Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130633a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          e6LX3deq6eKlrcvK7kbxNplAiWcVyc2dXTHAzrBeu7Y=
Subject key identifier:   41:12:06:90:B7:E3:00:5B:A4:8C:BF:26:FA:CA:A4:3D:6D:ED:4C:C6
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       1B91E0AB96D69D7DD503EEB2E98571A4AB7C2D23
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130633a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:51 +0000
ROA not before:           Mon 26 Sep 2022 07:56:51 +0000
ROA not after:            Mon 25 Sep 2023 08:01:51 +0000
asID:                     59282
IP address blocks:        2400:d680:10c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:91:e0:ab:96:d6:9d:7d:d5:03:ee:b2:e9:85:71:a4:ab:7c:2d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:51 2022 GMT
            Not After : Sep 25 08:01:51 2023 GMT
        Subject: CN=41120690B7E3005BA48CBF26FACAA43D6DED4CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:b2:e6:47:bb:63:2d:ec:49:45:c2:8e:bc:
                    f6:7a:63:16:bd:12:7b:28:46:21:5b:13:20:a5:51:
                    81:74:69:b5:2f:70:48:60:a8:9d:c8:2e:d7:67:c8:
                    ba:01:60:99:08:de:d7:c6:73:a3:f2:bf:af:d3:97:
                    e2:91:9f:d0:ab:f1:1d:7f:a4:e7:82:08:39:89:2a:
                    6a:50:d3:1d:5b:14:d3:14:06:ae:81:03:6d:16:81:
                    81:96:e2:d3:d8:48:a4:12:fc:70:92:2b:6a:3c:c2:
                    53:9e:8f:fd:a4:65:82:0c:40:1c:9c:47:93:d5:f0:
                    08:37:57:af:dc:cd:c2:61:48:ef:09:80:58:54:8f:
                    ae:d6:4d:f0:10:00:b6:67:2c:7a:85:0b:ae:22:50:
                    ee:20:ba:b5:ca:bf:0d:1d:d7:ee:14:fe:31:c3:c5:
                    83:21:b3:39:74:b6:dd:61:ce:7a:52:b6:79:cc:0c:
                    94:bd:b9:b8:76:f7:48:ba:35:ae:b0:c7:c0:3d:68:
                    41:6a:09:95:b8:12:34:2a:c1:b4:19:e3:89:f9:8b:
                    03:c1:e7:48:69:82:e8:ba:25:be:5b:33:18:c1:fb:
                    1f:cd:fd:01:89:2c:06:11:79:2e:76:99:98:4b:b1:
                    3d:51:3f:6e:e2:a5:6d:68:a4:10:38:95:e1:6f:10:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:12:06:90:B7:E3:00:5B:A4:8C:BF:26:FA:CA:A4:3D:6D:ED:4C:C6
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130633a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:51:b5:9a:96:fc:c9:b7:c3:a2:d5:36:41:eb:c2:b7:90:d3:
         16:df:b6:49:fc:9a:8e:1d:fe:d7:04:a4:ba:b8:ba:5f:c4:20:
         cc:6f:1f:ed:d3:d2:c2:ee:c0:43:3b:ec:f5:31:49:19:cc:89:
         c6:8b:f9:51:63:f7:43:ca:79:c9:5f:50:2f:d4:83:7f:01:5b:
         17:60:ba:63:32:87:d1:38:a5:4e:15:a1:23:52:84:b7:a9:e4:
         5a:e4:a0:d5:70:8a:67:c0:09:fc:ab:72:23:18:1c:73:35:dc:
         fd:4d:62:be:62:f1:b4:39:1a:d6:ce:2f:d9:a3:46:4b:52:46:
         b1:56:22:25:35:d9:f6:1a:c0:58:7a:44:b0:29:2f:cd:75:ec:
         13:b5:7b:92:b3:15:95:07:e1:01:7e:05:25:24:49:7b:26:fb:
         c2:2f:da:90:51:f7:59:82:f8:3b:14:17:c1:d2:a3:8b:b2:6e:
         3c:c9:b4:b0:e8:07:de:41:d3:54:64:fe:47:3e:02:4d:3a:d2:
         c9:f8:44:ed:fe:66:7d:cc:16:a6:a0:ee:04:c7:7f:36:74:81:
         57:4a:75:99:ef:a3:38:6f:94:a4:0d:5c:41:41:4f:94:36:38:
         b3:30:24:9c:e7:75:89:45:a9:ea:2f:26:30:1a:7a:e6:62:c1:
         89:7d:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-ams.rpki-client.org