Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130313a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          +cyGH7LoZ6eseHFtOLwJTJUJ8AqVqcbV3I1T39e4SLc=
Subject key identifier:   1E:CC:21:3A:E5:07:94:50:B7:7C:DA:59:32:9F:9A:0A:D9:21:33:0A
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       2DCF53480FBAF7B8D8014924F906681056F3C7DF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130313a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:51 +0000
ROA not before:           Mon 26 Sep 2022 07:56:51 +0000
ROA not after:            Mon 25 Sep 2023 08:01:51 +0000
asID:                     59282
IP address blocks:        2400:d680:101::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cf:53:48:0f:ba:f7:b8:d8:01:49:24:f9:06:68:10:56:f3:c7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:51 2022 GMT
            Not After : Sep 25 08:01:51 2023 GMT
        Subject: CN=1ECC213AE5079450B77CDA59329F9A0AD921330A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:73:2e:fa:8a:b2:52:09:da:77:23:9e:3b:
                    c2:63:3a:b7:6c:cb:fa:52:c9:af:75:93:6f:32:de:
                    88:a3:63:e4:5c:c4:04:da:bb:0d:26:2c:19:b8:6d:
                    28:94:e4:72:80:7c:c9:39:7b:24:a9:a1:1d:47:d2:
                    4e:5f:20:97:6f:3b:a8:1f:a2:cf:a7:57:c7:70:e5:
                    fc:9a:2a:c7:bc:d1:b5:2f:e7:74:fe:26:fc:7e:ef:
                    48:5b:aa:dc:9e:e6:4f:53:7c:60:0b:42:e0:40:ee:
                    8a:a3:e6:5c:cc:9b:2b:9f:db:de:2f:23:25:7c:7b:
                    eb:46:da:0f:41:71:bc:4a:63:c1:db:b9:66:35:77:
                    3a:48:fe:19:96:06:94:cd:f4:3b:1f:ab:d0:bc:5c:
                    69:ac:97:2d:8c:2f:c5:00:d9:ac:46:ce:fa:b3:36:
                    f1:76:83:81:51:b5:b3:29:04:51:3d:f3:4d:34:07:
                    d0:5e:59:97:57:48:15:00:62:aa:75:2a:15:10:7c:
                    4b:69:f4:fa:7d:6c:ec:ed:3f:83:7d:4d:92:ca:a1:
                    ef:5b:db:51:43:7d:b1:c7:b3:e7:50:5c:c1:c2:d5:
                    b0:2d:a3:15:be:54:5b:e7:d9:0a:8d:15:f3:42:18:
                    9d:ee:1f:21:9d:8c:2f:bd:54:80:c2:b5:e4:a4:1d:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:21:3A:E5:07:94:50:B7:7C:DA:59:32:9F:9A:0A:D9:21:33:0A
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130313a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:e2:92:1c:ac:d4:5d:85:b1:9a:02:3d:9a:81:8e:f8:41:34:
         f2:47:41:6c:28:13:09:97:ab:ed:8d:79:8d:41:67:01:4e:c0:
         fe:9e:e5:66:59:95:66:9a:ad:20:80:87:18:ad:81:f9:2b:bc:
         35:5e:37:3a:72:7d:73:ab:40:28:ed:90:9b:d9:15:dc:94:af:
         6b:db:a8:3b:ae:a9:cc:4d:35:06:6b:09:b3:2b:ab:ab:e8:ac:
         1c:67:84:eb:49:d2:f0:e7:2e:4e:1e:49:37:21:b2:9d:f4:8f:
         aa:8b:6e:76:de:3d:8b:91:eb:0c:17:f6:31:58:c4:b9:f4:42:
         d1:a8:50:19:b6:37:05:3a:ea:5c:3b:32:63:0b:ac:f6:ed:14:
         2f:6e:32:1e:74:e7:00:a2:5b:ea:a5:d8:c8:19:de:8d:48:4f:
         c5:d1:95:35:a1:4b:c9:0e:ae:16:ce:f4:4b:16:d1:48:68:e5:
         1e:83:17:bf:c0:a0:cb:20:a3:77:16:4f:da:f1:37:39:4a:db:
         49:98:3a:3c:63:0c:92:b6:8f:73:46:ff:32:46:8e:e3:8d:b5:
         e0:ed:fa:92:c9:20:9b:14:6a:35:75:b3:87:fb:82:71:12:41:
         94:2e:50:41:77:25:5e:8c:d4:f9:b1:5c:c4:7f:83:7e:fe:50:
         9f:6a:0e:d9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIULc9TSA+697jYAUkk+QZoEFbzx98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NTFaFw0yMzA5MjUwODAxNTFaMDMxMTAvBgNV
BAMTKDFFQ0MyMTNBRTUwNzk0NTBCNzdDREE1OTMyOUY5QTBBRDkyMTMzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzHMu+oqyUgnadyOeO8JjOrds
y/pSya91k28y3oijY+RcxATauw0mLBm4bSiU5HKAfMk5eySpoR1H0k5fIJdvO6gf
os+nV8dw5fyaKse80bUv53T+Jvx+70hbqtye5k9TfGALQuBA7oqj5lzMmyuf294v
IyV8e+tG2g9BcbxKY8HbuWY1dzpI/hmWBpTN9Dsfq9C8XGmsly2ML8UA2axGzvqz
NvF2g4FRtbMpBFE98000B9BeWZdXSBUAYqp1KhUQfEtp9Pp9bOztP4N9TZLKoe9b
21FDfbHHs+dQXMHC1bAtoxW+VFvn2QqNFfNCGJ3uHyGdjC+9VIDCteSkHdrrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUHswhOuUHlFC3fNpZMp+aCtkhMwowHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMDMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
ATANBgkqhkiG9w0BAQsFAAOCAQEAyOKSHKzUXYWxmgI9moGO+EE08kdBbCgTCZer
7Y15jUFnAU7A/p7lZlmVZpqtIICHGK2B+Su8NV43OnJ9c6tAKO2Qm9kV3JSva9uo
O66pzE01BmsJsyurq+isHGeE60nS8OcuTh5JNyGynfSPqotudt49i5HrDBf2MVjE
ufRC0ahQGbY3BTrqXDsyYwus9u0UL24yHnTnAKJb6qXYyBnejUhPxdGVNaFLyQ6u
Fs70SxbRSGjlHoMXv8CgyyCjdxZP2vE3OUrbSZg6PGMMkraPc0b/MkaO44214O36
kskgmxRqNXWzh/uCcRJBlC5QQXclXozU+bFcxH+Dfv5Qn2oO2Q==
-----END CERTIFICATE-----