Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132623a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3132623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          lSsFOMcLk/gBLHLxA6dh61SZwkvCxeg4ya+Df77ZSb8=
Subject key identifier:   7F:24:13:8F:7D:34:72:B2:3E:F7:96:73:90:47:37:52:AD:4C:FE:FB
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       27B59FE5C1C2E9F90A7CC15FED0FE8FFE4B6F8F1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132623a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:04 +0000
ROA not before:           Mon 26 Sep 2022 07:57:04 +0000
ROA not after:            Mon 25 Sep 2023 08:02:04 +0000
asID:                     59282
IP address blocks:        2400:d680:12b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b5:9f:e5:c1:c2:e9:f9:0a:7c:c1:5f:ed:0f:e8:ff:e4:b6:f8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:04 2022 GMT
            Not After : Sep 25 08:02:04 2023 GMT
        Subject: CN=7F24138F7D3472B23EF7967390473752AD4CFEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:37:e4:10:55:d6:ce:fc:2a:94:f1:83:ba:
                    51:49:8b:7f:cf:24:4c:2d:bb:fc:52:c3:5f:b2:b5:
                    2a:8b:24:b4:61:81:c7:9c:e5:cb:e6:c1:74:e0:4a:
                    55:e3:23:65:76:74:14:4b:e7:e5:25:9e:6d:20:23:
                    91:b0:01:14:2b:4e:cd:98:18:77:ee:fa:9b:83:c2:
                    95:6b:5f:44:00:26:f0:e0:8d:90:a8:ec:9e:ef:47:
                    c7:20:66:15:c3:a7:06:39:86:2a:11:67:13:09:f5:
                    5a:fd:f5:6f:76:fa:55:96:82:5b:07:10:c4:53:b8:
                    d1:8b:80:30:10:3b:96:48:8a:a3:9b:60:23:f7:42:
                    2f:c5:50:54:ec:bb:01:d5:98:67:43:e8:e4:8b:62:
                    2d:3f:58:b5:8f:c2:21:69:a9:2f:be:a7:e9:ed:ad:
                    ca:06:7a:40:57:4a:c7:b6:e5:13:5c:fd:1f:70:8b:
                    8b:26:67:4c:48:80:8c:af:0b:83:d9:00:6b:a7:18:
                    19:dc:f5:9b:4c:5d:c9:49:50:6c:a2:a2:45:13:d4:
                    b1:b2:64:52:6f:55:f5:74:21:bc:f7:af:35:ce:0c:
                    04:8b:da:22:b8:8d:ed:b9:6f:da:ef:2c:49:56:e7:
                    11:3b:96:b1:c2:1b:38:c6:3c:18:7c:32:f9:15:78:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:24:13:8F:7D:34:72:B2:3E:F7:96:73:90:47:37:52:AD:4C:FE:FB
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132623a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:12b::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:2a:20:ef:50:24:c7:be:b6:1f:40:7c:87:31:2c:7d:9f:0f:
         d8:55:e5:61:c4:6a:e1:ce:40:8c:70:9a:2d:69:83:98:a5:17:
         51:5b:ad:b6:f1:64:5c:ee:48:7e:90:e4:53:a3:ef:eb:a5:f7:
         f0:9e:7b:5b:fa:56:b9:d3:bf:6c:c6:fb:79:c1:5a:6b:38:0a:
         11:68:ae:85:57:16:f5:59:79:9b:5d:79:98:9b:98:e5:58:e5:
         d1:b2:71:4f:d9:e9:b0:d2:f5:fb:80:92:e5:ff:07:34:36:ae:
         57:89:a7:7c:2b:06:2e:86:48:f4:64:19:0a:23:ef:29:1b:77:
         ff:bf:03:95:75:b3:a0:4c:a8:0c:94:fd:aa:fa:7e:6d:3f:fc:
         00:bd:23:39:4a:ba:4e:7c:97:cf:23:27:27:d6:e9:2e:2e:d9:
         89:94:89:85:52:94:d5:b6:e0:34:dd:60:75:c2:f0:31:fe:04:
         9a:6c:74:52:9f:6d:58:ab:93:25:50:ae:78:45:45:fb:a7:20:
         2a:44:b2:c0:c2:9b:8f:05:53:3a:6b:90:4f:1e:a3:4c:1d:ba:
         be:44:e4:a8:f6:b9:37:e1:83:8a:69:47:53:54:d3:e4:2d:9c:
         4c:28:ef:a8:5e:5b:2d:a2:01:8a:d0:cf:ab:c0:10:7b:79:fd:
         7e:6b:ce:f7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJ7Wf5cHC6fkKfMFf7Q/o/+S2+PEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDRaFw0yMzA5MjUwODAyMDRaMDMxMTAvBgNV
BAMTKDdGMjQxMzhGN0QzNDcyQjIzRUY3OTY3MzkwNDczNzUyQUQ0Q0ZFRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJDfkEFXWzvwqlPGDulFJi3/P
JEwtu/xSw1+ytSqLJLRhgcec5cvmwXTgSlXjI2V2dBRL5+Ulnm0gI5GwARQrTs2Y
GHfu+puDwpVrX0QAJvDgjZCo7J7vR8cgZhXDpwY5hioRZxMJ9Vr99W92+lWWglsH
EMRTuNGLgDAQO5ZIiqObYCP3Qi/FUFTsuwHVmGdD6OSLYi0/WLWPwiFpqS++p+nt
rcoGekBXSse25RNc/R9wi4smZ0xIgIyvC4PZAGunGBnc9ZtMXclJUGyiokUT1LGy
ZFJvVfV0Ibz3rzXODASL2iK4je25b9rvLElW5xE7lrHCGzjGPBh8MvkVeNnpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfyQTj300crI+95ZzkEc3Uq1M/vswHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMjYyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
KzANBgkqhkiG9w0BAQsFAAOCAQEAMyog71Akx762H0B8hzEsfZ8P2FXlYcRq4c5A
jHCaLWmDmKUXUVuttvFkXO5IfpDkU6Pv66X38J57W/pWudO/bMb7ecFaazgKEWiu
hVcW9Vl5m115mJuY5Vjl0bJxT9npsNL1+4CS5f8HNDauV4mnfCsGLoZI9GQZCiPv
KRt3/78DlXWzoEyoDJT9qvp+bT/8AL0jOUq6TnyXzyMnJ9bpLi7ZiZSJhVKU1bbg
NN1gdcLwMf4Emmx0Up9tWKuTJVCueEVF+6cgKkSywMKbjwVTOmuQTx6jTB26vkTk
qPa5N+GDimlHU1TT5C2cTCjvqF5bLaIBitDPq8AQe3n9fmvO9w==
-----END CERTIFICATE-----