Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3232342e302f31392d3139203d3e203233363933.roa
File:                     3138322e302e3232342e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier:          7wThhHInp0Aw8WwLdWXedGHqP93j/USWPRZe9dMsj4Y=
Subject key identifier:   24:52:7B:E8:BC:CA:71:DA:E5:C9:2A:33:56:66:C4:25:88:7D:60:AE
Certificate issuer:       /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial:       5FC7822CD6D1E68FA094C266B6F49FCB06C75129
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3232342e302f31392d3139203d3e203233363933.roa
Signing time:             Mon 11 Nov 2024 03:55:46 +0000
ROA not before:           Mon 11 Nov 2024 03:50:46 +0000
ROA not after:            Mon 10 Nov 2025 03:55:46 +0000
asID:                     23693
IP address blocks:        182.0.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c7:82:2c:d6:d1:e6:8f:a0:94:c2:66:b6:f4:9f:cb:06:c7:51:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
        Validity
            Not Before: Nov 11 03:50:46 2024 GMT
            Not After : Nov 10 03:55:46 2025 GMT
        Subject: CN=24527BE8BCCA71DAE5C92A335666C425887D60AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:24:c3:03:39:0a:1d:f3:c3:dd:fe:91:fe:
                    1d:da:5c:3d:e6:a8:f8:2a:35:4a:dc:4e:df:7f:9b:
                    e9:6f:de:48:b1:52:e9:52:ad:1a:94:2e:bb:f2:70:
                    36:f5:d5:c9:0a:6c:5d:1f:ce:bc:79:52:e4:a2:95:
                    3e:81:61:c1:fd:d2:16:01:5a:bf:08:a9:b3:32:32:
                    91:20:d8:8c:79:a6:b0:c2:f0:f5:38:ab:4d:82:b8:
                    03:6b:85:5a:15:d8:f5:62:87:21:c8:f4:c4:85:99:
                    10:df:19:b8:53:17:3b:8f:89:df:1d:75:a5:06:13:
                    7a:35:00:25:84:23:db:2d:39:7d:57:23:e0:87:c8:
                    9b:fa:81:7e:95:64:2c:18:87:7d:57:c9:be:2a:07:
                    6f:37:c0:1c:a8:78:a8:09:2c:82:a7:2f:84:5b:db:
                    5a:6b:3f:19:b4:ae:ce:c1:96:14:7c:aa:9a:d8:11:
                    ba:c8:3d:c7:c1:b0:63:c3:17:b9:44:86:ec:4b:1c:
                    38:12:d4:73:63:1e:b0:4b:72:69:56:a0:de:97:30:
                    90:e2:44:c6:36:45:b3:d4:b4:41:ee:dc:f0:3a:e2:
                    2d:2e:e7:5b:f5:af:ff:fd:e5:5e:68:94:fc:f5:48:
                    de:42:bf:c6:4a:26:bb:e8:59:e4:75:dd:ac:98:4f:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:7B:E8:BC:CA:71:DA:E5:C9:2A:33:56:66:C4:25:88:7D:60:AE
            X509v3 Authority Key Identifier:
                keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3232342e302f31392d3139203d3e203233363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:d2:a2:ea:30:ae:73:84:79:f7:f7:66:a2:83:bf:7d:0a:
         48:a2:8d:ab:55:f7:5b:49:18:a6:bd:8e:8c:82:47:da:11:c1:
         dd:c4:d7:e4:8c:73:9f:d8:21:0f:3d:01:ea:f2:36:30:5c:54:
         83:be:87:ec:9b:94:be:68:a2:7e:59:8b:36:c2:42:0f:35:e3:
         60:6c:64:d4:ed:a8:2b:47:18:02:3a:01:92:a6:a9:e8:d7:da:
         0d:b5:93:71:44:e4:46:5a:5f:2b:50:84:a8:14:2d:28:a1:6c:
         18:c7:ec:b4:47:35:2c:f3:ef:56:24:7f:46:46:fb:f6:8a:22:
         11:59:cd:4d:6a:f6:b2:eb:25:ec:96:a8:e8:8d:da:79:40:20:
         25:45:4c:b3:f1:7b:71:86:fd:3b:fa:58:2d:b1:29:47:1b:7e:
         69:b4:30:3f:41:88:ee:fb:35:bc:63:2d:e7:66:9c:16:21:c3:
         a5:2a:a2:74:40:5e:08:59:35:d4:6e:55:ab:9e:f3:e0:f5:50:
         5c:76:73:62:da:e3:b2:2b:67:88:c7:21:ab:cc:2f:34:f7:19:
         3d:2d:89:2f:1c:20:22:0d:6e:53:ae:18:60:fa:33:94:2d:2a:
         1d:4a:1a:56:32:87:08:c7:7b:de:aa:84:21:71:ca:b8:bb:c9:
         25:46:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----