Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          4/W+4oEFmHeXDzgz6sDlPuicyG+wIos0VnQTX7/Iag0=
Subject key identifier:   C3:25:08:10:DA:55:A1:26:80:B3:21:D7:35:7D:34:4F:15:8A:10:D7
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       24E0BE663FA59DBD1F79E8241096E4D9ACC53983
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:12 +0000
ROA not before:           Mon 26 Sep 2022 07:57:12 +0000
ROA not after:            Mon 25 Sep 2023 08:02:12 +0000
asID:                     59282
IP address blocks:        2400:d680:12c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e0:be:66:3f:a5:9d:bd:1f:79:e8:24:10:96:e4:d9:ac:c5:39:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:12 2022 GMT
            Not After : Sep 25 08:02:12 2023 GMT
        Subject: CN=C3250810DA55A12680B321D7357D344F158A10D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:55:5a:01:32:13:fc:c1:da:10:d0:fc:29:
                    68:2c:34:37:95:f6:36:94:2e:e3:4e:e6:60:f9:1d:
                    af:07:43:a3:c5:b8:2e:1d:fe:1c:00:16:ce:e7:c6:
                    ca:a9:a3:6a:01:5e:9c:2d:33:23:f2:53:83:91:f2:
                    a1:3a:b5:24:75:13:46:0a:16:b7:54:d2:28:de:b5:
                    06:b1:25:4b:29:6a:ab:e2:f9:da:c2:07:fc:f6:d7:
                    53:88:e5:dc:f1:73:ac:40:33:4c:f6:26:29:a5:2c:
                    ec:ad:5e:2f:73:be:48:6c:fc:10:c7:fd:e0:85:0e:
                    b3:50:c7:f3:51:70:3e:b5:24:9e:dd:ed:05:a6:e9:
                    f8:f7:dc:92:b0:b6:c1:7c:9b:03:3d:3f:82:f3:6a:
                    f9:80:62:21:76:30:66:43:e9:bd:14:e3:69:f0:9e:
                    8d:fe:05:e2:97:ac:3a:63:be:b1:8a:25:a2:23:17:
                    37:d5:67:77:77:05:e8:54:d7:68:e1:a0:5b:10:0e:
                    c8:0e:17:6a:5e:b1:35:16:d1:01:b6:5a:24:6e:05:
                    a0:de:5b:93:d9:9d:de:78:d6:27:a8:58:e6:3c:0f:
                    b8:77:4a:8c:f3:bd:ad:0d:bc:73:78:2b:7b:88:92:
                    f4:c9:b0:e6:d8:e2:02:d0:85:cc:b8:49:64:0e:be:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:25:08:10:DA:55:A1:26:80:B3:21:D7:35:7D:34:4F:15:8A:10:D7
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132633a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:12c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:b6:d3:bb:cc:37:5f:45:12:f7:3d:53:e4:3a:82:72:76:d6:
         7f:d9:cf:2e:f2:df:9d:e4:f9:cd:9c:b5:36:47:58:36:5f:bd:
         15:5a:b9:15:e9:60:b6:a7:07:b9:af:0b:e7:df:20:09:aa:86:
         17:4f:e1:71:2e:e2:7a:c0:4d:1a:08:79:1e:1b:b0:5c:7c:73:
         ac:2a:6b:97:af:e7:a7:ef:80:99:05:5a:ed:13:54:77:9b:42:
         e9:b0:cf:63:cd:08:58:ab:bf:0a:e6:64:09:ea:36:e3:33:ce:
         87:c8:22:66:15:d6:06:14:e8:08:20:55:b8:7f:0b:54:a7:81:
         51:0d:16:ac:55:db:85:52:07:a2:c7:7b:56:46:49:c2:21:b4:
         f8:a9:f3:14:bc:a6:4a:da:24:33:7c:de:9c:db:be:68:f3:0c:
         40:d6:bc:1f:68:3d:7a:de:1d:1a:10:2f:cb:a5:92:e9:57:21:
         5c:36:b8:28:35:0b:d6:ee:4e:61:9b:06:fb:d1:6f:1d:95:50:
         b7:76:c7:83:f8:1f:b1:d3:f3:95:ea:d3:08:93:54:da:af:e7:
         d2:4a:cb:fe:e4:c2:1d:68:fa:57:8d:0e:8c:81:f4:7c:41:cf:
         9a:27:88:0f:c3:41:4d:59:f7:46:ca:f2:2e:4b:c4:1b:d1:84:
         07:2a:00:92
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJOC+Zj+lnb0feegkEJbk2azFOYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MTJaFw0yMzA5MjUwODAyMTJaMDMxMTAvBgNV
BAMTKEMzMjUwODEwREE1NUExMjY4MEIzMjFENzM1N0QzNDRGMTU4QTEwRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2W1VaATIT/MHaEND8KWgsNDeV
9jaULuNO5mD5Ha8HQ6PFuC4d/hwAFs7nxsqpo2oBXpwtMyPyU4OR8qE6tSR1E0YK
FrdU0ijetQaxJUspaqvi+drCB/z211OI5dzxc6xAM0z2JimlLOytXi9zvkhs/BDH
/eCFDrNQx/NRcD61JJ7d7QWm6fj33JKwtsF8mwM9P4LzavmAYiF2MGZD6b0U42nw
no3+BeKXrDpjvrGKJaIjFzfVZ3d3BehU12jhoFsQDsgOF2pesTUW0QG2WiRuBaDe
W5PZnd541ieoWOY8D7h3Sozzva0NvHN4K3uIkvTJsObY4gLQhcy4SWQOvqz5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUwyUIENpVoSaAsyHXNX00TxWKENcwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMjYzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
LDANBgkqhkiG9w0BAQsFAAOCAQEAL7bTu8w3X0US9z1T5DqCcnbWf9nPLvLfneT5
zZy1NkdYNl+9FVq5FelgtqcHua8L598gCaqGF0/hcS7iesBNGgh5HhuwXHxzrCpr
l6/np++AmQVa7RNUd5tC6bDPY80IWKu/CuZkCeo24zPOh8giZhXWBhToCCBVuH8L
VKeBUQ0WrFXbhVIHosd7VkZJwiG0+KnzFLymStokM3zenNu+aPMMQNa8H2g9et4d
GhAvy6WS6VchXDa4KDUL1u5OYZsG+9FvHZVQt3bHg/gfsdPzlerTCJNU2q/n0krL
/uTCHWj6V40OjIH0fEHPmieID8NBTVn3RsryLkvEG9GEByoAkg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-ams.rpki-client.org