Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32332d3234203d3e20313530353032.roa
File:                     3130332e35342e3137302e302f32332d3234203d3e20313530353032.roa (raw, json)
Hash identifier:          HxtM4d+PEVSPDRSducwXGPSITHOchG8dSfVEvbgDRJU=
Subject key identifier:   D4:89:80:F1:48:CD:06:C1:B0:FF:FB:31:78:C1:D6:51:7B:88:BF:D7
Certificate issuer:       /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial:       0A2862C5C204C8D2F975CAD0B2E32216886AA278
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32332d3234203d3e20313530353032.roa
Signing time:             Mon 20 Feb 2023 06:46:12 +0000
ROA not before:           Mon 20 Feb 2023 06:41:12 +0000
ROA not after:            Mon 19 Feb 2024 06:46:12 +0000
asID:                     150502
IP address blocks:        103.54.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:28:62:c5:c2:04:c8:d2:f9:75:ca:d0:b2:e3:22:16:88:6a:a2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
        Validity
            Not Before: Feb 20 06:41:12 2023 GMT
            Not After : Feb 19 06:46:12 2024 GMT
        Subject: CN=D48980F148CD06C1B0FFFB3178C1D6517B88BFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:64:6f:50:2a:7b:42:7b:8b:3a:1e:e5:27:
                    41:ab:55:e1:dc:99:d2:d2:86:32:8f:9a:97:4a:53:
                    aa:6c:ae:ab:5f:04:08:4e:0f:65:c8:1f:af:6a:75:
                    fa:bf:19:1b:4b:8d:64:fc:e4:ae:87:0b:c1:a7:a2:
                    b2:bc:d0:2e:3e:75:14:ec:81:be:b1:bd:a3:c7:70:
                    96:02:e6:32:70:ff:30:56:35:80:d7:3c:20:5a:df:
                    cd:dd:54:f5:dd:01:44:0f:c5:06:e8:24:d2:45:cf:
                    2c:78:c9:84:6d:37:74:7a:b6:5f:fa:c3:75:1f:b6:
                    7d:cf:92:7a:b9:72:75:d3:93:43:5b:e8:90:e7:b3:
                    53:3d:c7:cb:cf:77:ba:a3:94:a9:67:b7:58:b1:7f:
                    3a:8f:35:68:da:e7:73:0f:bd:13:3c:fe:8a:44:da:
                    c9:58:fc:cc:a4:db:a3:f6:1d:55:a8:1a:8e:a7:4b:
                    76:f4:b4:83:45:30:14:39:03:4d:f7:fb:51:18:64:
                    a4:ab:b4:f8:94:17:a4:a9:cd:34:50:b6:bd:d8:55:
                    de:93:51:d4:d4:a5:89:00:b5:06:fe:1e:bb:68:ad:
                    9f:89:80:d8:7b:3b:40:34:16:d4:7d:74:df:72:0c:
                    aa:af:6b:56:6e:80:5e:49:be:29:46:b7:aa:0c:d0:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:89:80:F1:48:CD:06:C1:B0:FF:FB:31:78:C1:D6:51:7B:88:BF:D7
            X509v3 Authority Key Identifier:
                keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137302e302f32332d3234203d3e20313530353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:9a:f0:32:91:08:67:22:98:07:4a:ca:50:e3:db:3c:57:
         9b:76:33:3d:11:f6:d0:19:15:eb:d4:d9:fd:d7:35:2d:1e:d8:
         8f:a9:7d:49:78:ae:ed:93:c7:63:9c:82:a9:b8:d1:50:ba:ba:
         67:2e:85:34:a2:cf:0a:e0:ce:fa:f1:b6:a5:52:27:1f:c9:e5:
         ae:55:16:ba:fe:6a:4a:e7:9d:a4:57:0b:22:83:3a:5a:99:d6:
         da:21:b9:e7:ab:22:e3:2a:8e:dc:6b:d0:28:5e:43:16:d3:80:
         3b:f3:46:e0:32:55:4b:73:d3:5f:7f:99:48:8d:3a:61:62:78:
         7d:ae:12:94:b7:13:f0:b6:0a:31:e0:5a:ba:ec:58:56:d1:67:
         d9:4b:51:36:c3:b4:84:3c:8e:fc:70:16:fc:75:98:29:bd:5f:
         1b:fa:da:7e:d0:bc:ca:de:57:df:8e:cd:bb:fb:2e:a7:c9:90:
         66:2c:32:bf:7c:53:74:97:bc:5c:47:84:57:cf:9c:e4:64:c0:
         6c:8b:f3:1b:b5:29:f4:bd:02:6f:f6:85:ce:37:9f:a5:9e:60:
         8f:83:5b:f9:da:03:51:ab:38:33:c1:e3:11:55:ae:31:1b:39:
         da:43:49:02:35:da:b5:68:ac:0d:6c:c1:5b:ed:3d:76:3e:d6:
         9d:96:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----