Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133323a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          rtmY7YPViP01ikNJHEHGxp0Hw41tKo3RcD9UnjCXCMI=
Subject key identifier:   AE:3B:04:E6:84:E5:9F:1F:7F:A7:2C:FF:6C:36:16:F3:51:22:C8:0B
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       20E9B39C9298E6E99D81D2AD96D1895996718361
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133323a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:20 +0000
ROA not before:           Mon 26 Sep 2022 07:56:20 +0000
ROA not after:            Mon 25 Sep 2023 08:01:20 +0000
asID:                     59282
IP address blocks:        2400:d680:132::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e9:b3:9c:92:98:e6:e9:9d:81:d2:ad:96:d1:89:59:96:71:83:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:20 2022 GMT
            Not After : Sep 25 08:01:20 2023 GMT
        Subject: CN=AE3B04E684E59F1F7FA72CFF6C3616F35122C80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:0f:a3:b1:10:c4:aa:d2:55:77:63:82:85:
                    7a:1d:29:ef:e5:ff:ab:e9:82:ab:6d:c2:c5:8f:69:
                    46:fb:a8:a8:44:29:c7:f6:3a:ee:4c:5a:2e:46:68:
                    25:f1:f5:6e:c4:c9:23:90:04:05:58:fe:38:b5:9f:
                    01:8f:2b:94:4a:87:15:e0:79:81:d3:3a:f2:74:cd:
                    3c:87:20:b7:46:e2:c2:6e:db:fe:a4:98:5b:c4:55:
                    b4:f5:2c:7a:1e:aa:b9:e7:e9:e6:bf:61:13:a7:90:
                    f2:f6:5a:01:89:80:bc:42:2b:b9:86:3e:47:73:7c:
                    73:6b:76:83:f4:b6:e9:f7:6c:98:a7:ea:96:40:f4:
                    2e:29:5d:d1:f7:c0:8d:8b:37:05:7e:3f:4a:d6:5a:
                    4a:bb:c3:e2:8d:cb:61:a5:7b:f4:f5:4d:40:fa:42:
                    71:97:8c:66:98:80:5f:2a:78:79:88:e0:ce:50:51:
                    11:ce:63:2e:5f:c0:db:6a:c7:f6:69:f3:bc:ae:49:
                    0a:9b:bf:e1:38:3c:4b:85:2a:67:27:c7:49:ef:16:
                    71:bc:d2:d4:a7:c0:20:df:5d:9a:94:7c:0d:36:72:
                    29:ba:09:c7:c0:12:80:4e:00:60:9f:b0:3d:ff:ef:
                    3a:bb:7e:38:2d:87:b7:9b:87:42:57:42:9e:46:19:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3B:04:E6:84:E5:9F:1F:7F:A7:2C:FF:6C:36:16:F3:51:22:C8:0B
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133323a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:132::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:8c:64:38:f1:98:4a:6a:54:2c:9b:b0:c2:5a:d3:c3:8c:94:
         aa:b0:7e:b9:5d:d2:af:34:ee:7e:03:d1:62:64:0c:c6:f5:62:
         a4:1b:fe:d5:8c:be:2c:f7:46:e5:01:d5:f7:90:ef:08:95:3d:
         25:e0:2c:99:fe:a9:91:0f:a3:5f:af:49:0c:e5:fe:21:f7:e1:
         8c:91:9f:2f:2a:d3:81:c6:f2:0f:64:e7:2f:3d:c9:d6:c5:77:
         8d:e7:64:24:db:bc:90:18:b9:7e:81:2b:50:86:38:2d:d3:32:
         03:af:90:f7:e7:83:03:b4:c0:eb:f8:53:8c:66:17:84:f7:b9:
         55:b0:27:1d:7e:10:19:0d:19:a3:2c:7f:0d:ec:c6:cf:e8:42:
         35:fb:77:fd:3f:9d:7d:04:a1:d6:4a:9c:8e:df:f6:aa:66:80:
         9d:94:e0:1e:d9:e1:d4:ce:cd:31:4f:06:6c:83:ff:2c:0f:55:
         a4:2c:46:73:e9:84:24:38:2b:a3:b5:4e:96:da:b5:c0:43:50:
         d0:f3:bb:b6:7d:ad:bf:1f:ec:90:79:b8:a1:72:14:b8:0d:f2:
         cf:bb:0b:bc:84:0f:e7:dc:d4:e6:32:57:3b:33:93:d1:07:24:
         c6:d2:c1:57:19:9f:c3:e1:8d:f2:75:a3:39:31:43:af:9f:1d:
         d9:b2:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----