Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131343a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          4ipczNr3CHm+ZvzPMACfGUlPPMmU/1ye2/ab2y1PMUA=
Subject key identifier:   B2:01:33:3C:D4:23:AF:93:EE:38:EB:80:A4:84:FF:62:29:2F:6C:C2
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       1ED665A9FE5555994649F803345A0944F5502949
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131343a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:16 +0000
ROA not before:           Mon 26 Sep 2022 07:57:16 +0000
ROA not after:            Mon 25 Sep 2023 08:02:16 +0000
asID:                     59282
IP address blocks:        2400:d680:114::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d6:65:a9:fe:55:55:99:46:49:f8:03:34:5a:09:44:f5:50:29:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:16 2022 GMT
            Not After : Sep 25 08:02:16 2023 GMT
        Subject: CN=B201333CD423AF93EE38EB80A484FF62292F6CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:fa:8a:a1:f3:f3:67:8e:90:bf:2d:f8:e1:
                    c4:90:0a:be:cf:4a:1b:f1:1e:5b:0f:e7:13:bf:52:
                    06:d5:2d:de:19:c0:f9:d5:ee:29:57:6c:cc:49:eb:
                    52:cc:dd:fc:9f:ca:43:f9:83:4f:8d:1f:bd:44:d5:
                    4e:0f:43:30:ab:de:49:80:b7:62:ac:6e:33:a3:a8:
                    b9:1a:15:2c:3f:f2:da:c6:92:1d:e8:10:81:88:ec:
                    5c:f0:b5:4d:61:1e:2f:c6:c5:5e:84:4a:c7:6b:9c:
                    53:0c:bb:5a:11:bb:1b:dc:a2:9a:27:45:cf:33:68:
                    ff:25:ed:59:08:63:81:37:d5:c4:e1:f5:a1:4c:77:
                    84:c7:16:46:18:c1:cf:6c:da:6f:8f:ea:6c:a1:7d:
                    41:d6:83:b4:98:77:35:a9:33:8d:54:26:f5:4f:a7:
                    75:bd:ce:47:b3:bc:a5:7c:48:53:59:27:a6:e4:1b:
                    a3:f2:83:08:07:2e:75:bc:68:1e:29:93:dc:8f:43:
                    e9:0d:da:fe:2d:92:d4:76:26:ee:f1:52:f1:62:d9:
                    93:e7:c4:e0:7b:a5:47:d0:5c:5b:6f:e5:fb:9b:df:
                    3a:6b:91:81:dc:aa:6b:e5:8b:ef:54:90:f0:cb:54:
                    70:7c:30:c8:03:e4:46:5c:04:9f:4a:9f:f0:5f:cc:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:33:3C:D4:23:AF:93:EE:38:EB:80:A4:84:FF:62:29:2F:6C:C2
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131343a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:46:89:f8:dc:9f:0a:bb:07:7e:08:5a:d8:74:07:7a:2c:d1:
         12:8d:48:09:1b:bf:4f:67:fb:a1:a7:74:a8:4c:fe:1e:fc:28:
         03:9d:92:0f:2e:62:a3:e7:54:d7:15:89:09:9d:ff:08:84:48:
         c0:5c:4c:4a:cb:00:a1:aa:2e:84:ef:fe:35:5e:5d:e0:a4:1a:
         db:26:ab:ed:f1:6d:be:cc:0d:28:13:41:f8:c9:f8:00:58:1b:
         96:06:73:c9:23:77:8c:69:e1:ce:b0:84:31:a1:0d:ba:db:70:
         7f:e7:5b:ef:2a:76:9a:b5:3a:14:23:2f:00:42:e5:95:ff:1e:
         60:91:ec:b3:8f:16:78:87:44:d3:d6:53:86:99:81:2c:bd:bf:
         59:28:4d:fd:17:0f:87:b7:22:2f:5d:29:d1:f6:51:26:6a:ee:
         02:d9:94:2e:24:77:db:0d:0a:ee:bb:bd:84:d3:cf:44:4d:9e:
         0c:c6:d8:02:69:b0:ff:84:51:5a:a6:9e:95:6d:d9:80:cb:1e:
         b0:61:03:8f:8b:e0:3b:30:a4:68:18:84:9f:69:bf:ad:68:92:
         2c:d6:49:bb:1c:a1:f1:4c:1a:94:06:bd:90:d5:bd:f5:66:81:
         f5:f6:fc:a3:88:41:5a:d9:b3:04:c4:03:dc:cb:5e:e1:eb:b1:
         69:3f:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----