Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131303a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          sQZqJCoXkMSBrbzrrxaP8qfJf4feWYnRnAJAMVQUsOI=
Subject key identifier:   F9:19:40:DB:DC:77:02:2A:9F:B3:B7:F3:5C:76:12:5E:DE:59:9F:42
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       4798BC1CF9732BB681AC4C0663CC282660FF0F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131303a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:23 +0000
ROA not before:           Mon 26 Sep 2022 07:56:23 +0000
ROA not after:            Mon 25 Sep 2023 08:01:23 +0000
asID:                     59282
IP address blocks:        2400:d680:110::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:98:bc:1c:f9:73:2b:b6:81:ac:4c:06:63:cc:28:26:60:ff:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:23 2022 GMT
            Not After : Sep 25 08:01:23 2023 GMT
        Subject: CN=F91940DBDC77022A9FB3B7F35C76125EDE599F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8b:48:13:fa:75:48:46:03:e2:bd:2d:eb:ac:
                    f5:75:0e:87:a7:73:fd:57:02:48:28:8a:cc:d3:0e:
                    0d:f4:a0:ae:96:d6:66:a4:c4:b8:a3:eb:bd:bc:6d:
                    75:dc:da:db:f9:b5:22:da:1b:c6:40:4f:19:e9:19:
                    c0:12:d8:32:b4:f1:03:95:9e:0e:b0:82:d9:9d:ec:
                    a6:c5:22:1e:56:cb:3e:1a:8d:df:f0:e4:a7:a8:88:
                    62:21:5c:a8:dd:b1:4f:e3:b9:19:47:dc:d4:24:f9:
                    ae:3b:04:66:67:20:4d:a6:97:ae:00:b1:ae:28:15:
                    5c:11:8a:30:4c:e7:5f:19:c3:7d:4d:c5:46:8e:53:
                    f1:4c:33:38:49:01:b3:80:d1:66:d4:95:68:dc:94:
                    1e:f4:13:a9:f5:95:75:67:02:8e:46:8f:fb:a7:3f:
                    be:32:33:bc:07:10:9e:54:ec:0c:f1:df:8a:3c:f2:
                    a1:18:c8:08:4d:7e:b6:65:07:67:c1:16:0b:7a:76:
                    a4:44:53:c5:af:04:27:e3:fb:f5:02:cf:cc:63:95:
                    ea:f0:7d:71:29:e9:b7:e7:3b:9a:b0:49:76:b4:ec:
                    b9:b1:ac:82:86:b2:a2:41:02:35:09:ce:81:4b:0e:
                    7d:d8:1e:a5:db:1a:31:77:e3:97:06:f7:46:50:9b:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:19:40:DB:DC:77:02:2A:9F:B3:B7:F3:5C:76:12:5E:DE:59:9F:42
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131303a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:72:ac:a1:ff:4d:8e:34:98:6f:47:b6:b9:84:19:80:7c:12:
         72:7d:fa:05:3b:50:a8:d4:3c:f0:da:79:9c:77:84:8f:b2:c2:
         75:ea:15:b7:c4:15:0a:62:33:ca:e0:59:e4:1b:d0:48:4c:34:
         79:4a:10:b8:55:f0:6b:3a:02:16:04:b0:5f:40:29:0d:3a:62:
         ce:f0:a8:04:3e:1f:50:70:c0:1e:e8:d8:a5:3d:a8:b9:b0:2e:
         f2:10:1e:cc:12:57:a0:04:89:86:db:2e:3a:d0:08:22:7f:db:
         a3:df:ae:7d:3a:77:df:f7:be:b8:07:65:12:32:64:0e:b4:43:
         35:f5:67:c5:9c:c4:88:86:6d:e4:63:30:d7:f7:7b:bf:47:59:
         96:d4:40:1f:93:77:24:31:7d:e3:78:25:84:70:33:46:71:a8:
         92:2c:16:7c:c5:dd:33:29:ed:ae:0e:c0:2b:44:a5:fe:82:5b:
         69:05:37:f9:7b:6d:af:30:32:92:88:ef:f9:86:2b:d5:12:b2:
         b0:af:9a:a6:69:68:4b:a4:e5:9b:2e:2b:ca:63:71:28:46:9c:
         8c:31:03:47:6c:a0:d4:0e:6d:ed:bb:77:a9:c7:1f:17:e2:dd:
         44:8a:6e:64:b9:cb:53:fa:3d:f2:2a:ae:72:34:2c:93:d9:89:
         f6:2f:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----