Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133383a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          HmmwEfmY/ZSTvykjxtc//VPqVFvPHn5V0/y/HpH/3Cw=
Subject key identifier:   82:8A:B7:D3:76:64:3B:BD:0B:77:C3:6F:4A:90:79:43:41:6B:54:A0
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       09E8939A51C5BAEB3DF3A20CE2CF228EB5DA0F6E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133383a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:01 +0000
ROA not before:           Mon 26 Sep 2022 07:57:01 +0000
ROA not after:            Mon 25 Sep 2023 08:02:01 +0000
asID:                     59282
IP address blocks:        2400:d680:138::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e8:93:9a:51:c5:ba:eb:3d:f3:a2:0c:e2:cf:22:8e:b5:da:0f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:01 2022 GMT
            Not After : Sep 25 08:02:01 2023 GMT
        Subject: CN=828AB7D376643BBD0B77C36F4A907943416B54A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:b2:c0:eb:65:75:04:79:92:af:6a:eb:61:
                    cd:99:62:ba:62:14:8d:97:2b:30:3a:b5:f7:65:25:
                    d9:c4:f8:c5:0b:0a:97:2b:0e:41:f6:b3:ff:29:b9:
                    ba:4c:6e:a7:71:c2:39:32:57:93:e0:55:fa:60:7b:
                    da:c5:be:7a:94:05:77:b5:36:25:e2:0d:d7:6c:72:
                    0c:12:bc:b4:6b:f5:e0:d9:ac:f3:a5:18:60:c2:ec:
                    19:25:aa:ab:60:10:37:30:c1:01:db:bf:54:78:7a:
                    25:90:57:b0:9d:09:bb:1d:e2:62:4a:ed:ca:87:e8:
                    05:f9:8b:4d:7c:a9:f1:5d:d1:b5:cd:dc:af:3f:4d:
                    a6:8e:8e:61:2f:a2:0f:df:ec:c9:f5:c0:2a:38:41:
                    94:50:62:2e:d3:54:29:9f:a2:87:eb:4f:fb:b7:02:
                    3b:e8:48:6a:ca:26:3e:ab:29:ed:84:03:12:65:d8:
                    6b:e5:47:68:7b:a6:b9:44:84:26:a5:14:d5:f9:61:
                    88:10:f5:1f:3b:1c:65:26:a1:6d:ac:09:64:1d:e3:
                    13:de:23:fd:94:33:10:b8:61:0f:dd:02:b2:b7:4c:
                    1f:e4:cd:3f:88:87:8c:e5:a5:9e:22:df:ec:eb:90:
                    2c:49:15:a3:05:3b:d2:de:75:b7:c7:d6:19:a8:ec:
                    79:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8A:B7:D3:76:64:3B:BD:0B:77:C3:6F:4A:90:79:43:41:6B:54:A0
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133383a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:138::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:62:8f:a6:11:a3:85:ec:8a:c9:8d:2b:2f:aa:f7:80:46:
         07:10:1c:48:15:b2:3b:16:94:e8:52:dc:fb:1c:d0:30:70:1a:
         67:05:db:03:3a:e5:92:4f:8a:d1:af:b2:60:9c:b5:d3:53:86:
         e3:7d:a1:76:3e:03:f5:10:ce:2c:7a:37:a5:24:fa:d0:d8:7a:
         a8:b6:9c:22:f8:da:ce:9f:02:28:05:ee:d2:b9:71:5c:45:9c:
         f9:aa:f2:11:f6:9a:1d:ec:7d:6d:d2:f0:0f:a1:d4:bd:64:3a:
         c1:0e:ec:13:de:41:a9:a6:56:4c:a4:78:9e:70:53:e3:7d:92:
         a2:30:be:60:3b:60:7c:c9:73:6a:12:15:ae:11:fb:0d:d4:f8:
         ef:d6:7e:60:d1:cf:2b:1c:90:45:c5:44:00:a3:04:d3:2b:1a:
         e4:e2:7a:9a:b9:b6:dd:26:af:7c:ef:28:ab:1d:14:ee:70:da:
         51:3e:f5:d1:1b:1d:9f:a7:67:49:81:89:86:87:f6:f7:30:01:
         13:2e:11:a2:ae:9c:8d:40:8f:12:82:d9:ed:03:29:4f:54:3b:
         e9:a3:33:2b:fa:73:87:4d:47:52:36:2c:d3:b7:87:93:6f:48:
         78:18:2b:63:cf:e2:8d:58:4c:46:64:4a:f1:9b:b1:3a:5c:f6:
         9e:31:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----