Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130613a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          HWED0KBB0ws6ZTDjjrTFqDTzqr/V/+esVnvBUl8J3+w=
Subject key identifier:   CF:B0:D8:46:65:BA:6D:9F:F1:C9:9A:46:3D:09:B3:C4:3B:D5:34:1E
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       53D61C196B251D1611982534EDEAC4F84C9619F4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130613a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:06 +0000
ROA not before:           Mon 26 Sep 2022 07:57:06 +0000
ROA not after:            Mon 25 Sep 2023 08:02:06 +0000
asID:                     59282
IP address blocks:        2400:d680:10a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:1c:19:6b:25:1d:16:11:98:25:34:ed:ea:c4:f8:4c:96:19:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:06 2022 GMT
            Not After : Sep 25 08:02:06 2023 GMT
        Subject: CN=CFB0D84665BA6D9FF1C99A463D09B3C43BD5341E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:33:ae:f2:1b:d4:fd:36:9f:bd:cf:19:bd:
                    fe:3a:ca:ab:7d:a8:65:d6:85:83:a2:e0:03:b8:32:
                    67:e3:f5:8e:45:47:ae:1d:1e:43:5f:01:1c:a2:21:
                    de:31:45:e4:f4:e4:43:7b:54:a5:4f:12:2e:90:e2:
                    ef:f7:bd:a2:65:15:c9:3f:de:a8:5a:76:82:37:ce:
                    00:6f:9f:5a:59:37:7c:43:82:f9:33:d9:54:11:71:
                    24:7d:b1:20:c8:62:19:44:a6:3b:68:f2:54:4c:a2:
                    16:d9:d1:33:d9:e3:cc:bd:c6:2e:66:97:84:9c:a2:
                    29:8f:34:00:15:d1:5b:d2:b9:43:a7:b2:a3:8f:e5:
                    02:c0:b7:c9:47:0c:95:c9:78:58:d3:82:f2:34:21:
                    b4:d6:41:37:36:f1:ad:59:fb:44:9b:ce:f5:9f:ad:
                    99:25:66:fd:f4:b2:85:74:94:a0:88:3c:59:7c:c4:
                    9d:00:7a:70:24:33:0b:16:3b:1e:6e:49:98:0b:3b:
                    3e:03:52:91:a1:17:46:e1:ee:ad:70:14:a2:26:ca:
                    5e:11:cd:11:96:4a:0d:01:e6:76:13:40:b1:bc:3b:
                    bc:c4:6e:02:e6:19:aa:e8:e1:a4:d3:7d:10:3c:36:
                    1e:75:27:db:c2:97:a2:25:f1:84:5c:aa:ca:12:7f:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B0:D8:46:65:BA:6D:9F:F1:C9:9A:46:3D:09:B3:C4:3B:D5:34:1E
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130613a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:90:1f:f5:05:ac:3a:4a:72:f4:b7:79:29:2b:89:6e:68:ef:
         82:00:fd:0a:75:49:79:35:49:60:08:ae:83:48:f7:21:ec:57:
         46:f6:02:62:49:04:18:07:60:77:5a:94:2a:66:8b:5e:d5:22:
         36:f3:2d:df:1f:5c:0d:c0:6f:4a:d9:6a:60:1b:24:6e:2d:a0:
         ad:56:84:7f:15:6f:b1:fd:23:04:90:1a:f7:a2:10:d4:73:f5:
         a6:bd:d1:e4:97:43:13:f5:86:02:4a:3e:19:e0:db:51:19:7e:
         e4:ce:8e:fc:3b:b5:aa:d3:86:d2:86:0c:6e:c9:3e:93:47:c1:
         4e:9f:19:2c:a3:73:7b:94:23:78:37:f8:9f:37:e0:83:2b:dc:
         e9:5c:02:ba:04:03:b5:b3:fd:15:94:0b:86:30:10:c1:52:4c:
         ea:35:ea:f0:5a:b2:ab:cc:f7:c6:23:e3:cb:99:48:70:77:89:
         3d:7a:25:79:e4:40:b3:9c:e8:97:d2:e2:c7:69:0c:2c:c4:f8:
         34:3c:11:80:c4:21:a3:41:b1:b0:45:ad:d5:4a:c6:e5:aa:ac:
         d1:33:4f:9b:f1:ef:6a:94:b3:6d:5b:55:7d:5f:bf:cb:64:f6:
         9d:f4:d5:45:78:ea:04:22:9c:77:73:75:2c:41:84:4e:bf:58:
         4b:ac:c6:d4
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUU9YcGWslHRYRmCU07erE+EyWGfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDZaFw0yMzA5MjUwODAyMDZaMDMxMTAvBgNV
BAMTKENGQjBEODQ2NjVCQTZEOUZGMUM5OUE0NjNEMDlCM0M0M0JENTM0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhTOu8hvU/Tafvc8Zvf46yqt9
qGXWhYOi4AO4Mmfj9Y5FR64dHkNfARyiId4xReT05EN7VKVPEi6Q4u/3vaJlFck/
3qhadoI3zgBvn1pZN3xDgvkz2VQRcSR9sSDIYhlEpjto8lRMohbZ0TPZ48y9xi5m
l4ScoimPNAAV0VvSuUOnsqOP5QLAt8lHDJXJeFjTgvI0IbTWQTc28a1Z+0SbzvWf
rZklZv30soV0lKCIPFl8xJ0AenAkMwsWOx5uSZgLOz4DUpGhF0bh7q1wFKImyl4R
zRGWSg0B5nYTQLG8O7zEbgLmGaro4aTTfRA8Nh51J9vCl6Il8YRcqsoSf40dAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUz7DYRmW6bZ/xyZpGPQmzxDvVNB4wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMDYxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
CjANBgkqhkiG9w0BAQsFAAOCAQEAvJAf9QWsOkpy9Ld5KSuJbmjvggD9CnVJeTVJ
YAiug0j3IexXRvYCYkkEGAdgd1qUKmaLXtUiNvMt3x9cDcBvStlqYBskbi2grVaE
fxVvsf0jBJAa96IQ1HP1pr3R5JdDE/WGAko+GeDbURl+5M6O/Du1qtOG0oYMbsk+
k0fBTp8ZLKNze5QjeDf4nzfggyvc6VwCugQDtbP9FZQLhjAQwVJM6jXq8Fqyq8z3
xiPjy5lIcHeJPXoleeRAs5zol9Lix2kMLMT4NDwRgMQho0GxsEWt1UrG5aqs0TNP
m/HvapSzbVtVfV+/y2T2nfTVRXjqBCKcd3N1LEGETr9YS6zG1A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-ams.rpki-client.org