Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230322e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3233382e3230322e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          YYNzc6wJqdRbgvTkVUNPQncJN2FECkAbbuw+al2Yfm8=
Subject key identifier:   86:A0:D4:49:A8:E5:6E:79:E0:6C:B7:86:0B:D7:68:20:06:24:0A:6B
Certificate issuer:       /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial:       0372269952F59F323ACF593BC8D096A39567A555
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230322e302f32342d3234203d3e20313338383138.roa
Signing time:             Mon 17 Oct 2022 02:00:00 +0000
ROA not before:           Mon 17 Oct 2022 01:55:00 +0000
ROA not after:            Mon 16 Oct 2023 02:00:00 +0000
asID:                     138818
IP address blocks:        103.238.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:72:26:99:52:f5:9f:32:3a:cf:59:3b:c8:d0:96:a3:95:67:a5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
        Validity
            Not Before: Oct 17 01:55:00 2022 GMT
            Not After : Oct 16 02:00:00 2023 GMT
        Subject: CN=86A0D449A8E56E79E06CB7860BD7682006240A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:78:0e:d6:c3:56:86:c4:dc:85:a1:53:e1:
                    51:ea:3b:de:34:5f:78:dc:15:bc:b8:df:d1:49:b6:
                    7e:a3:36:71:37:bd:13:9f:9e:50:ca:35:9c:3b:1e:
                    af:f7:ac:1b:be:06:c1:77:ef:5f:9a:2f:c3:db:c9:
                    ad:05:82:b9:0f:9b:48:87:cf:24:d1:47:5d:8d:e0:
                    78:c6:66:2c:79:90:e1:21:6b:69:27:d0:b3:34:b8:
                    f3:99:b5:03:04:c3:db:b5:c4:e9:1b:72:33:98:f9:
                    63:80:12:35:4f:63:9b:80:79:62:6e:8d:a3:97:02:
                    ec:e5:90:18:c8:cd:00:d6:62:e0:0d:a5:d9:a4:25:
                    b0:55:69:65:ad:f2:91:2f:06:87:03:67:6d:d3:c8:
                    d5:ce:79:08:37:26:e4:0e:70:f1:a7:44:d6:7d:04:
                    37:c8:41:6b:14:ee:3a:03:cc:7b:a2:ee:a7:a7:0c:
                    7e:5a:0a:23:fa:78:bc:ce:5b:46:04:a1:cc:f3:57:
                    4c:91:9e:21:22:38:06:0d:31:11:85:3c:4c:76:98:
                    5e:b8:7f:dc:28:3f:3b:ac:27:6d:5a:55:50:55:a0:
                    bb:9c:e7:49:7e:03:62:9f:2d:40:95:c1:3a:1c:cc:
                    aa:2c:5b:78:df:4d:17:4c:92:24:9c:16:a1:b3:2c:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A0:D4:49:A8:E5:6E:79:E0:6C:B7:86:0B:D7:68:20:06:24:0A:6B
            X509v3 Authority Key Identifier:
                keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230322e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:86:f2:50:59:cf:11:96:06:17:b4:6a:d0:c4:7a:ba:48:
         de:33:0c:46:e7:68:c1:1f:d3:72:e4:12:14:91:b7:c9:87:2c:
         7c:01:5d:69:76:73:d8:fe:77:a6:a3:cf:33:f9:a9:0e:50:a3:
         c7:48:7b:d0:d0:df:64:b0:11:ae:93:c1:5e:ea:ff:24:06:3d:
         ac:17:f6:51:2f:29:d7:b7:63:f6:70:96:09:76:5a:95:9d:1e:
         ad:b7:52:bf:7c:38:75:49:9a:8b:95:6a:86:94:9e:68:41:20:
         4d:30:78:d8:ef:92:65:ca:f2:18:6f:5d:5f:5d:01:e2:18:a8:
         08:88:27:7b:6a:24:28:78:fd:9f:0b:b9:83:3b:61:f6:6e:25:
         30:92:26:60:98:12:2e:61:b5:63:a2:f1:4b:9d:58:c9:fc:41:
         bb:73:df:33:35:2f:e4:67:68:bf:75:84:18:41:2a:39:b4:81:
         cb:57:d1:8f:f6:72:8c:28:15:02:e0:3c:8c:b8:20:c7:5d:5f:
         47:41:45:3a:35:c9:4a:a9:dc:05:11:65:6f:cd:09:21:6d:ba:
         b0:28:36:37:ec:48:9f:63:d6:fa:8d:52:24:1e:04:a0:1b:42:
         cd:75:1b:65:da:51:d1:aa:38:4e:7f:90:26:d2:d0:74:29:eb:
         27:35:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----