Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131633a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          SmKHmo5edXquj3z9brzWPqff1g7eQ32YKDtQP1qzePg=
Subject key identifier:   BF:B3:C8:0E:0A:50:72:37:E5:C2:55:29:9F:80:3E:66:36:0C:78:D2
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       33C68730E08AFB02BCF14531D362CA74D1F79CA6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131633a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:18 +0000
ROA not before:           Mon 26 Sep 2022 07:56:18 +0000
ROA not after:            Mon 25 Sep 2023 08:01:18 +0000
asID:                     59282
IP address blocks:        2400:d680:11c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c6:87:30:e0:8a:fb:02:bc:f1:45:31:d3:62:ca:74:d1:f7:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:18 2022 GMT
            Not After : Sep 25 08:01:18 2023 GMT
        Subject: CN=BFB3C80E0A507237E5C255299F803E66360C78D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:0b:8c:88:91:d1:e0:e8:bd:27:4d:3f:4d:
                    b7:d5:1e:34:6f:f9:04:06:77:e9:a0:70:da:cb:14:
                    5f:a5:3f:62:dc:88:23:be:30:6b:42:e4:18:4d:20:
                    a2:59:71:da:dc:28:5b:d8:ed:c3:66:e7:b0:d4:e3:
                    12:36:e9:b0:b7:6a:9b:aa:c2:80:19:6e:00:30:2c:
                    f7:52:c2:46:b4:a3:8a:40:a8:01:77:80:5d:5c:a2:
                    31:9d:00:96:ed:59:b3:f2:cc:1a:37:06:e3:e1:10:
                    ec:0e:3c:45:12:7b:95:f9:6e:9b:83:23:a7:22:ef:
                    1f:49:2a:2c:a7:6a:7d:93:73:06:0b:a9:68:5d:c1:
                    9f:75:be:00:dc:c5:81:4d:32:62:c8:eb:e8:a5:59:
                    f6:95:4f:3c:6a:16:f0:42:5e:dc:8a:5d:a8:92:7a:
                    8c:04:69:f3:6e:91:65:87:19:d1:c3:56:0c:8a:f0:
                    80:b0:80:9f:a6:cd:6a:c0:a7:da:8b:5a:57:cb:05:
                    5b:0e:35:af:ce:a6:0c:9e:c5:da:f6:be:f1:c0:e2:
                    7b:ef:6b:cd:d7:f7:a0:0a:8f:d5:b7:0b:ba:59:a9:
                    a8:fb:8e:82:2e:55:bb:06:91:88:55:64:3e:00:63:
                    3c:8a:d1:1e:df:f6:a2:b9:d3:23:e6:b7:2b:99:ba:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B3:C8:0E:0A:50:72:37:E5:C2:55:29:9F:80:3E:66:36:0C:78:D2
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131633a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:11c::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:5c:89:47:77:c6:dc:c2:0c:75:8b:ec:09:14:31:68:0b:
         3b:fa:b4:a1:74:7c:57:ae:67:d0:23:40:e0:6f:04:1a:b6:3f:
         12:2f:e6:5d:84:4e:e9:e7:6e:39:df:f4:83:15:6f:9b:1e:c0:
         aa:89:0b:c6:33:0a:24:2c:56:00:48:b3:bf:cf:19:ea:94:5b:
         04:bf:a2:94:af:79:a3:14:64:e0:0f:f1:be:93:37:5a:76:a6:
         8e:75:8a:a2:e4:f0:55:83:b9:b8:ff:ef:27:5e:2c:b5:b3:34:
         de:15:73:49:39:4e:11:c2:2e:f5:bd:f8:70:98:14:5a:4e:31:
         e3:1f:7d:13:e5:52:2f:e0:d4:44:22:80:a8:ea:92:00:a9:50:
         4a:22:51:e3:06:a1:e2:e9:0d:dd:70:6a:ce:23:f0:dc:e8:d0:
         12:9c:56:19:eb:72:4a:9a:0c:1a:81:27:62:c8:6f:1c:2b:f8:
         2e:1f:12:4b:8a:a5:19:eb:77:62:e2:01:83:8d:5b:56:ef:b8:
         78:e0:02:bf:18:51:e3:10:8a:ee:1c:06:33:cf:ff:56:73:cc:
         09:50:54:69:46:9b:58:3b:b6:ee:2c:45:5e:e7:60:94:69:33:
         4f:b9:ce:4e:11:33:27:9d:6d:9d:cb:b9:ea:69:66:d1:24:53:
         a8:61:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----