Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133303a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          lC26AJVkOeP7WjqhJ8jqSrki9k8EJ7KjY2CMGWq5v2g=
Subject key identifier:   B5:14:25:17:1D:6C:AD:AE:6D:49:97:B6:38:EF:3C:8B:FF:48:6E:70
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       327077D9275E1EB870EADD67A3E20ED649E0A1B4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133303a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:57 +0000
ROA not before:           Mon 26 Sep 2022 07:56:57 +0000
ROA not after:            Mon 25 Sep 2023 08:01:57 +0000
asID:                     59282
IP address blocks:        2400:d680:130::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:70:77:d9:27:5e:1e:b8:70:ea:dd:67:a3:e2:0e:d6:49:e0:a1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:57 2022 GMT
            Not After : Sep 25 08:01:57 2023 GMT
        Subject: CN=B51425171D6CADAE6D4997B638EF3C8BFF486E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:de:e1:a0:13:7a:8c:dd:c2:28:44:62:09:e9:
                    81:4d:11:79:29:12:dd:be:24:85:b2:2b:61:bf:ee:
                    45:57:ee:f8:8c:02:9f:07:b4:f9:36:3b:6f:e0:36:
                    55:91:54:5c:5f:6c:11:f8:28:ed:00:11:ca:1e:6a:
                    a8:2d:d5:f8:a8:52:08:f2:e5:8b:4a:4e:c3:5c:f5:
                    19:5a:2d:a8:c1:c1:50:3f:98:2e:28:67:0e:44:13:
                    fe:a8:f3:8c:b5:a1:eb:d6:3b:d3:1c:94:8a:b5:fb:
                    6a:e8:03:d4:41:bc:56:17:f7:b8:4a:85:0d:77:82:
                    01:65:aa:c5:0d:c6:ef:c7:9a:f5:61:bb:8d:10:59:
                    07:45:ff:94:12:aa:3e:d7:86:cf:fa:62:9e:fa:ef:
                    f1:72:2f:e2:cb:28:04:df:41:8e:2f:f5:07:af:cc:
                    91:90:72:d8:27:77:89:f0:dc:bf:0e:58:e9:54:e5:
                    28:6e:6a:9d:48:d6:61:5b:77:dc:90:ca:c2:a8:ef:
                    10:46:33:bd:09:84:ed:37:07:7b:94:b4:7e:07:28:
                    1c:75:38:2a:33:c9:56:c8:4d:25:19:42:e0:8b:19:
                    19:de:03:82:41:9e:be:4b:5d:29:bd:ff:c4:a1:cb:
                    f3:05:94:ca:6b:94:dc:23:ac:b7:b7:7b:ba:b0:89:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:14:25:17:1D:6C:AD:AE:6D:49:97:B6:38:EF:3C:8B:FF:48:6E:70
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133303a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:76:6a:89:9b:85:4a:a7:7b:11:4b:ba:34:79:6b:1f:6d:
         2b:bb:18:e7:a8:ed:14:26:81:66:d0:73:f1:7e:72:d2:2d:f6:
         a9:a7:02:71:c4:08:d8:1e:05:1e:3d:fd:05:59:c8:d6:3e:ec:
         49:4f:76:54:52:f2:dd:f8:5d:f6:88:9a:8d:b2:ed:dc:e0:26:
         9d:df:1f:f2:d1:4d:fb:7f:a5:72:cc:3d:36:a4:c6:15:7c:6a:
         f0:69:fd:08:72:65:ac:97:f5:2d:f0:1e:d5:35:83:59:b8:53:
         4c:06:31:23:11:a0:0e:de:74:63:04:da:0a:29:9b:da:c6:6f:
         9a:84:c5:30:27:f1:c1:5f:e3:41:24:df:a6:52:52:5a:a0:d9:
         28:fa:96:81:10:32:95:4b:75:43:2a:42:2d:26:ec:f8:e4:81:
         15:65:81:bd:a6:98:38:ea:65:39:a7:3c:78:a4:5f:e7:dc:d4:
         42:70:59:46:b3:24:9b:c6:28:a6:60:fd:76:6c:27:2c:94:9a:
         64:03:33:81:f2:f6:f4:93:10:b1:8b:55:d3:f7:0f:9c:67:f0:
         e2:d1:90:3b:2e:99:55:6b:58:7f:3a:cf:88:93:d8:da:e4:f0:
         75:74:c4:48:c8:78:f9:cb:b1:b0:04:2a:97:91:49:3f:01:53:
         a7:c4:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----