Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132373a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3132373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          kvQOc7dUTxmllZAEj68xavo0JN/UMhmUtRBRqtowtTI=
Subject key identifier:   80:06:42:03:E6:73:8B:4B:78:F3:5F:B5:3A:93:17:83:8B:E4:16:F4
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       95575032A8241721ED34EA298E5E7B31DAD48A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132373a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:20 +0000
ROA not before:           Mon 26 Sep 2022 07:57:20 +0000
ROA not after:            Mon 25 Sep 2023 08:02:20 +0000
asID:                     59282
IP address blocks:        2400:d680:127::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:57:50:32:a8:24:17:21:ed:34:ea:29:8e:5e:7b:31:da:d4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:20 2022 GMT
            Not After : Sep 25 08:02:20 2023 GMT
        Subject: CN=80064203E6738B4B78F35FB53A9317838BE416F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:4d:2c:4a:d8:44:7b:7a:97:99:fe:d7:99:
                    ab:93:b9:50:ef:0b:9c:9a:95:7c:29:14:3d:41:9f:
                    dc:2e:18:75:3f:e2:e5:7d:ac:2d:9b:45:36:8a:4b:
                    68:b9:5f:e7:47:b3:cd:17:99:05:f4:87:f5:34:b0:
                    2c:ef:fa:c8:e4:bb:f9:7d:3e:7b:b4:e8:22:79:13:
                    4e:f8:19:b5:39:e7:b8:6f:31:f4:af:44:ea:76:e2:
                    a2:5f:57:fc:18:51:27:46:68:d0:2e:f2:18:b1:7c:
                    b6:d0:64:bf:74:40:28:14:a4:7d:f8:cb:db:70:4c:
                    29:84:3e:65:2c:ee:da:fe:c5:f5:21:a9:48:4c:9f:
                    48:8a:af:ba:4a:dc:09:fe:78:0c:74:02:af:07:b7:
                    e3:98:08:4a:c5:cf:86:03:6c:5d:9b:fc:6f:22:38:
                    8d:6b:6b:a9:08:1e:cf:d3:20:9b:70:67:15:3f:a9:
                    21:36:77:d8:15:49:9c:6a:82:c2:a7:61:ae:d4:1e:
                    19:b6:71:29:09:fa:ff:8f:da:1a:50:c5:3f:7b:54:
                    4b:78:e0:3d:a1:00:20:47:07:66:9c:23:36:9b:bb:
                    e8:f9:ee:ee:00:50:9b:95:84:00:79:50:97:49:15:
                    20:04:b2:63:b5:cc:9d:37:2d:d2:fa:ff:f5:43:7e:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:42:03:E6:73:8B:4B:78:F3:5F:B5:3A:93:17:83:8B:E4:16:F4
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132373a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:127::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:6a:31:08:ca:fe:0e:8f:3c:19:d2:56:06:97:ac:5f:b0:93:
         d0:ee:8e:93:d3:c9:2c:c6:f8:84:df:79:c4:cb:0d:e4:1d:50:
         63:a5:8e:f2:84:c8:0c:b0:5c:78:58:d0:47:0b:f4:c0:bc:7f:
         a6:a0:57:88:4c:67:14:3e:f9:73:63:46:fb:5e:b8:06:c2:10:
         8b:f2:44:fe:8b:89:ca:78:fa:41:3e:15:93:20:ce:fb:4b:b8:
         0c:cc:fe:3e:8d:1b:fd:67:7d:44:4c:ae:6b:31:09:3a:37:49:
         2e:41:80:4d:4a:14:f8:b2:3a:d7:26:da:f2:33:ad:05:ef:43:
         bc:64:a2:ba:df:7f:7b:b6:90:24:b6:45:a7:d9:1a:30:2c:45:
         76:5c:bf:6e:ed:ac:4c:f4:98:f6:69:6b:b8:35:d1:f0:b6:44:
         28:39:bc:02:71:41:7a:7e:31:e2:a5:e5:57:84:27:0c:01:1a:
         96:ea:20:b9:c3:45:ea:e6:a7:39:cc:32:4d:4c:95:f5:be:e9:
         e5:a1:25:d6:c1:f5:e1:26:0b:d3:c9:f8:1e:36:a4:b1:7a:42:
         a8:b8:f6:dc:56:71:a0:26:5c:5e:ea:26:7a:1e:99:ce:22:4b:
         dc:69:86:9a:e6:c8:9e:a2:29:cd:01:56:11:bc:df:6d:79:70:
         e9:7f:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----