Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131623a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          UO1PzMW5Gryf3aawkhmhEIVuEebDJ5Cq0ewiJoZ6B/8=
Subject key identifier:   00:BD:EB:BB:3F:64:4E:8D:60:B4:BB:F1:BB:5A:27:54:A3:A5:9F:47
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       3E3D30702B67190C1D3261DA1CCDABD59F6FA7D6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131623a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:04 +0000
ROA not before:           Mon 26 Sep 2022 07:57:04 +0000
ROA not after:            Mon 25 Sep 2023 08:02:04 +0000
asID:                     59282
IP address blocks:        2400:d680:11b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3d:30:70:2b:67:19:0c:1d:32:61:da:1c:cd:ab:d5:9f:6f:a7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:04 2022 GMT
            Not After : Sep 25 08:02:04 2023 GMT
        Subject: CN=00BDEBBB3F644E8D60B4BBF1BB5A2754A3A59F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:7d:8a:a1:a4:49:5c:3a:f5:7d:2a:a9:03:
                    c1:28:b2:84:16:45:3f:6a:16:99:27:12:4a:8a:b4:
                    e7:65:55:b7:4f:ce:00:31:93:5a:c3:3e:71:d0:4c:
                    54:36:67:16:61:e0:d9:ac:9a:f4:46:fc:e7:da:d5:
                    2d:97:db:74:2e:85:be:5e:7a:14:3c:84:cf:70:a3:
                    e3:e7:fd:ea:d4:59:b6:a5:8d:53:30:d7:41:d8:80:
                    7d:01:65:d6:b2:b4:7e:14:b6:b7:86:77:1f:97:ba:
                    b3:60:f0:32:c3:c0:59:d6:45:b8:1e:a7:32:0f:64:
                    81:4c:ae:76:74:01:3f:8c:e3:9f:26:f9:7e:f9:91:
                    60:e5:2f:bf:d5:f3:15:ed:51:db:47:97:14:27:9b:
                    86:e0:2f:7e:b4:98:7a:aa:49:ec:b1:8c:9b:de:34:
                    26:9c:4f:65:2f:06:3f:08:31:f8:89:32:ed:77:f2:
                    3a:c7:da:17:12:b7:3b:d2:57:fb:3c:85:7e:9b:ca:
                    e5:41:2d:eb:1b:ca:3e:a7:6a:63:0b:b8:d4:fd:34:
                    9c:de:0e:b6:b9:45:04:80:3b:5e:0c:2a:a9:c1:d8:
                    50:a6:15:9b:46:32:5f:c9:14:59:c2:5e:92:74:8e:
                    5c:07:b5:85:3d:dc:7a:95:3c:fd:52:79:af:34:05:
                    8d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BD:EB:BB:3F:64:4E:8D:60:B4:BB:F1:BB:5A:27:54:A3:A5:9F:47
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131623a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:11b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:5b:1d:2c:2e:5a:3e:5b:fe:13:14:52:59:7d:7f:88:4b:96:
         33:c3:2f:d6:41:ee:e6:32:31:e4:d9:33:19:92:7d:b8:01:7e:
         59:b2:1d:de:bc:3b:77:68:2b:7a:98:02:4a:e5:90:0a:e4:c6:
         1c:07:15:25:e3:f8:6f:5e:dc:0a:49:23:0b:7b:58:89:2a:7f:
         1a:be:2f:b3:68:e1:c6:30:7b:a8:cb:6e:17:d4:6d:92:08:a9:
         d0:3d:e9:47:dd:8c:9e:45:53:78:6a:4c:0d:ea:1d:c4:3a:dc:
         9d:08:db:87:b9:d4:c7:29:42:a3:da:a6:de:87:6c:f8:62:9f:
         c6:ba:3f:da:a4:88:79:da:45:b3:8c:88:ca:66:70:8a:f4:b2:
         f8:19:93:30:fc:a1:b1:72:79:ae:15:dd:92:51:9b:c1:45:79:
         71:72:cf:54:ae:f7:74:0f:3f:29:b1:cd:b7:cd:60:c1:5d:f3:
         6f:91:da:b9:4c:4b:c1:02:3c:73:15:e6:73:99:ed:a0:16:67:
         33:e2:81:0a:5e:c9:03:fa:72:d0:b7:86:0b:e8:77:8c:c4:f0:
         68:b8:1e:62:73:5a:4c:d9:57:98:9f:30:a1:0f:ea:16:c8:a3:
         13:c5:a4:bc:4a:88:75:4f:d1:55:a4:e4:43:f9:3e:9f:ef:70:
         6e:bb:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----