Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3332203d3e20313336383733.roa
File:                     323430323a326134303a3a2f33322d3332203d3e20313336383733.roa (raw, json)
Hash identifier:          X8ihdU3bujuaBEN6j6tHWLgSrnCrcHvt02WdvvrDo1E=
Subject key identifier:   E6:4A:14:47:6E:B1:83:18:31:27:98:5B:0A:8D:31:AC:B6:9C:FF:75
Certificate issuer:       /CN=69D341364BC344B4ED6B3A65031AACB403AB3222
Certificate serial:       107A51961BD060BE5891652E25B6BBF98D64A2D2
Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3332203d3e20313336383733.roa
Signing time:             Sun 28 Aug 2022 23:09:01 +0000
ROA not before:           Sun 28 Aug 2022 23:04:01 +0000
ROA not after:            Sun 27 Aug 2023 23:09:01 +0000
asID:                     136873
IP address blocks:        2402:2a40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7a:51:96:1b:d0:60:be:58:91:65:2e:25:b6:bb:f9:8d:64:a2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222
        Validity
            Not Before: Aug 28 23:04:01 2022 GMT
            Not After : Aug 27 23:09:01 2023 GMT
        Subject: CN=E64A14476EB183183127985B0A8D31ACB69CFF75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:dd:49:5e:a6:05:94:e6:00:46:72:87:b6:
                    38:5f:43:56:b5:01:fc:26:5f:28:b9:ca:86:95:eb:
                    08:83:82:25:14:e4:de:e4:41:4f:be:b0:f6:0b:06:
                    55:c4:5e:90:1c:68:1b:ed:8a:f4:c2:80:83:40:0a:
                    ef:29:3e:9c:b8:f9:d7:49:bb:b6:ff:ec:d4:4e:d5:
                    26:35:60:dd:60:d1:f1:52:df:15:03:dc:12:b4:8e:
                    89:45:91:c3:36:87:1f:eb:82:0d:ef:19:2f:61:8d:
                    10:ff:ac:07:49:c0:7f:16:23:c4:94:43:23:da:c4:
                    08:4f:c0:d1:cd:e8:38:39:93:50:e7:43:d5:b0:21:
                    f7:c2:4c:b5:b9:59:cc:82:48:e9:5c:a1:16:69:1d:
                    c0:1f:aa:de:01:3b:cb:9c:f7:f7:0f:5f:1b:94:41:
                    e8:96:42:e7:3a:3d:66:46:57:80:80:c1:2e:18:5e:
                    dd:32:47:b9:cc:7c:26:ee:05:c8:2a:cf:13:78:2b:
                    e2:70:c2:25:8b:c4:19:98:1c:f8:bc:0d:57:ea:5b:
                    d0:d1:71:25:ad:3a:d6:ef:d4:b5:bc:80:c1:dc:3d:
                    e5:27:08:e6:80:38:ca:a1:f2:4d:82:c3:0c:01:60:
                    b8:2d:d0:56:e2:5b:24:6b:58:15:0f:82:48:5c:b6:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4A:14:47:6E:B1:83:18:31:27:98:5B:0A:8D:31:AC:B6:9C:FF:75
            X509v3 Authority Key Identifier:
                keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3332203d3e20313336383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:b5:5b:b1:5d:2d:61:8c:1b:5c:c8:85:77:ab:b0:82:0f:79:
         01:df:7c:dc:bf:c2:d8:f7:3d:a4:b9:df:5b:12:eb:25:a4:33:
         35:42:9f:51:71:2a:3d:7f:de:7c:6c:d6:f0:89:e3:df:35:96:
         cf:b1:41:e3:e1:3b:d0:46:3c:13:63:a6:9f:74:dc:fb:70:ba:
         89:44:69:52:12:fb:63:ca:94:99:6d:90:5f:e0:f1:28:ae:af:
         24:bc:81:18:ce:8c:70:b6:82:8f:af:86:d7:55:0c:a7:84:9f:
         91:e7:b7:d9:68:61:5c:cc:18:e7:59:e8:8d:8a:24:00:dc:73:
         7c:b0:53:4c:d4:a4:b6:20:1e:6e:3c:dd:50:09:3d:da:db:37:
         5b:95:8b:97:49:a8:2d:9e:5c:12:88:4a:45:5f:7c:a2:1c:7d:
         8b:9c:85:dc:0e:1e:a1:30:18:1b:d8:5b:9c:7c:58:7c:68:9a:
         29:fe:c8:7f:70:92:f8:fb:48:f9:c8:9b:26:fc:88:ec:dd:db:
         9f:58:eb:f3:07:d3:a1:92:ba:bd:f4:1b:90:3a:87:4c:96:04:
         53:b5:e3:62:23:fc:4c:a7:40:84:e5:3d:88:50:9f:e8:ab:92:
         9a:27:c0:4b:72:5d:ea:bb:2b:a0:31:e1:3e:4b:4c:ec:d9:6a:
         f8:8e:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----