Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130303a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          5wGl5qLnjwziMRNdj2hOnAeXW15qF9ar7wpFSiZ6GsM=
Subject key identifier:   E5:BA:C2:3F:CB:A9:DA:D2:90:2E:55:28:51:46:B6:FB:58:A3:19:8C
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       76B20D474DB21834BFD998231DD798F43716FB16
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130303a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:20 +0000
ROA not before:           Mon 26 Sep 2022 07:57:20 +0000
ROA not after:            Mon 25 Sep 2023 08:02:20 +0000
asID:                     59282
IP address blocks:        2400:d680:100::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b2:0d:47:4d:b2:18:34:bf:d9:98:23:1d:d7:98:f4:37:16:fb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:20 2022 GMT
            Not After : Sep 25 08:02:20 2023 GMT
        Subject: CN=E5BAC23FCBA9DAD2902E55285146B6FB58A3198C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:b1:05:f1:32:80:1c:80:15:e7:2a:fd:1a:
                    f0:69:3f:02:d2:d1:46:45:be:8b:b2:e6:4e:01:0a:
                    91:ee:b9:5c:88:ca:cd:5a:0f:99:e9:ab:14:12:95:
                    7e:11:e5:f3:8b:fc:7c:c3:a1:21:5c:d4:59:8b:b2:
                    82:80:f8:6e:2c:17:0e:f9:fb:cf:ea:2c:0d:b9:01:
                    17:b5:a0:59:d9:6c:8d:e4:9d:e3:62:b3:62:4b:89:
                    cb:0a:e8:fe:c7:80:73:45:3d:5f:af:c2:0e:30:83:
                    89:2c:1e:54:92:c8:92:87:57:cb:3f:64:0e:94:b1:
                    5a:c3:5d:89:63:dd:14:06:56:82:a4:82:ef:e9:e9:
                    66:2d:58:e2:f3:93:48:5e:88:1f:92:4d:f9:04:36:
                    cc:61:af:8a:1f:9c:0c:15:d7:a2:53:4a:59:c7:e0:
                    8c:76:23:35:28:52:fa:c3:59:6d:22:71:57:80:36:
                    08:f0:97:75:8c:61:8e:3f:4e:b6:da:17:df:31:1f:
                    16:2e:47:e8:b9:bd:95:44:d1:d4:70:02:e7:be:d4:
                    c1:32:e1:7e:74:16:43:b4:72:36:e2:ea:ac:53:2e:
                    4b:f7:08:65:a4:6f:d2:73:bb:9c:35:5a:79:2a:44:
                    1f:08:c6:fa:5c:ed:82:5c:8e:24:ea:03:d3:7c:3a:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BA:C2:3F:CB:A9:DA:D2:90:2E:55:28:51:46:B6:FB:58:A3:19:8C
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130303a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:e2:97:03:0a:4b:fb:1c:3e:9d:8d:17:03:08:f5:d7:e2:b6:
         f2:93:e2:30:9f:0f:e2:43:c9:15:31:e4:f8:8c:6b:a3:cf:a9:
         5c:41:fb:e1:e6:2a:a8:6d:86:ba:ab:eb:86:40:41:f6:05:f6:
         2f:52:27:c7:c6:e9:e6:05:db:5a:42:2f:cb:5b:28:35:9d:24:
         bc:78:ec:01:41:ff:ae:3d:f3:cd:4c:a4:6d:4a:23:16:84:21:
         74:1a:d6:31:39:0e:8c:69:66:b5:f6:18:eb:ba:93:96:18:44:
         11:c8:ab:b6:d0:74:11:cc:15:30:69:a0:a9:c8:f0:1d:94:cf:
         cd:a8:9a:f1:74:e9:25:33:1e:21:bb:94:2e:c2:c6:22:bf:2b:
         30:e2:62:69:5e:12:74:88:b7:7d:ce:e5:6c:84:9a:b4:a4:54:
         b0:29:93:34:4a:c7:b3:58:e7:f8:dc:8a:9a:85:0d:9d:b0:88:
         74:de:f5:bd:e3:19:0b:0f:26:1f:06:ae:03:88:67:21:0e:ba:
         ff:78:9f:24:d5:98:4d:45:e2:e8:08:70:ab:50:d3:a3:35:23:
         b5:f8:8a:8f:92:17:28:7a:a6:a6:35:7e:f9:b3:ec:49:82:dc:
         92:b8:1f:6d:88:f9:3c:eb:6e:81:29:6e:c2:65:da:bd:6d:39:
         d3:16:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----