Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130343a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          J2OKCXZZBeg+52MRTSv0nO8Bbtx2AQypDR9GyZsBMg4=
Subject key identifier:   77:37:BC:A0:0A:33:6D:AD:50:19:46:25:AE:8B:95:66:65:99:C9:CF
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       642A8A6A45E5E9C6D5304F417E1D54D95F60F516
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130343a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:34 +0000
ROA not before:           Mon 26 Sep 2022 07:56:34 +0000
ROA not after:            Mon 25 Sep 2023 08:01:34 +0000
asID:                     59282
IP address blocks:        2400:d680:104::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2a:8a:6a:45:e5:e9:c6:d5:30:4f:41:7e:1d:54:d9:5f:60:f5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:34 2022 GMT
            Not After : Sep 25 08:01:34 2023 GMT
        Subject: CN=7737BCA00A336DAD50194625AE8B95666599C9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:83:1d:1f:97:c6:29:10:d0:fa:ff:a4:1b:
                    97:03:51:f5:ec:89:0c:8e:4a:e4:c0:f6:a1:f3:d0:
                    89:83:a7:b0:97:f8:c8:42:56:ce:3a:6d:5c:38:f4:
                    e4:bb:db:6b:66:aa:ea:d7:77:c9:31:9f:34:e9:4e:
                    f3:3b:46:9e:04:39:97:86:8c:4b:59:96:87:94:df:
                    b2:cb:a6:a9:bd:ec:c2:7a:08:ac:6c:89:a9:83:4b:
                    34:89:49:88:69:36:aa:c0:af:a0:97:a8:b1:ca:79:
                    49:eb:5a:48:67:f6:56:f2:37:3b:b2:e7:06:55:b0:
                    80:a9:06:ea:36:07:cc:f2:b5:26:96:39:e5:3f:0d:
                    2f:68:4f:bf:9c:17:55:42:2f:83:84:54:b3:41:47:
                    f9:e3:14:78:b4:11:39:b7:39:23:57:7c:22:f2:37:
                    5f:e2:40:3b:da:1d:77:8f:55:99:8e:d6:d5:94:84:
                    50:5e:88:2c:ed:7c:39:b8:08:86:50:ef:b2:01:5a:
                    26:47:86:ce:a1:d3:ff:bb:7a:8e:bc:a5:89:5e:3c:
                    19:07:b0:a5:b3:f4:cd:62:75:c9:3c:b0:66:9f:5b:
                    0e:af:3a:2d:af:b7:51:84:39:0d:fa:96:c0:76:d8:
                    75:d9:21:aa:80:80:3c:ce:df:2a:cb:e9:63:38:51:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:BC:A0:0A:33:6D:AD:50:19:46:25:AE:8B:95:66:65:99:C9:CF
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130343a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:18:de:ab:4b:70:4e:bf:78:cb:b6:37:06:76:49:fc:5e:50:
         60:97:f8:9b:5a:bb:2a:63:4c:f5:72:1e:bf:2f:38:2f:af:0c:
         be:7d:86:43:cc:ce:9f:f0:ca:9e:8c:12:28:e0:f3:27:98:0c:
         68:cd:38:8f:94:76:33:bd:da:fb:ed:05:66:c7:b9:92:70:1f:
         df:d4:60:44:af:de:5f:9f:e2:a6:5f:b2:2c:c4:90:cf:1a:e8:
         8a:1e:1f:27:ef:ff:87:40:66:75:c1:ba:31:3e:b7:2c:34:68:
         21:a7:af:43:42:72:87:18:31:e4:ba:84:1a:0a:f7:47:fc:a7:
         3f:cf:50:cc:d4:a4:c3:12:bc:c0:c5:ee:50:3d:a9:c0:ee:53:
         18:ed:04:50:e9:8a:a2:b7:b8:ff:44:a0:19:3a:18:6b:83:fd:
         e9:65:46:9d:d8:53:5b:86:bc:36:2f:4e:80:60:67:d3:a9:dc:
         33:92:24:fc:0c:ef:11:91:cc:e7:60:fe:4d:0c:00:91:18:d0:
         89:1f:9a:c6:c0:41:f3:c1:47:db:76:e9:13:f6:ba:65:91:d3:
         33:66:02:96:ad:37:fb:ec:03:66:76:42:f9:f0:e2:01:2c:21:
         25:e1:69:a8:7e:cb:d0:1a:d5:56:08:58:14:6d:56:09:14:12:
         fe:88:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----