Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130353a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          NiCUiZEn0canSs+Ux84JKx9Y44adtN9zbXdOm306XX0=
Subject key identifier:   FB:6C:A6:C9:EE:26:D0:46:5C:C7:B7:3D:8A:84:3F:D5:78:B1:3A:79
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       2F0F68427D04C1662BAD3A6486D6C656F96C92CC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130353a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:27 +0000
ROA not before:           Mon 26 Sep 2022 07:56:27 +0000
ROA not after:            Mon 25 Sep 2023 08:01:27 +0000
asID:                     59282
IP address blocks:        2400:d680:105::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:68:42:7d:04:c1:66:2b:ad:3a:64:86:d6:c6:56:f9:6c:92:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:27 2022 GMT
            Not After : Sep 25 08:01:27 2023 GMT
        Subject: CN=FB6CA6C9EE26D0465CC7B73D8A843FD578B13A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:9e:be:dd:ba:78:29:c2:52:76:40:de:c1:
                    b3:10:18:f6:aa:43:e6:6f:89:b8:4e:fe:ab:c9:79:
                    35:00:3c:e3:8f:fe:d1:79:f9:76:3e:5c:90:54:c7:
                    91:d7:a7:34:74:22:e5:fb:a5:e2:50:d1:6e:6f:c5:
                    73:2a:f7:56:65:1e:b5:2f:ab:43:07:ca:99:a7:b0:
                    69:82:3a:01:81:ab:35:8c:44:d4:12:9d:5d:07:7f:
                    86:02:c1:53:be:16:d9:93:c7:32:99:2d:71:76:82:
                    2a:ba:6f:b1:45:db:8d:b4:e3:2a:ef:a7:5e:5a:c7:
                    f8:c3:e0:ad:e1:b4:42:3e:c7:67:58:89:92:00:3c:
                    4f:cd:c0:b2:11:63:79:c4:de:88:db:a3:a6:c8:cf:
                    4d:c9:46:e6:53:ea:aa:be:44:f1:01:2d:ed:72:04:
                    90:de:82:60:52:ea:06:9e:ff:15:15:de:5f:f8:e8:
                    3f:76:d1:21:0b:8c:18:69:5f:71:5a:db:b1:08:15:
                    d5:e8:9f:77:b4:82:9c:d6:10:38:6b:c5:f7:b9:80:
                    97:f6:2b:97:a3:26:d6:b0:df:b4:af:be:6c:41:84:
                    73:8e:8d:80:04:13:25:3b:73:75:0d:c7:eb:b0:76:
                    3a:8e:1c:ea:fe:bf:22:2c:17:7c:2e:73:58:89:b5:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:A6:C9:EE:26:D0:46:5C:C7:B7:3D:8A:84:3F:D5:78:B1:3A:79
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130353a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:b9:f1:d3:3e:fc:e5:e0:1c:44:cf:48:90:54:90:8e:a6:
         8a:7a:bd:8d:94:3c:49:30:9c:39:9d:1e:07:a0:a9:c6:29:b1:
         98:58:3a:c7:cc:74:52:cf:4a:a3:f5:3c:eb:79:b5:0e:88:bb:
         b6:d7:b6:cb:e1:f7:59:66:79:00:2c:0a:04:d6:13:96:cf:7e:
         cd:d5:f5:81:80:5e:26:00:95:db:15:e1:bb:7e:28:bb:a8:fb:
         ef:42:3d:29:30:a7:04:96:ca:dc:19:72:48:b8:b0:bc:58:01:
         b6:e7:1e:4b:09:af:a5:23:03:06:2e:81:28:83:15:e5:b1:f0:
         30:09:35:b9:1e:78:ff:88:7b:dd:34:fc:de:7c:dd:28:c8:e9:
         84:98:c6:24:71:4e:ed:e3:ca:35:a3:32:d0:52:e9:35:48:ed:
         ab:7c:b7:f2:62:08:cc:6b:cc:fc:49:e5:b1:63:d9:45:d6:bb:
         00:4a:2a:a3:ed:50:5f:43:87:77:b6:4c:c6:3a:cc:48:fa:87:
         29:8c:17:8f:fc:0c:32:dd:5b:fa:5f:64:4d:ed:68:67:bf:6c:
         b8:ea:ef:05:a3:66:31:98:1b:49:55:f2:39:9a:ee:2a:4f:09:
         2a:62:c7:30:32:ae:fd:71:80:4a:c3:a7:ef:65:0c:c6:b0:ce:
         96:8e:f3:c2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIULw9oQn0EwWYrrTpkhtbGVvlskswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MjdaFw0yMzA5MjUwODAxMjdaMDMxMTAvBgNV
BAMTKEZCNkNBNkM5RUUyNkQwNDY1Q0M3QjczRDhBODQzRkQ1NzhCMTNBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bp6+3bp4KcJSdkDewbMQGPaq
Q+ZvibhO/qvJeTUAPOOP/tF5+XY+XJBUx5HXpzR0IuX7peJQ0W5vxXMq91ZlHrUv
q0MHypmnsGmCOgGBqzWMRNQSnV0Hf4YCwVO+FtmTxzKZLXF2giq6b7FF24204yrv
p15ax/jD4K3htEI+x2dYiZIAPE/NwLIRY3nE3ojbo6bIz03JRuZT6qq+RPEBLe1y
BJDegmBS6gae/xUV3l/46D920SELjBhpX3Fa27EIFdXon3e0gpzWEDhrxfe5gJf2
K5ejJtaw37SvvmxBhHOOjYAEEyU7c3UNx+uwdjqOHOr+vyIsF3wuc1iJtXoFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+2ymye4m0EZcx7c9ioQ/1XixOnkwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMDM1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
BTANBgkqhkiG9w0BAQsFAAOCAQEAM/G58dM+/OXgHETPSJBUkI6minq9jZQ8STCc
OZ0eB6CpximxmFg6x8x0Us9Ko/U863m1Doi7tte2y+H3WWZ5ACwKBNYTls9+zdX1
gYBeJgCV2xXhu34ou6j770I9KTCnBJbK3BlySLiwvFgBtuceSwmvpSMDBi6BKIMV
5bHwMAk1uR54/4h73TT83nzdKMjphJjGJHFO7ePKNaMy0FLpNUjtq3y38mIIzGvM
/EnlsWPZRda7AEoqo+1QX0OHd7ZMxjrMSPqHKYwXj/wMMt1b+l9kTe1oZ79suOrv
BaNmMZgbSVXyOZruKk8JKmLHMDKu/XGASsOn72UMxrDOlo7zwg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-fra.rpki-client.org