File:                     3230322e3137312e382e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier:          fa1By2N6wzXUxDhH2ZXmV/uqkJWrb+am5oKYwVLC8kU=
Subject key identifier:   33:37:6F:10:DE:F5:76:EF:CB:3D:07:11:83:DE:41:42:F0:6D:DB:40
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       3F94977A0ACD47E8EA4C0844971CC48DA44AB3DB
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32332d3233203d3e203130323137.roa
Signing time:             Fri 17 Nov 2023 07:15:33 +0000
ROA not before:           Fri 17 Nov 2023 07:10:33 +0000
ROA not after:            Fri 15 Nov 2024 07:15:33 +0000
asID:                     10217
IP address blocks:        202.171.8.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:94:97:7a:0a:cd:47:e8:ea:4c:08:44:97:1c:c4:8d:a4:4a:b3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Nov 17 07:10:33 2023 GMT
            Not After : Nov 15 07:15:33 2024 GMT
        Subject: CN=33376F10DEF576EFCB3D071183DE4142F06DDB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:3e:77:d9:f7:00:2e:d5:21:0a:08:d8:b1:
                    08:5a:5c:91:b8:11:1a:6e:1f:03:aa:00:d4:81:de:
                    ae:f4:3c:3a:c1:90:62:4a:31:b9:1a:ce:62:59:fc:
                    d9:01:0e:e7:92:95:bc:55:e7:b5:5c:fd:ba:ca:1a:
                    ed:78:a5:b5:50:6a:c9:71:49:eb:0a:bc:33:54:1f:
                    ba:d4:f4:5b:a9:81:37:e7:ad:0e:ea:94:91:eb:0f:
                    e7:f6:ce:91:00:fe:2b:81:25:49:79:e7:ed:32:01:
                    7c:35:6f:7d:d0:8a:e7:a8:71:05:eb:b2:0c:4a:00:
                    47:17:6b:a8:1d:72:47:80:13:84:1d:10:a9:fa:22:
                    55:49:d8:76:36:41:91:e9:0f:10:d3:5c:39:c8:c8:
                    e4:80:38:f8:85:5d:7a:9f:5e:88:95:83:be:99:e5:
                    16:81:aa:50:60:6f:76:e9:1a:99:da:88:29:bf:e7:
                    f6:c6:5f:0b:fe:64:d6:b3:ce:5b:a8:43:ea:f0:0d:
                    77:8e:4b:43:27:bd:a8:81:cb:b9:bb:91:93:9f:69:
                    59:4d:e8:37:b6:5e:b0:a7:b0:9a:5e:8e:94:7a:b9:
                    01:f4:bd:41:d8:c8:d3:b5:f1:1d:13:a3:a2:52:49:
                    82:3d:92:ed:df:02:fc:49:91:b8:89:08:2b:22:b7:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:6F:10:DE:F5:76:EF:CB:3D:07:11:83:DE:41:42:F0:6D:DB:40
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e382e302f32332d3233203d3e203130323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:c4:fd:8d:f2:30:b8:71:39:a6:63:88:19:d7:6f:11:60:
         c7:13:3b:33:39:dd:18:cd:fd:8f:99:f9:b3:8a:ca:7d:87:72:
         8f:6d:f1:c0:74:33:c1:c3:b0:ab:2c:6f:83:5d:f2:75:20:c4:
         e0:15:0f:93:ea:76:06:6e:c6:1f:ea:de:d9:36:24:0e:13:b6:
         35:76:b2:b2:8d:d1:f7:5d:c9:a8:79:69:db:6b:e8:c4:5d:b3:
         79:ec:74:d8:33:21:99:65:7e:64:a9:c6:a2:bd:52:c6:f1:a1:
         72:59:34:e4:25:5b:29:7d:ee:29:69:5d:4b:5d:7d:90:49:b3:
         bf:45:9f:28:af:0a:3e:b1:08:a1:41:ee:84:32:09:cb:f7:73:
         3b:95:11:0b:57:19:13:04:45:16:bf:fd:2d:d7:cd:59:b9:6e:
         22:37:98:c3:44:3a:af:fb:2f:3f:b3:a1:c9:ef:56:bb:6c:7e:
         61:46:2a:4f:a3:49:02:61:5c:cd:c5:c2:5c:02:94:00:74:90:
         40:f8:42:ae:47:55:26:ae:27:8a:08:ff:9c:a8:d0:5d:38:b9:
         be:05:0a:5d:ed:d0:33:b0:00:9b:a1:c7:9d:94:d7:08:66:04:
         f3:f7:86:3d:ee:5f:54:b6:b2:ab:ff:2b:2a:5d:5d:d7:e3:09:
         20:9d:a7:51
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUP5SXegrNR+jqTAhElxzEjaRKs9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMTcwNzEwMzNaFw0yNDExMTUwNzE1MzNaMDMxMTAvBgNV
BAMTKDMzMzc2RjEwREVGNTc2RUZDQjNEMDcxMTgzREU0MTQyRjA2RERCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6j532fcALtUhCgjYsQhaXJG4
ERpuHwOqANSB3q70PDrBkGJKMbkazmJZ/NkBDueSlbxV57Vc/brKGu14pbVQaslx
SesKvDNUH7rU9FupgTfnrQ7qlJHrD+f2zpEA/iuBJUl55+0yAXw1b33QiueocQXr
sgxKAEcXa6gdckeAE4QdEKn6IlVJ2HY2QZHpDxDTXDnIyOSAOPiFXXqfXoiVg76Z
5RaBqlBgb3bpGpnaiCm/5/bGXwv+ZNazzluoQ+rwDXeOS0MnvaiBy7m7kZOfaVlN
6De2XrCnsJpejpR6uQH0vUHYyNO18R0To6JSSYI9ku3fAvxJkbiJCCsityQHAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUMzdvEN71du/LPQcRg95BQvBt20AwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMyMzAzMjJlMzEzNzMxMmUzODJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzAzMjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKqwgwDQYJKoZIhvcN
AQELBQADggEBACrgxP2N8jC4cTmmY4gZ128RYMcTOzM53RjN/Y+Z+bOKyn2Hco9t
8cB0M8HDsKssb4Nd8nUgxOAVD5PqdgZuxh/q3tk2JA4TtjV2srKN0fddyah5adtr
6MRds3nsdNgzIZllfmSpxqK9UsbxoXJZNOQlWyl97ilpXUtdfZBJs79FnyivCj6x
CKFB7oQyCcv3czuVEQtXGRMERRa//S3XzVm5biI3mMNEOq/7Lz+zocnvVrtsfmFG
Kk+jSQJhXM3FwlwClAB0kED4Qq5HVSauJ4oI/5yo0F04ub4FCl3t0DOwAJuhx52U
1whmBPP3hj3uX1S2sqv/KypdXdfjCSCdp1E=
-----END CERTIFICATE-----