Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32332d3233203d3e20313530353032.roa
File:                     3130332e35342e3137302e302f32332d3233203d3e20313530353032.roa (raw, json)
Hash identifier:          dpmHWCwDoGX+ivjdoReK56QYi59GauNN+AXPgbA34ag=
Subject key identifier:   F8:A1:A6:0E:31:95:E2:74:B9:5C:E2:52:51:BE:DB:AB:42:D5:01:1A
Certificate issuer:       /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial:       4BDBA9E53567C8B2AE2F61AB28FBA880496E0B06
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32332d3233203d3e20313530353032.roa
Signing time:             Tue 13 Jun 2023 03:50:52 +0000
ROA not before:           Tue 13 Jun 2023 03:45:52 +0000
ROA not after:            Tue 11 Jun 2024 03:50:52 +0000
asID:                     150502
IP address blocks:        103.54.170.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:a9:e5:35:67:c8:b2:ae:2f:61:ab:28:fb:a8:80:49:6e:0b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
        Validity
            Not Before: Jun 13 03:45:52 2023 GMT
            Not After : Jun 11 03:50:52 2024 GMT
        Subject: CN=F8A1A60E3195E274B95CE25251BEDBAB42D5011A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:4f:9e:47:ee:60:b6:35:5c:e6:1a:c2:33:
                    c8:9e:08:ad:60:a3:fa:b7:85:c4:fb:bd:37:9f:4a:
                    e2:a5:af:14:06:15:5f:1b:27:ae:5a:29:4e:52:82:
                    e7:2d:38:e2:72:26:d3:43:67:e7:6a:84:fd:a9:71:
                    6f:09:ce:7a:73:eb:1f:51:5d:24:d0:75:ba:78:1f:
                    ef:d1:5f:c0:5c:8a:15:fd:4e:97:d6:d4:81:06:6f:
                    74:0a:68:81:56:58:bb:a9:e4:ba:7b:57:0d:2f:51:
                    3f:2b:13:c3:4a:c9:4a:01:ba:c8:4e:c2:47:2b:3f:
                    d0:66:a7:4a:00:2e:e6:4e:f8:ef:c6:a7:cd:c5:ec:
                    95:eb:3f:2f:bd:92:ee:fd:f1:ea:f9:97:99:e0:5b:
                    29:cc:89:03:0a:cc:af:89:38:d7:c3:e2:c2:2d:47:
                    d3:0b:fe:39:68:2f:9d:aa:2b:42:09:f8:ff:86:19:
                    61:e2:ae:40:cf:57:0f:53:52:59:98:f6:42:a7:48:
                    89:b7:98:70:91:e5:8a:ce:1b:16:97:53:c7:d5:4e:
                    f3:51:19:e6:9b:f3:f2:a0:5d:08:4c:da:7b:84:e4:
                    94:16:f7:68:89:b3:4c:e1:8c:a2:e2:19:8e:4b:ed:
                    55:dc:33:1f:58:30:9f:3d:8a:43:ee:a1:cb:1d:83:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:A6:0E:31:95:E2:74:B9:5C:E2:52:51:BE:DB:AB:42:D5:01:1A
            X509v3 Authority Key Identifier:
                keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32332d3233203d3e20313530353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:0a:d3:3d:cc:d1:dc:d8:20:fc:b6:41:34:54:ee:34:87:f4:
         f8:54:70:7c:64:de:cf:96:be:d3:5d:27:73:b2:95:f8:21:b6:
         c3:84:5b:56:7a:ec:32:ac:d1:38:1c:8a:a8:fe:6b:5a:2b:67:
         d6:24:c8:fb:75:be:87:3c:c9:d8:c3:1f:68:e1:df:b5:da:a0:
         be:b7:bd:03:42:fd:35:59:24:26:8c:e5:2b:ca:f0:0d:56:46:
         f2:99:0c:b8:de:28:da:12:aa:34:56:cb:5e:8b:b8:ac:3e:7e:
         19:8a:0e:46:7e:fa:7f:08:00:0a:78:bc:9a:c2:86:d1:8d:93:
         e3:bd:1c:66:cc:7d:1d:45:94:20:53:c3:39:f0:5a:13:8d:2d:
         26:72:4b:f2:57:89:d9:a4:99:a8:30:ba:9f:ac:b4:2f:bd:9b:
         e2:d7:27:e4:a5:d5:1c:6c:b2:6a:28:b5:8f:c7:51:15:3a:2d:
         85:91:c5:ca:be:6d:c3:c1:0b:49:c9:78:f4:be:2a:01:a6:a3:
         fa:ed:c4:e9:6b:02:73:9a:38:ba:e2:2c:59:b2:53:89:3b:f9:
         d5:31:93:3f:13:d6:05:d4:0a:65:ad:b7:9b:d8:47:53:82:19:
         fc:38:d6:6e:b2:1b:0b:3a:b8:91:f1:37:98:b3:8e:2b:13:f6:
         94:ad:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----