Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130373a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          HHnXrfWGtpaZn/OGLRSOy1iOk/KWnvBfcgkiDfr+/RY=
Subject key identifier:   21:80:8F:1E:70:EA:C1:D7:E0:07:01:EC:EE:8A:51:03:E3:1B:91:7B
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       6E0740C3802193A2C6DE6583696A585F2ED8A465
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130373a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:29 +0000
ROA not before:           Mon 26 Sep 2022 07:56:29 +0000
ROA not after:            Mon 25 Sep 2023 08:01:29 +0000
asID:                     59282
IP address blocks:        2400:d680:107::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:07:40:c3:80:21:93:a2:c6:de:65:83:69:6a:58:5f:2e:d8:a4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:29 2022 GMT
            Not After : Sep 25 08:01:29 2023 GMT
        Subject: CN=21808F1E70EAC1D7E00701ECEE8A5103E31B917B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:40:02:9b:1e:82:16:89:5a:44:a0:50:56:
                    17:f4:bd:65:d3:1c:e9:82:11:04:be:39:c6:61:c4:
                    e5:93:11:8e:a4:24:ed:9e:1f:20:fa:c7:ba:29:e5:
                    01:62:c2:2c:e1:fd:0d:fa:95:31:f9:e7:73:df:e2:
                    5a:74:92:da:7a:6e:31:bc:af:10:6b:d9:80:eb:3d:
                    8f:79:18:4e:1c:db:13:90:25:3a:70:2d:6b:33:b5:
                    cd:65:a7:97:1d:27:d8:d5:c0:3e:d9:b8:9c:fb:37:
                    ca:6a:64:f2:fb:3e:33:4d:19:2b:e3:2c:6b:47:5a:
                    22:5e:c5:4f:96:f6:66:99:d4:b2:a5:62:95:d7:d0:
                    cd:90:3f:5e:73:c7:ea:e4:1c:ff:32:b2:af:f5:1b:
                    b3:cc:84:b4:e2:51:57:b2:82:33:65:b9:8d:31:fb:
                    2f:3a:d2:f1:0a:75:7a:5f:77:bd:16:84:98:93:52:
                    c3:f5:7a:63:92:6c:f2:54:4c:80:84:f0:ab:7c:4b:
                    a3:f0:c9:ca:d5:52:51:13:64:5d:29:f4:a3:df:eb:
                    1c:f2:22:1f:03:a0:dc:26:e8:cf:e6:bc:c5:bb:55:
                    1d:63:d4:2d:ba:b9:e5:e5:fc:9d:a8:e2:f8:7f:1e:
                    c2:e4:af:f9:eb:09:de:ac:d9:4e:8c:6d:f8:84:6a:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:8F:1E:70:EA:C1:D7:E0:07:01:EC:EE:8A:51:03:E3:1B:91:7B
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130373a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:107::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:65:df:0c:8a:b5:2e:0d:6a:7d:b0:bb:1f:3d:89:fd:50:
         d1:d9:fa:12:1c:9e:27:00:9b:a2:e0:07:ff:73:74:03:a5:bb:
         5c:54:52:88:b8:26:29:94:81:e6:d8:b6:26:8b:12:65:ee:2b:
         c5:38:70:42:07:ac:c5:19:4e:ca:d6:8c:2a:0c:25:c1:5b:e4:
         cb:54:bc:6d:ea:4a:49:14:67:89:54:c4:8b:6e:b4:8f:a7:8b:
         8c:10:f3:92:bf:ef:07:ab:da:57:aa:a4:f2:0c:32:35:3d:6b:
         10:e8:b8:ad:63:e0:74:fd:fa:95:0d:e0:5a:6a:1e:36:68:14:
         9e:8d:55:29:8a:78:d4:db:6f:9a:8d:e4:d8:dc:62:b1:f8:38:
         b7:3c:ff:8c:a7:72:75:1f:f3:d2:26:9b:53:37:80:a5:53:03:
         33:da:b1:d7:41:cc:95:59:02:5f:86:5b:df:e7:60:56:3c:d4:
         e2:db:4b:6d:77:ad:49:ae:3a:84:e6:25:08:b8:95:5d:b9:fb:
         18:fe:25:d8:3e:ac:5b:ba:1a:6f:c4:9c:c4:86:5f:96:09:db:
         a3:e5:82:13:08:45:39:13:dc:7f:29:26:86:6b:eb:20:8a:92:
         4b:cd:38:b5:09:a1:a4:a6:22:e5:df:d7:4b:1f:0b:6a:6c:e6:
         e9:be:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-fra.rpki-client.org