Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131353a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          LCxUZ4k9CdZsoBzmKNwffSZ4hsOMufLP8Rbf1obZw00=
Subject key identifier:   64:D2:3F:77:B0:87:82:07:6C:BD:DF:60:BF:DA:9F:8B:80:31:79:C3
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       47C13712ED4DD0411110AD05DA355677DCD88DBF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131353a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:45 +0000
ROA not before:           Mon 26 Sep 2022 07:56:45 +0000
ROA not after:            Mon 25 Sep 2023 08:01:45 +0000
asID:                     59282
IP address blocks:        2400:d680:115::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c1:37:12:ed:4d:d0:41:11:10:ad:05:da:35:56:77:dc:d8:8d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:45 2022 GMT
            Not After : Sep 25 08:01:45 2023 GMT
        Subject: CN=64D23F77B08782076CBDDF60BFDA9F8B803179C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:4e:3c:59:25:3c:44:0a:cd:e3:b7:fb:b1:
                    7e:d8:8b:24:32:f4:02:af:b2:95:2b:f4:f5:58:8e:
                    7d:70:2a:7b:e1:8c:ee:85:b5:df:4b:9e:ca:76:31:
                    02:95:9a:4c:18:47:17:59:61:a6:53:06:ee:36:a7:
                    07:06:f5:da:b4:cb:88:8b:12:e7:3a:b7:cd:7d:33:
                    22:84:85:2d:5b:95:06:eb:89:94:47:d5:48:58:55:
                    09:6c:68:81:04:eb:bc:27:c9:f6:ad:a9:71:27:49:
                    b6:1a:47:7a:f2:ba:eb:26:06:19:e6:64:d6:65:39:
                    0d:44:d7:3a:8a:df:bf:10:e2:3f:ae:49:b7:1b:ca:
                    86:48:d0:c9:1b:b2:64:cd:32:c6:83:62:b1:79:95:
                    9c:eb:95:9a:79:06:ff:52:21:f0:99:91:3b:d3:aa:
                    54:9b:9b:f6:07:76:d3:39:04:b0:e7:41:86:45:ab:
                    50:1e:12:bb:0b:7f:59:1a:04:d5:49:a4:cd:d6:28:
                    9f:ab:0b:2a:00:36:69:45:be:e3:bc:e8:1a:a3:df:
                    e0:06:83:8c:50:90:57:6f:61:e8:0b:cb:d4:bb:fc:
                    ec:e2:2c:7e:d9:66:9e:7c:c6:0c:8d:d6:07:7a:ff:
                    0f:92:e4:c9:c9:0a:84:6a:5d:04:bc:0f:9e:79:aa:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:3F:77:B0:87:82:07:6C:BD:DF:60:BF:DA:9F:8B:80:31:79:C3
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131353a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:f5:43:16:00:10:57:76:24:a8:77:02:f4:04:af:46:d9:48:
         b9:b7:9a:a5:ad:7c:03:58:a0:27:08:0a:a8:1b:da:1a:23:df:
         b5:54:65:97:d3:a9:45:ea:ae:ed:74:02:6a:44:c7:b1:65:33:
         81:17:19:2e:67:de:86:c4:89:f4:00:6e:bc:d3:0e:9d:1e:c2:
         28:37:d3:65:4f:0d:d8:04:51:c3:02:0e:fe:2f:7e:71:c6:80:
         3c:36:55:07:eb:6f:66:06:bc:b2:02:e7:e1:0f:a1:34:0b:2d:
         e9:44:b7:71:f1:27:83:bb:f5:a9:ef:7e:86:4b:4f:a1:db:b3:
         1b:24:10:59:b6:7c:79:56:93:14:30:7f:1d:48:2b:a9:9a:0c:
         9f:46:06:86:5e:7a:d8:8a:ff:29:a4:96:ef:98:03:99:d1:a5:
         8b:9a:49:8c:08:11:e9:21:1f:3a:c7:83:50:3d:1c:b8:39:cf:
         71:ff:36:b2:58:37:45:d4:87:1f:45:ae:25:52:30:09:75:d0:
         89:85:ae:fc:33:93:7b:dd:b5:3f:3a:55:d9:ca:b8:ba:78:c9:
         e7:6d:9a:89:e8:96:ae:9c:b0:89:9f:f8:ad:2f:60:3d:d7:3e:
         09:ee:1b:bc:c9:da:27:a1:18:d0:2a:af:5c:25:3f:bf:3b:80:
         9e:44:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----