Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313530323438.roa
File:                     3130332e3135332e3132362e302f32342d3234203d3e20313530323438.roa (raw, json)
Hash identifier:          9J4lTFpPTzl9JurHcIxj0oFSS8Fh3JHE0f4CZv17MPc=
Subject key identifier:   3A:DC:87:76:93:9E:06:FC:73:AE:58:9D:69:1A:12:99:98:12:C0:15
Certificate issuer:       /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Certificate serial:       70EE7F359BEF6527C4D8F50125B91DC8D8F6EEAD
Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313530323438.roa
Signing time:             Wed 25 Jan 2023 08:54:23 +0000
ROA not before:           Wed 25 Jan 2023 08:49:23 +0000
ROA not after:            Wed 24 Jan 2024 08:54:23 +0000
asID:                     150248
IP address blocks:        103.153.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ee:7f:35:9b:ef:65:27:c4:d8:f5:01:25:b9:1d:c8:d8:f6:ee:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
        Validity
            Not Before: Jan 25 08:49:23 2023 GMT
            Not After : Jan 24 08:54:23 2024 GMT
        Subject: CN=3ADC8776939E06FC73AE589D691A12999812C015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:b8:af:c9:af:e9:34:b0:ba:14:49:28:89:
                    fe:c7:ef:34:20:1a:fc:96:7c:45:c1:00:4a:70:63:
                    43:77:9b:96:b3:26:a4:1e:5d:2a:8f:b7:cd:8d:d8:
                    f4:84:96:47:0e:7d:c0:cc:a7:62:76:e1:52:bc:90:
                    18:87:2d:16:36:e3:88:fe:fd:7c:43:58:25:a8:f3:
                    36:12:0f:14:7a:ed:f1:6f:c8:a5:94:3d:f0:0b:c7:
                    50:df:f9:89:f6:62:23:96:66:8e:70:8d:2e:71:3e:
                    22:07:1c:73:30:1c:1f:c0:9c:2d:57:49:8f:e3:94:
                    6a:c9:a1:2e:30:55:9f:e2:7f:63:c4:3f:f9:dd:19:
                    1f:96:c0:ba:3d:61:c2:1d:4a:d4:3e:41:2a:98:d8:
                    30:24:63:17:9e:2a:e3:fb:d0:93:eb:a1:ce:81:1f:
                    e3:92:3f:64:e3:21:67:26:20:b5:0b:53:c7:60:1c:
                    7b:98:d7:ce:ed:44:ed:25:a7:21:d6:10:e5:31:71:
                    f8:7e:d1:74:e7:30:4b:29:82:c6:53:a5:ae:7a:46:
                    4e:e2:e1:8c:0a:e8:1d:43:ea:33:3e:d4:ba:e7:67:
                    91:7a:06:4f:5d:cf:9e:2b:de:3d:48:e1:52:29:19:
                    13:a2:24:8a:70:f1:6c:43:cd:c5:03:7f:86:24:5c:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DC:87:76:93:9E:06:FC:73:AE:58:9D:69:1A:12:99:98:12:C0:15
            X509v3 Authority Key Identifier:
                keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132362e302f32342d3234203d3e20313530323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:84:f0:73:ef:97:15:d1:b8:f3:81:3a:c1:5e:1c:09:0f:
         89:b5:14:30:70:31:7c:e4:6f:a5:e3:66:9c:e4:30:e1:18:d3:
         d4:f7:1f:4f:11:5b:c0:14:09:28:92:c9:fd:50:7d:68:29:b3:
         68:04:3b:be:e3:b0:34:0a:e9:55:bb:d1:ea:c9:89:0d:2e:37:
         5c:57:32:54:60:47:a5:7c:c4:78:bd:87:6d:51:a2:18:65:f6:
         54:a2:43:f9:ed:82:b4:d8:8c:9e:01:b9:34:c7:2b:8c:bf:bc:
         c9:57:b7:9c:58:4c:8b:2f:05:fc:a1:22:3c:7a:26:0d:cf:7a:
         a6:71:4f:97:92:ce:b2:02:5e:b1:27:db:2a:7a:68:80:6b:7d:
         f7:fb:df:7a:c0:38:9a:c8:a3:e2:d2:0e:c1:34:ae:80:97:a7:
         07:00:df:f0:fa:0a:99:01:d5:1f:d6:14:b2:65:a2:9c:64:3c:
         5c:3b:d8:d0:98:c5:4c:1a:2e:bf:56:d8:1a:95:6c:28:85:8e:
         11:a1:c8:ec:b6:3c:56:06:cc:d7:d2:15:fd:0a:5d:a5:95:d9:
         97:7d:ff:0c:0c:38:53:28:fb:30:39:1b:09:75:85:07:89:ec:
         6b:58:cb:2b:44:93:cf:e3:f4:42:bc:75:b3:8d:b9:98:37:aa:
         81:a1:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----