Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          QvRFO+WJjoAbBarijUB23PqhaZxCx5qozbUYeEOiAbI=
Subject key identifier:   59:23:82:79:92:EE:57:E1:75:EE:8B:9F:45:E1:43:E6:CA:F0:EB:84
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       5B2830C35B8D39D3EA6891DA1AD7A0AAAE6DC542
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 07:00:03 +0000
ROA not before:           Mon 26 Sep 2022 06:55:03 +0000
ROA not after:            Mon 25 Sep 2023 07:00:03 +0000
asID:                     59282
IP address blocks:        2400:d680:12::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:28:30:c3:5b:8d:39:d3:ea:68:91:da:1a:d7:a0:aa:ae:6d:c5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 06:55:03 2022 GMT
            Not After : Sep 25 07:00:03 2023 GMT
        Subject: CN=5923827992EE57E175EE8B9F45E143E6CAF0EB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:39:b1:07:40:ef:ff:1c:8a:a2:73:7f:d4:
                    17:16:0e:fc:4d:a3:59:0c:66:a9:c1:ae:81:f7:b9:
                    ce:0f:5c:26:02:f9:8f:2c:17:0d:2a:d0:40:ec:1c:
                    ea:4d:47:ac:1c:75:e7:ce:81:8d:c6:70:e9:c4:c5:
                    9f:41:37:ed:4b:72:15:a0:3f:2c:97:4d:d1:9c:9f:
                    e0:af:9b:0b:29:1c:6e:42:4d:e6:61:e7:48:53:5d:
                    7f:3d:66:3f:75:a6:12:76:75:44:66:a7:f2:a6:14:
                    33:10:94:24:7c:84:64:ce:b1:93:a1:bf:48:4a:6b:
                    b8:f4:df:a1:21:fa:ce:13:f5:52:bf:18:12:ac:85:
                    b3:d4:c7:00:14:ee:68:10:6a:81:a5:f0:6b:ab:8b:
                    4d:d3:cc:c5:31:90:8f:53:7a:1c:b9:cc:03:d2:70:
                    51:4d:86:b6:f5:8a:91:ce:8d:c9:fb:81:22:0b:e5:
                    7c:36:60:48:44:a7:e3:bf:e2:f0:fd:ff:00:e4:7a:
                    4d:5a:b0:d0:9f:1a:77:20:78:3b:88:7a:bb:b8:56:
                    fb:f7:35:cf:8a:96:7c:01:cb:7d:b0:6f:85:01:72:
                    f7:e7:e6:24:ba:42:43:54:13:7d:20:53:d1:68:68:
                    be:99:aa:0f:8f:78:0d:59:6e:7d:99:d8:bb:3e:87:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:82:79:92:EE:57:E1:75:EE:8B:9F:45:E1:43:E6:CA:F0:EB:84
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31323a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:4e:30:39:49:f8:0f:d3:6f:6f:08:d1:b4:ea:a1:f8:9a:
         40:0c:4d:8b:e4:d8:b0:df:04:e4:8e:54:f3:16:79:c1:a2:17:
         84:41:57:cc:26:63:11:89:be:5a:24:5f:8e:1e:05:60:e2:b1:
         24:28:46:b1:ba:97:37:c2:a4:8e:a2:7e:80:87:4c:b3:4a:03:
         5f:d1:0f:d7:0a:c1:c6:6f:fc:18:b9:28:ad:99:b4:5a:7c:2c:
         f8:bc:79:1a:c8:e6:36:db:9f:5e:9a:38:18:94:d5:38:cb:1b:
         e4:f1:4a:8d:49:93:4d:80:ce:c1:fa:63:e6:59:8f:8e:c0:80:
         6a:ea:3c:0e:30:da:a9:15:98:de:7d:13:59:c2:ae:2c:74:8c:
         17:f0:c0:09:5e:b3:a3:7d:5f:f6:b5:88:c3:0b:99:a9:39:86:
         4a:72:6f:d3:a1:8d:39:89:2e:8d:5f:52:c9:51:6c:b9:cc:fd:
         9a:f9:09:73:e9:85:17:70:f0:0d:0b:31:9a:83:3e:dd:a9:e8:
         a7:cd:b2:f0:5a:4f:64:ee:5d:23:ae:58:fa:c3:08:7c:74:4c:
         37:46:0d:7a:3c:b2:6b:2d:66:16:c0:1c:bb:18:6f:95:ab:95:
         12:b6:01:4f:65:55:53:96:8f:36:fc:b6:74:f5:39:79:99:d2:
         89:aa:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----