Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          Kur9UKXerwMnOTCLSYQIjteWfuIEYPBDHzMU7Nagw+Y=
Subject key identifier:   C9:C0:2D:D1:40:CE:53:F8:06:B8:8D:11:7C:03:33:EF:E7:B0:30:45
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       C845087FEE7A467DE6550A096B1F183B5EC07B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:50 +0000
ROA not before:           Mon 26 Sep 2022 07:56:50 +0000
ROA not after:            Mon 25 Sep 2023 08:01:50 +0000
asID:                     59282
IP address blocks:        2400:d680:106::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c8:45:08:7f:ee:7a:46:7d:e6:55:0a:09:6b:1f:18:3b:5e:c0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:50 2022 GMT
            Not After : Sep 25 08:01:50 2023 GMT
        Subject: CN=C9C02DD140CE53F806B88D117C0333EFE7B03045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:92:84:fb:72:d5:96:e7:3e:96:a9:74:d6:
                    aa:88:27:d4:dd:9a:b5:6b:ee:89:54:e3:72:cc:57:
                    22:e8:96:84:f0:1a:cf:77:26:5b:44:ec:06:95:f5:
                    2f:79:b6:33:4c:9e:01:9d:53:66:07:45:60:65:48:
                    e6:ca:6d:d3:60:fb:ee:de:be:57:77:b8:ab:d9:b2:
                    82:b1:d6:a4:42:c4:9b:9d:3d:dc:ab:c9:8e:d9:e1:
                    8d:f0:cc:07:e0:cf:d9:11:a1:8a:31:ae:69:12:b4:
                    c1:44:4a:a0:a8:42:77:63:bb:83:43:aa:4d:2e:ea:
                    6a:e9:e5:f6:1b:b4:4b:8e:f1:10:14:78:fc:94:41:
                    0c:5d:71:81:b9:19:51:7b:7f:c0:a1:80:18:fe:00:
                    75:f5:cd:d0:fc:de:40:09:5e:b0:db:a6:cb:db:aa:
                    a0:7b:4a:9a:35:50:9a:ad:5e:2e:0f:8d:af:28:51:
                    78:ca:20:ae:d5:45:8a:ce:a6:c5:0c:06:d1:34:b8:
                    68:fa:12:60:37:7a:48:a3:63:e2:97:69:b8:16:b0:
                    f0:2e:ca:a6:8c:c7:12:43:a0:34:09:e9:ed:95:d5:
                    ac:13:42:77:db:2c:ef:6e:ce:46:c3:2c:03:02:be:
                    aa:31:69:0e:bb:42:f0:00:a1:18:ed:8a:01:2b:3c:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C0:2D:D1:40:CE:53:F8:06:B8:8D:11:7C:03:33:EF:E7:B0:30:45
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130363a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:52:78:f4:7a:1c:53:cf:ec:94:44:bc:40:e7:f7:2b:d6:b2:
         c6:af:8e:2a:f3:32:f9:4d:34:ff:f8:23:19:23:ac:bf:87:32:
         f4:73:38:a2:99:54:0d:2c:d8:27:f8:fc:91:75:a8:52:bb:93:
         be:91:1f:05:1c:1b:92:21:46:01:83:f1:61:6c:7c:73:c1:3c:
         14:44:e3:19:a5:04:ee:e1:6f:a0:3d:b6:43:dc:b8:8f:b1:6f:
         f3:2c:c1:c5:2e:63:10:e5:6c:67:83:0a:66:2d:05:50:41:9d:
         9d:74:85:b6:38:2c:79:22:2f:24:48:bf:6b:74:fc:d8:a6:62:
         73:e4:6c:f3:59:8b:df:16:c9:0b:3a:c0:87:7f:5e:46:61:b8:
         6e:6b:93:a7:7c:74:22:f8:0f:ea:ab:27:95:f3:62:cf:01:e3:
         73:70:bc:74:7d:f3:f2:97:a7:ad:11:d2:6c:16:a4:e4:58:04:
         8a:8f:fa:c0:8e:b4:4b:bc:22:41:ad:fb:20:a0:a2:b6:c4:66:
         ba:f8:13:8d:52:21:00:0f:63:20:17:12:8d:0c:4a:3d:ff:d9:
         dd:e3:0e:c8:74:3c:f6:b6:3f:5d:14:4b:b9:74:01:7f:71:3b:
         a5:98:a9:c9:ab:36:86:54:74:9d:5b:57:37:4a:04:6c:f1:e8:
         0a:08:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----