Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31313a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a31313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          tvVIn1KJm3OCG+j7f3NccPauTDd2daC82VXxTGcw1MQ=
Subject key identifier:   63:27:83:68:88:55:21:92:FE:AF:96:98:DE:F4:9B:1A:C7:3D:FD:21
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       7E28DECF1FD34A4F78B2CD99B2342259709F7C42
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31313a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 07:00:01 +0000
ROA not before:           Mon 26 Sep 2022 06:55:01 +0000
ROA not after:            Mon 25 Sep 2023 07:00:01 +0000
asID:                     59282
IP address blocks:        2400:d680:11::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:28:de:cf:1f:d3:4a:4f:78:b2:cd:99:b2:34:22:59:70:9f:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 06:55:01 2022 GMT
            Not After : Sep 25 07:00:01 2023 GMT
        Subject: CN=6327836888552192FEAF9698DEF49B1AC73DFD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:2a:69:f0:59:ba:1a:c5:3d:ed:d2:7f:f7:
                    29:cb:1a:14:20:1b:e2:26:e6:24:b5:d4:f5:7f:5f:
                    cf:3c:5a:7f:d0:c2:d2:f2:c7:a7:e8:ab:10:71:c7:
                    53:0f:0f:b5:74:e5:30:45:9b:3a:25:a6:e7:30:f8:
                    64:4e:ba:6b:fc:14:4b:49:f3:d3:78:a0:07:7c:8e:
                    05:36:f8:b8:d5:9f:a3:3b:3d:33:12:f7:d7:9e:3a:
                    c5:de:e0:21:cd:8a:b8:25:59:1c:9f:c9:ff:b3:19:
                    ab:9a:a7:68:98:59:10:f4:45:7b:e8:df:6c:f4:2d:
                    d8:67:c2:22:06:87:5c:95:b2:40:ee:87:b0:5b:e0:
                    9c:e1:9b:51:1c:42:fc:bb:65:8a:92:96:90:05:59:
                    56:32:19:40:b2:25:d9:bf:e9:da:1c:d8:59:d6:5f:
                    3e:89:83:5c:ce:b2:7e:ff:4f:cc:9d:5d:ce:de:97:
                    4d:54:eb:ce:fe:5b:5f:81:2c:bb:b6:b5:8d:18:f7:
                    20:cc:98:49:35:3a:91:80:7a:ce:fe:fc:05:ca:b8:
                    be:13:de:e5:b8:34:39:48:02:69:09:23:90:63:bd:
                    81:52:68:44:be:63:03:55:00:a2:ab:b5:3a:67:f3:
                    c3:32:0b:bf:86:d1:7a:43:fa:97:75:40:a9:af:90:
                    1e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:83:68:88:55:21:92:FE:AF:96:98:DE:F4:9B:1A:C7:3D:FD:21
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31313a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:61:b5:6f:0b:45:ea:23:6c:4b:f2:42:7a:2d:d9:c4:04:ce:
         ea:be:a3:e2:c8:5c:fb:a2:9d:be:17:17:97:aa:a8:eb:43:99:
         e5:54:93:34:66:ce:9c:a0:b1:8a:48:94:c3:06:33:c7:a4:5b:
         a5:ad:2d:17:7a:a0:e6:ed:d3:c9:64:d1:05:15:e3:64:1c:4d:
         a0:c7:66:23:88:96:7a:ef:fc:9d:7f:83:78:6e:b9:81:15:0d:
         71:47:46:1d:e2:65:4a:49:ce:ec:2d:3a:b0:01:13:65:d6:df:
         20:b4:7d:a0:c5:e9:67:d9:3a:4f:eb:7d:4d:5f:7d:17:83:53:
         18:05:7f:79:b1:a3:db:fe:5c:45:d7:b6:36:7d:01:b5:10:f1:
         1d:d3:5c:15:bb:ad:37:cd:dd:d7:08:93:45:34:7c:63:9d:f7:
         72:d4:94:51:2d:60:4f:ad:f5:d2:5b:a2:a9:94:4c:a6:14:e9:
         67:32:e8:5b:cc:f3:61:d2:1e:81:68:8e:a9:a5:86:2f:10:3d:
         f0:9f:bd:6b:5d:52:81:fe:b9:fd:55:4e:87:37:ca:01:66:0a:
         cf:4e:22:c8:26:c6:29:22:eb:eb:9b:a9:62:9b:bf:bd:44:00:
         9c:9b:31:1d:0b:58:3f:96:a6:58:63:84:1b:bd:5a:cc:a9:74:
         79:55:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-fra.rpki-client.org