Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131613a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          SoVubqhvqGakarOe4v+1Fu/7E88OhWZUcXYdVmkJwjM=
Subject key identifier:   4A:B3:6E:EC:5C:F9:88:20:AD:57:B1:C0:AD:9B:95:B2:AB:15:F4:F4
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       6C2880736C5518D29270AC4536AC4900808BEA42
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131613a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:51 +0000
ROA not before:           Mon 26 Sep 2022 07:56:51 +0000
ROA not after:            Mon 25 Sep 2023 08:01:51 +0000
asID:                     59282
IP address blocks:        2400:d680:11a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:28:80:73:6c:55:18:d2:92:70:ac:45:36:ac:49:00:80:8b:ea:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:51 2022 GMT
            Not After : Sep 25 08:01:51 2023 GMT
        Subject: CN=4AB36EEC5CF98820AD57B1C0AD9B95B2AB15F4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:fa:66:d6:60:72:29:13:df:6c:74:a5:e0:
                    e5:55:9e:89:a3:39:13:d7:92:9c:43:ee:e7:06:5e:
                    0b:b9:27:cd:9c:b2:c9:31:99:22:8a:e7:22:eb:55:
                    e8:24:c0:d6:ff:90:c7:03:ee:ec:4a:9e:55:c5:0c:
                    e7:03:30:7b:38:c5:4b:65:1a:2e:a7:03:b3:52:1e:
                    b6:95:c9:0e:4b:b2:1f:58:aa:86:e2:d9:24:cc:da:
                    60:eb:60:0c:90:7c:a2:97:49:99:8b:39:66:bb:1f:
                    07:f7:7e:73:60:1b:a7:56:4e:d3:20:2c:e9:f4:22:
                    9c:44:8b:16:d8:97:7f:a4:25:52:ef:28:5d:ff:d1:
                    42:b2:99:25:d5:6f:40:db:82:29:0e:9e:11:58:a9:
                    71:ad:c3:a5:58:b9:1d:c4:6e:6e:e2:55:86:8c:ad:
                    f3:46:20:cd:1a:4d:0d:8a:96:59:3a:a9:6f:f5:18:
                    15:9c:ae:a5:30:05:d6:7e:29:da:80:1a:85:30:b8:
                    a6:14:07:42:26:32:c6:46:9a:17:ed:0a:c0:9b:27:
                    d6:52:ce:b3:05:74:8c:5e:48:d8:2e:c5:fc:79:fa:
                    0a:ae:7f:a2:90:02:c7:9a:f5:04:ee:c3:f9:f9:7e:
                    c8:a5:65:fe:d4:87:d1:33:e5:1f:18:81:c6:6d:82:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B3:6E:EC:5C:F9:88:20:AD:57:B1:C0:AD:9B:95:B2:AB:15:F4:F4
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131613a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:11a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:bf:56:af:4b:65:bd:df:e9:5f:6d:61:98:02:0c:5b:9b:
         0f:52:b2:d2:52:77:c2:76:2c:7b:35:4e:93:bd:a5:52:02:b3:
         88:c8:ba:56:94:00:c0:ee:50:b8:ba:c2:12:58:4c:c9:ad:e3:
         7b:7a:fa:9c:67:ec:5b:d0:cd:4c:40:d4:de:bb:af:81:09:54:
         a5:46:24:a1:e2:3f:2a:bf:3a:4d:54:47:fd:8c:a2:4d:51:08:
         38:b5:f5:39:ff:1b:93:18:01:41:cd:28:97:4a:97:77:56:cc:
         7a:d6:54:d3:45:01:29:84:d3:7b:e2:b6:19:7c:3e:41:9e:9c:
         e6:41:f8:5b:e5:2f:67:52:1c:7a:e8:b1:c4:6a:23:02:a2:d3:
         1d:ca:ad:0c:9c:f5:e4:7d:32:f6:58:78:4b:b9:93:bb:54:6e:
         37:78:a7:c8:46:28:92:19:52:ae:e1:9e:fa:d4:e0:d3:09:dc:
         f6:35:9c:88:fb:30:4c:32:52:c8:bf:fe:fd:49:5a:18:ba:ce:
         e1:c5:bc:d7:64:88:bf:c4:3e:bf:19:7a:9d:f8:f0:e6:f7:b3:
         1d:f6:72:f7:de:26:26:c6:21:3c:fe:38:76:43:a8:0a:04:32:
         e3:e7:e8:1c:3f:a0:d2:05:e9:bd:1a:35:c1:9f:09:a6:5e:17:
         3b:36:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----