Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133353a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          76UF+n5b6EWofU7545/+lCLCpMz7rLqg5qXpWQY6mkE=
Subject key identifier:   43:BE:57:1A:02:27:CB:4E:D4:99:9B:8C:8D:0B:94:17:E0:0C:CA:D2
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       4716EF958850F29A11D53C20FABC4DFA2B78BAA8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133353a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:44 +0000
ROA not before:           Mon 26 Sep 2022 07:56:44 +0000
ROA not after:            Mon 25 Sep 2023 08:01:44 +0000
asID:                     59282
IP address blocks:        2400:d680:135::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:16:ef:95:88:50:f2:9a:11:d5:3c:20:fa:bc:4d:fa:2b:78:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:44 2022 GMT
            Not After : Sep 25 08:01:44 2023 GMT
        Subject: CN=43BE571A0227CB4ED4999B8C8D0B9417E00CCAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:1e:2f:83:a5:04:c2:d7:d4:d2:4c:0e:71:
                    22:9b:bc:09:2f:57:db:f4:61:d3:86:56:50:8d:b7:
                    e9:c9:e9:e5:a4:34:4e:b5:9e:ae:96:bc:a6:b4:42:
                    63:12:10:a4:8b:01:f3:18:4f:e8:13:f4:7d:76:27:
                    1c:c5:53:7a:ca:5c:f7:67:0f:cc:b0:78:ca:9f:a6:
                    f3:ed:bf:50:62:c8:ae:71:4a:1b:d9:30:11:15:d3:
                    1f:07:e3:fd:d7:1a:ed:05:f3:42:ea:6f:fd:11:58:
                    9d:28:0e:b7:13:cd:f0:b9:bf:47:0e:1a:e9:8b:60:
                    da:ee:8b:24:cb:35:78:50:34:33:d7:fb:a3:60:38:
                    bd:61:31:99:19:8b:81:88:43:57:c7:77:bb:74:7d:
                    81:96:c6:d1:b5:0b:40:9f:1d:83:fc:02:2c:18:4a:
                    fe:92:eb:22:5f:54:b2:10:3d:00:e2:20:88:c9:f8:
                    e7:4f:12:fa:82:63:c6:60:1a:33:39:7d:5c:57:e6:
                    ea:4b:5e:d7:1b:ad:b5:95:2c:6e:63:58:a7:5c:ea:
                    b2:6c:3c:27:8c:75:c5:ee:7d:f7:fa:5b:27:76:d8:
                    4a:a3:a6:11:c1:a6:8f:3b:b9:45:5c:15:74:6a:9d:
                    62:e1:ca:82:a5:37:f9:d5:8f:17:41:75:e3:fa:78:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:57:1A:02:27:CB:4E:D4:99:9B:8C:8D:0B:94:17:E0:0C:CA:D2
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133353a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:135::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:c0:97:58:5c:43:95:0a:e8:8e:36:30:c6:ea:95:ff:d2:f8:
         0a:b2:cb:cd:c5:96:37:c0:8a:7b:e7:56:57:09:c7:51:5f:da:
         26:ee:d2:76:85:a8:35:0c:9c:ef:ea:bf:d8:e1:83:96:07:9b:
         aa:47:71:ea:7b:12:8a:ae:0e:32:18:1d:a4:cc:34:3a:83:2a:
         40:eb:93:13:b3:1c:8d:14:c9:0e:db:b6:5f:09:f7:12:ce:7c:
         1d:7e:8b:bf:ef:09:6a:f6:7c:f5:84:fb:85:32:18:2d:a5:99:
         79:d4:20:76:28:c3:b8:8b:3c:c1:1c:c8:27:70:6c:a9:61:12:
         79:f6:29:84:c3:b0:4c:b6:d3:a4:e7:f2:49:13:e2:e9:37:f9:
         ff:7d:10:e1:6c:64:aa:8f:03:18:a6:19:b7:e2:78:fd:2c:b6:
         1e:d4:bb:82:24:2d:3b:88:85:8c:9c:cd:d0:4e:e8:8e:80:85:
         ce:c6:da:ae:bf:26:a0:30:de:ec:88:b9:51:36:36:e2:26:67:
         85:1e:11:c3:44:9a:8a:fc:5b:5f:d8:87:dc:a7:6c:7f:2f:98:
         2b:de:73:cd:14:13:c2:71:5b:49:32:8d:e9:a1:78:c1:b2:b7:
         42:c6:60:9f:ee:fb:ee:68:4a:c3:54:fd:23:96:b5:47:52:fe:
         3d:4f:f7:00
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIURxbvlYhQ8poR1Twg+rxN+it4uqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NDRaFw0yMzA5MjUwODAxNDRaMDMxMTAvBgNV
BAMTKDQzQkU1NzFBMDIyN0NCNEVENDk5OUI4QzhEMEI5NDE3RTAwQ0NBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14R4vg6UEwtfU0kwOcSKbvAkv
V9v0YdOGVlCNt+nJ6eWkNE61nq6WvKa0QmMSEKSLAfMYT+gT9H12JxzFU3rKXPdn
D8yweMqfpvPtv1BiyK5xShvZMBEV0x8H4/3XGu0F80Lqb/0RWJ0oDrcTzfC5v0cO
GumLYNruiyTLNXhQNDPX+6NgOL1hMZkZi4GIQ1fHd7t0fYGWxtG1C0CfHYP8AiwY
Sv6S6yJfVLIQPQDiIIjJ+OdPEvqCY8ZgGjM5fVxX5upLXtcbrbWVLG5jWKdc6rJs
PCeMdcXufff6Wyd22EqjphHBpo87uUVcFXRqnWLhyoKlN/nVjxdBdeP6eChpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUQ75XGgIny07UmZuMjQuUF+AMytIwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMzM1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
NTANBgkqhkiG9w0BAQsFAAOCAQEAiMCXWFxDlQrojjYwxuqV/9L4CrLLzcWWN8CK
e+dWVwnHUV/aJu7SdoWoNQyc7+q/2OGDlgebqkdx6nsSiq4OMhgdpMw0OoMqQOuT
E7McjRTJDtu2Xwn3Es58HX6Lv+8JavZ89YT7hTIYLaWZedQgdijDuIs8wRzIJ3Bs
qWESefYphMOwTLbTpOfySRPi6Tf5/30Q4Wxkqo8DGKYZt+J4/Sy2HtS7giQtO4iF
jJzN0E7ojoCFzsbarr8moDDe7Ii5UTY24iZnhR4Rw0SaivxbX9iH3Kdsfy+YK95z
zRQTwnFbSTKN6aF4wbK3QsZgn+777mhKw1T9I5a1R1L+PU/3AA==
-----END CERTIFICATE-----