Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132393a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3132393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          Xl34dIMw/o3dhVEMoCEFUsDzmVlWvSVd29Fmxd1NPJ8=
Subject key identifier:   3B:73:5D:3F:D3:D1:AF:48:EC:3E:38:71:80:0F:C6:DB:26:B0:D0:C5
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       5BEF9A2F78DAE5CFF384836A6EE657A6AAAA25F5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132393a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:24 +0000
ROA not before:           Mon 26 Sep 2022 07:56:24 +0000
ROA not after:            Mon 25 Sep 2023 08:01:24 +0000
asID:                     59282
IP address blocks:        2400:d680:129::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ef:9a:2f:78:da:e5:cf:f3:84:83:6a:6e:e6:57:a6:aa:aa:25:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:24 2022 GMT
            Not After : Sep 25 08:01:24 2023 GMT
        Subject: CN=3B735D3FD3D1AF48EC3E3871800FC6DB26B0D0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:58:f1:47:f5:4c:44:10:67:45:ba:f6:1a:
                    e7:22:bd:86:7d:a3:84:df:82:df:86:1d:c0:16:d4:
                    ee:91:72:a5:68:bc:b4:cd:cf:f9:f0:f0:6e:fa:30:
                    97:6e:d2:d9:aa:a4:ce:4f:11:b3:33:05:05:77:7d:
                    f3:f5:dc:10:af:bf:25:54:88:ae:28:46:a7:8c:58:
                    4e:e8:2c:f7:7e:b1:52:9a:e6:96:55:68:39:a1:e5:
                    7d:94:52:b2:64:35:44:6e:7e:98:71:31:48:f5:4e:
                    e5:b1:fd:c0:f6:1a:5b:a9:ca:48:4f:7e:43:bd:5a:
                    3f:88:3a:c2:75:ed:2b:0d:0b:af:01:f3:4f:d9:6a:
                    da:c6:8b:93:02:30:61:86:f0:ba:11:a4:f0:26:bf:
                    ee:44:77:9c:3e:1f:dd:ec:57:27:83:bf:f1:5c:7b:
                    cb:f4:0d:46:03:96:56:39:6a:8f:53:34:5a:97:ce:
                    32:8f:c0:cc:cd:67:d4:d4:62:64:80:e7:d5:72:ba:
                    3e:3c:c4:c8:6b:50:eb:2e:65:e2:09:65:fe:d4:0b:
                    52:f3:ab:c7:e2:37:04:00:a3:4e:f9:ab:8e:0c:fb:
                    c2:ca:f4:67:cf:63:d7:77:c6:04:f3:ca:ae:38:02:
                    41:ad:bb:89:46:58:3e:81:98:ef:14:a6:a5:e2:c2:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:73:5D:3F:D3:D1:AF:48:EC:3E:38:71:80:0F:C6:DB:26:B0:D0:C5
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132393a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:f2:fe:f5:01:d5:2b:74:77:ee:30:ce:7f:24:57:ad:07:
         c9:7b:04:e3:ff:c7:05:a1:d8:a8:e3:0c:f3:8c:a3:37:9d:0b:
         d1:66:a7:8c:0f:cd:7a:4d:c5:e8:1e:0b:ca:0f:91:b7:fb:88:
         c4:1d:b8:d3:9a:8c:5a:e0:c4:b3:df:6f:3c:f3:d7:cb:35:ad:
         4a:ca:fc:4c:ef:dd:ee:b8:2e:aa:e6:98:ed:1a:d3:62:de:66:
         89:67:69:7f:43:2a:8b:0d:36:41:cc:7d:a5:ab:7a:c5:63:e2:
         51:f1:66:e7:b2:b3:7f:31:4d:02:81:48:ce:f3:2e:fb:58:00:
         2e:48:f1:26:e4:8a:4f:15:76:5d:e1:7e:4e:d9:e1:cb:30:51:
         8b:87:c2:4a:b2:66:85:ae:e1:24:c4:ce:06:03:00:89:ef:7c:
         33:bf:f2:8a:b8:69:80:50:73:f5:dd:7a:26:9f:c9:52:20:68:
         2e:e9:9c:32:c8:f1:36:64:82:89:1d:87:78:d2:31:bf:be:e2:
         30:8c:90:24:da:65:cd:b8:ea:c2:49:75:0d:fe:0a:f5:8e:d9:
         60:f4:11:6d:f5:39:94:51:5d:a6:ce:18:7d:7c:b1:66:28:c1:
         5f:7f:c5:9c:91:6f:89:c8:6c:ba:92:72:d2:80:9a:21:44:3f:
         c7:aa:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----