Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133313a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          yh+wzNkZ93JBPVjDaXM79DKTFvA9xLthnmHf9I1R/ok=
Subject key identifier:   93:DC:FB:6F:D4:63:D7:B6:D7:BC:83:32:EF:09:D1:80:D7:8F:93:9D
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       689A2FD97A819BEA9B783905844CB525A93DD219
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133313a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:12 +0000
ROA not before:           Mon 26 Sep 2022 07:57:12 +0000
ROA not after:            Mon 25 Sep 2023 08:02:12 +0000
asID:                     59282
IP address blocks:        2400:d680:131::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9a:2f:d9:7a:81:9b:ea:9b:78:39:05:84:4c:b5:25:a9:3d:d2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:12 2022 GMT
            Not After : Sep 25 08:02:12 2023 GMT
        Subject: CN=93DCFB6FD463D7B6D7BC8332EF09D180D78F939D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:e5:e4:36:44:78:88:10:4a:6b:bc:88:d8:
                    2d:25:ce:cc:8d:f1:09:df:0c:f6:9e:a5:97:e3:fc:
                    3d:f7:e1:a7:d7:c9:c6:0e:a0:f3:7f:2d:89:9c:07:
                    93:6f:5e:da:86:74:13:58:e8:e9:75:f4:c6:fd:34:
                    9e:85:fc:3b:10:ad:85:7f:95:df:48:e4:55:58:7c:
                    11:68:70:69:2b:54:c9:41:29:8b:c4:cb:8d:af:97:
                    a5:99:bb:e7:76:af:89:2d:bb:41:5d:87:5a:d6:3c:
                    a4:5c:ee:bd:ca:0d:b6:a8:9e:36:b5:f7:f8:e5:ad:
                    a5:54:cb:1a:5a:87:03:53:06:55:db:ac:8d:b6:44:
                    cc:9c:0d:be:e2:1e:10:45:73:5e:21:ba:a4:9b:9d:
                    da:03:4a:f2:f0:6a:bb:7a:88:1c:81:54:de:b6:69:
                    54:dd:f7:d5:6e:24:8c:7f:44:04:77:31:94:ce:02:
                    3c:e4:bb:2e:2c:97:07:59:0c:81:1f:a5:6e:f7:ec:
                    4e:d3:df:cf:52:d4:7f:ec:4c:99:d4:f1:d1:e0:10:
                    f9:25:9f:18:97:69:7b:c0:36:fe:eb:48:e4:1b:a9:
                    90:ea:98:ba:75:8c:84:01:e9:26:dd:b0:55:61:ca:
                    df:be:24:0c:79:2e:d9:4b:34:e1:30:65:4b:44:21:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DC:FB:6F:D4:63:D7:B6:D7:BC:83:32:EF:09:D1:80:D7:8F:93:9D
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133313a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:131::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:a7:4c:87:53:e3:49:92:bc:b1:e3:5e:e6:ea:25:1f:f2:22:
         f1:d9:05:10:1e:75:24:45:f2:4e:b1:4f:50:70:04:75:54:80:
         ca:f8:18:97:17:17:9a:c6:a8:a2:5f:61:24:4a:0a:08:eb:4e:
         f8:72:7b:34:f6:2e:6e:14:1e:7a:26:c1:68:55:c2:50:cd:64:
         f0:8c:46:1d:dc:58:f3:b4:f7:35:df:a3:56:21:c7:eb:b2:c0:
         76:d5:6a:38:f4:0f:39:4e:98:74:fb:0c:33:4c:9b:44:d6:83:
         ff:e5:94:62:04:47:11:55:f9:8c:09:3b:08:de:bc:c0:61:14:
         bc:5d:e0:b7:4d:b1:b9:3d:9c:0d:7d:df:93:22:f7:f3:2e:43:
         89:62:15:d9:f8:0d:79:84:04:6b:1b:f2:15:d0:2b:1f:4c:e4:
         66:fe:16:fa:17:29:e5:47:90:e5:44:f1:ea:26:a3:c0:52:2a:
         1f:8d:7b:a0:68:19:d3:5e:26:9f:45:b5:dc:0d:b6:55:8f:16:
         1e:58:9e:b8:cf:5d:58:32:66:74:71:ba:fc:b1:19:b6:e7:93:
         36:be:53:78:7c:bf:f4:6f:d0:71:08:0e:f0:0b:83:37:a5:f9:
         b0:b2:5c:07:3e:ec:9f:f1:90:d3:4d:c8:d0:15:7d:9f:08:0f:
         db:01:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----