Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          DGZ2g6VCiPpHsiFYhJIffMEUvjVlAwefSmNxXwsnoro=
Subject key identifier:   A9:7D:0C:2F:11:6E:92:D2:ED:17:18:55:70:35:CA:59:AA:A7:58:45
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       33467E4A25395DB2B72CB1604BCF9499E7BA0F9D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:36 +0000
ROA not before:           Mon 26 Sep 2022 07:56:36 +0000
ROA not after:            Mon 25 Sep 2023 08:01:36 +0000
asID:                     59282
IP address blocks:        2400:d680:118::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:7e:4a:25:39:5d:b2:b7:2c:b1:60:4b:cf:94:99:e7:ba:0f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:36 2022 GMT
            Not After : Sep 25 08:01:36 2023 GMT
        Subject: CN=A97D0C2F116E92D2ED1718557035CA59AAA75845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:7a:f3:3f:d2:82:51:f7:46:d2:4b:03:fe:
                    82:c7:c1:53:2a:4b:02:7b:4e:39:98:c5:b1:85:de:
                    2c:bb:85:3d:55:02:dc:dc:a1:1c:ad:6f:af:3e:a9:
                    9c:f3:f1:cd:48:93:33:af:1e:29:20:cc:23:9d:c8:
                    2a:14:7c:b0:f6:c7:b9:83:cf:7c:f3:12:12:ae:6b:
                    ae:ab:e0:65:2c:7c:39:70:05:3f:70:b8:74:73:8f:
                    04:62:a1:07:59:1b:6e:07:9d:56:0d:82:4b:24:59:
                    8a:43:68:a3:ce:e9:86:fb:d0:24:bb:fa:8d:42:17:
                    1d:31:b3:a4:7e:aa:82:c2:94:13:79:14:d8:78:91:
                    aa:e7:cf:da:34:de:65:7f:5b:d1:db:d8:e3:eb:d7:
                    b4:bd:86:bc:f9:61:95:f4:3b:b4:4d:42:46:7b:ba:
                    00:b3:68:29:90:11:37:13:da:2b:d8:3e:80:df:a2:
                    84:ae:48:6b:f4:53:20:99:9a:8f:84:1e:82:dd:56:
                    5e:85:cb:7f:88:ce:df:e1:3a:b0:65:da:dd:dc:e8:
                    c3:79:fa:11:6c:1d:81:37:cf:99:70:ce:7a:48:43:
                    8f:88:b5:76:94:8f:40:3c:74:f1:ca:23:0f:3b:21:
                    04:84:1c:8e:34:60:d8:ed:69:57:12:2e:46:3b:ae:
                    81:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7D:0C:2F:11:6E:92:D2:ED:17:18:55:70:35:CA:59:AA:A7:58:45
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:118::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:43:e2:0b:58:bd:38:9e:25:62:e7:91:43:97:34:a0:35:74:
         51:22:e5:20:26:81:6b:c7:ca:d3:46:00:c9:c2:3c:26:12:44:
         ab:60:4c:8c:d9:91:1e:3b:a4:4d:7d:19:d0:cb:41:44:59:d0:
         1e:44:da:ff:17:8e:ca:43:bf:f1:8f:fa:32:95:cc:e9:d8:d6:
         22:a7:a9:23:a9:c7:0d:6c:e4:5a:d7:3c:c6:a9:40:d2:ec:e8:
         84:d2:5a:b1:b0:2d:82:5f:ba:a6:c2:29:e1:a4:1e:fb:2f:a0:
         27:e6:f1:b3:33:35:63:34:e2:9b:d2:21:bb:87:83:ff:29:51:
         b3:d9:9d:f8:78:e3:df:b1:6e:05:4e:2e:df:41:72:0d:ae:1d:
         c4:05:fa:aa:31:f7:c6:8f:02:89:81:77:c3:82:47:9a:a8:16:
         40:ed:4b:d6:28:59:dc:bd:e4:eb:9d:db:f7:d0:87:85:7b:1b:
         b4:77:bd:b9:4f:92:8e:ab:01:fe:19:6a:c6:46:4f:b9:a7:65:
         aa:aa:ae:ae:3c:50:7d:9d:bb:83:eb:e2:18:dc:fb:e2:2f:70:
         a3:b2:7f:94:92:55:38:6e:0c:45:3b:98:7d:ab:81:23:6d:27:
         47:5f:98:77:b6:f4:a8:6b:67:4a:a4:09:e5:72:9e:7a:fe:16:
         c2:f1:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----