Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131653a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3131653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          VQ69BCVndhheLWD+3VnA/YO2kXWumtrRSvd90NVxVMU=
Subject key identifier:   5F:85:92:BE:EC:8A:7E:C0:7D:5A:05:25:00:71:5B:D1:0F:4F:A6:1D
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       356CE70464ACECE486ACDC4651127DE08F57647D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131653a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:43 +0000
ROA not before:           Mon 26 Sep 2022 07:56:43 +0000
ROA not after:            Mon 25 Sep 2023 08:01:43 +0000
asID:                     59282
IP address blocks:        2400:d680:11e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6c:e7:04:64:ac:ec:e4:86:ac:dc:46:51:12:7d:e0:8f:57:64:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:43 2022 GMT
            Not After : Sep 25 08:01:43 2023 GMT
        Subject: CN=5F8592BEEC8A7EC07D5A052500715BD10F4FA61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:78:ae:e9:04:b9:49:5f:aa:3e:85:1a:d3:
                    ab:de:cf:2e:e1:48:13:d8:9f:ee:8d:60:6b:4d:68:
                    d7:c8:19:d5:71:82:27:92:dd:1c:7d:ca:37:e3:59:
                    75:0d:82:e9:ed:8d:9c:6a:c3:5f:ec:09:8f:9c:3a:
                    54:5b:38:77:a2:ef:b7:1b:78:57:95:45:77:7e:6d:
                    d4:da:42:b6:d0:fe:e1:fe:10:fc:eb:ea:18:78:0a:
                    54:ec:cd:50:1b:df:3d:98:23:4d:14:dc:32:5c:ce:
                    84:9b:90:00:32:a8:d3:fb:9e:2b:3d:7f:91:b1:ae:
                    94:fc:a6:99:d2:79:4f:f6:28:3a:73:36:aa:87:32:
                    3c:80:0a:fb:e6:3c:ef:70:77:bc:f3:03:05:2e:04:
                    8a:fc:3e:d0:5d:de:78:dd:bf:d4:5b:13:6a:c7:22:
                    2d:8b:8d:5c:d4:bf:00:ee:a0:f9:ab:6a:df:3f:f7:
                    ee:64:bc:43:47:0f:49:21:f7:16:d7:9c:44:51:8f:
                    07:ca:bc:57:4d:de:b4:63:ba:2c:0a:c2:bd:6e:1e:
                    be:e6:49:ee:f5:53:8c:87:07:9d:f5:12:dc:5a:51:
                    d4:3e:ce:ce:16:b6:94:02:cd:fe:0d:14:81:d2:93:
                    2c:85:fd:77:d2:39:34:de:79:7d:70:dc:37:01:0c:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:85:92:BE:EC:8A:7E:C0:7D:5A:05:25:00:71:5B:D1:0F:4F:A6:1D
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131653a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:11e::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:50:57:30:7d:33:de:04:14:83:9e:c0:c7:a4:2e:c8:f2:2b:
         dc:8b:bd:97:ec:c1:2b:1f:64:76:bc:f6:ab:bd:b5:f6:7e:1e:
         02:cd:74:2e:56:a9:be:e3:15:7e:f9:0e:46:e5:85:2e:2c:10:
         6c:69:40:e8:93:b7:65:7e:cc:ee:7c:bc:e4:32:3e:4b:d3:4b:
         88:1a:02:28:54:3a:c5:09:2c:19:eb:2e:89:c9:87:ca:7f:24:
         f3:d5:27:8f:aa:62:3b:55:c2:c6:b7:56:db:de:44:19:8d:7b:
         53:ed:06:5c:0f:64:e2:92:31:4c:e3:fe:b9:ab:20:70:92:f9:
         15:59:72:31:99:47:39:48:19:c7:fe:22:4c:a3:9f:14:a4:31:
         2a:f6:c4:4e:48:fb:ac:a2:59:e6:11:87:53:be:5b:f7:6a:9c:
         f7:a5:4d:38:78:d8:34:c6:3b:ac:d7:80:f8:3f:18:03:f2:33:
         aa:1b:83:64:c0:d7:65:d6:e6:5b:19:e4:cf:9b:d3:68:f1:dc:
         36:d6:2f:d9:61:53:79:cc:e1:54:77:c4:5e:a8:17:30:5e:a9:
         a7:71:e7:35:9e:bc:a9:06:8f:2b:6e:f9:a1:4a:9e:df:24:34:
         d0:85:2b:61:4d:04:46:46:4d:c8:cc:51:95:cd:d0:76:60:6a:
         5a:48:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-fra.rpki-client.org