Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130653a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3130653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          JYGe+cqq6m1AkivRKgk5PNNMw5XXBVHtbHfH3POpYyI=
Subject key identifier:   FC:4C:D2:40:D2:05:9B:99:47:E9:E1:9F:9C:2E:11:62:AB:F7:87:AD
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       2CE5A14EA1E33FA8C03BC8BF254BAC58A562B62D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130653a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:06 +0000
ROA not before:           Mon 26 Sep 2022 07:57:06 +0000
ROA not after:            Mon 25 Sep 2023 08:02:06 +0000
asID:                     59282
IP address blocks:        2400:d680:10e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e5:a1:4e:a1:e3:3f:a8:c0:3b:c8:bf:25:4b:ac:58:a5:62:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:06 2022 GMT
            Not After : Sep 25 08:02:06 2023 GMT
        Subject: CN=FC4CD240D2059B9947E9E19F9C2E1162ABF787AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:54:88:ab:85:66:55:11:f4:d9:87:b0:3a:
                    02:77:08:c7:87:28:d4:91:f9:75:55:72:31:e3:e0:
                    24:22:90:9c:5d:e5:6f:6e:2f:29:6d:e2:69:26:01:
                    69:f3:48:fd:57:d9:07:33:b8:2c:97:7c:38:0b:fe:
                    18:b0:a4:84:60:22:21:26:7c:fe:0c:d6:16:18:fa:
                    32:2e:5f:aa:97:58:a0:87:d3:97:ee:4a:ae:89:0e:
                    db:d4:d7:ac:88:1f:a3:9d:ae:24:4b:e2:81:ea:a9:
                    70:26:a9:bf:47:8c:82:0a:e7:c5:8f:fe:76:89:8a:
                    97:1b:bc:e9:59:db:e5:f6:9f:bc:6d:2e:1d:2a:a7:
                    3c:7e:92:5a:7d:71:8c:f1:be:ef:e3:89:cf:3e:5d:
                    da:c6:49:41:c5:cc:ac:de:55:a4:15:7d:24:9f:02:
                    13:a9:e0:c9:db:47:c1:d1:87:ae:53:f2:c5:59:59:
                    8e:e8:68:de:9e:f7:b2:92:11:35:20:1d:ca:7c:15:
                    82:3e:a3:3d:68:21:96:44:20:56:b2:d5:13:40:31:
                    1d:ab:ca:74:56:db:46:23:e4:56:01:3d:90:79:20:
                    80:92:e4:d0:11:ba:49:e2:06:eb:2f:5e:7f:8a:79:
                    f1:61:a4:0f:a7:fa:bb:b5:02:fa:8c:f5:b6:91:4e:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4C:D2:40:D2:05:9B:99:47:E9:E1:9F:9C:2E:11:62:AB:F7:87:AD
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3130653a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:10e::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:4b:fd:43:63:74:de:a2:cd:e6:d1:11:f2:a9:48:0d:af:8b:
         16:ca:8a:1e:84:93:19:64:59:5b:99:28:3d:04:a8:26:a1:7b:
         d8:63:0d:3c:83:8b:ed:67:16:3c:74:eb:55:c9:f8:2a:58:3f:
         8a:6f:73:42:83:a0:8f:11:6b:22:5a:a2:e9:3d:9b:19:e5:23:
         49:7b:c9:cb:78:81:d9:57:ba:de:b7:bc:60:65:ce:40:05:d4:
         46:65:57:4e:5b:75:ef:26:13:18:de:44:17:d3:db:53:6f:04:
         2e:0b:d6:a0:fa:d8:5d:1c:49:7b:0f:a3:85:fb:a5:1b:a6:3f:
         7e:88:ed:72:20:38:fa:a8:a0:aa:cb:72:d0:f8:e1:81:1d:24:
         8c:72:6a:ba:10:8e:79:4e:d5:00:92:27:62:b9:3f:f0:8b:79:
         de:a1:ca:40:85:cc:ae:81:b9:00:41:ab:73:0c:3f:e9:8e:ef:
         5d:77:6c:49:84:12:88:90:82:39:74:d2:d0:48:d0:b1:05:c7:
         de:b7:1b:f2:39:b9:a7:85:bd:1a:44:12:6e:22:a0:54:de:6e:
         4c:a6:f3:d2:2c:1b:12:19:7d:06:53:d3:38:bd:0b:ee:81:37:
         eb:b0:42:fb:40:61:45:17:2a:a4:a1:a4:3c:0b:52:91:fd:1f:
         b4:95:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----