Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31333a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a31333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          Iki4JHK0BEAii6XySE9tJjQTNDptHcmbBJFG87XHBMQ=
Subject key identifier:   7B:E6:8C:EC:45:53:0E:F0:CB:F4:85:C6:72:5F:7C:60:6D:01:98:F5
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       3D5F52B8B6259B01E043182F7BCF8A8DE1E624F8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31333a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 07:00:04 +0000
ROA not before:           Mon 26 Sep 2022 06:55:04 +0000
ROA not after:            Mon 25 Sep 2023 07:00:04 +0000
asID:                     59282
IP address blocks:        2400:d680:13::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5f:52:b8:b6:25:9b:01:e0:43:18:2f:7b:cf:8a:8d:e1:e6:24:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 06:55:04 2022 GMT
            Not After : Sep 25 07:00:04 2023 GMT
        Subject: CN=7BE68CEC45530EF0CBF485C6725F7C606D0198F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:64:4e:86:41:42:02:7c:5a:db:7f:cd:2c:
                    53:a0:09:93:c9:3d:71:6b:55:0d:6d:a1:ae:aa:5b:
                    4f:07:0a:17:06:36:cd:f7:0f:81:f2:46:b7:3d:3f:
                    c9:e3:b3:32:55:76:b9:78:31:c0:b2:89:c3:7c:94:
                    be:04:3f:b2:9f:00:36:39:00:8e:07:b0:33:25:8b:
                    51:c8:d3:7a:02:ab:b5:50:2e:b6:f8:f7:3e:39:d3:
                    2f:11:d2:a4:59:54:da:08:28:cd:2d:7e:be:ad:05:
                    fc:80:dc:40:43:75:ac:3b:7c:a8:d8:e6:db:f6:c6:
                    7e:78:5c:cc:f7:b5:c2:a1:c2:c5:b9:a4:7b:55:21:
                    14:99:09:16:23:4b:a9:78:fe:19:f3:bd:d0:ea:bf:
                    ff:07:0b:a9:fa:c4:1d:a9:56:e1:44:43:3a:91:c8:
                    af:3d:87:00:5d:b3:a0:02:ed:81:1a:7b:3f:04:a1:
                    2e:a9:22:a6:b8:6a:38:6b:b3:60:61:f3:b0:f1:3e:
                    96:4d:7d:d0:0d:d1:0f:be:c2:8e:2c:61:99:10:88:
                    8b:57:c6:44:68:e0:71:7b:a6:87:84:66:eb:ff:e6:
                    70:ee:89:55:1a:50:6d:cf:ee:41:c4:82:70:13:53:
                    36:78:2a:aa:3b:1a:15:8d:00:af:35:2c:c4:0f:c2:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:8C:EC:45:53:0E:F0:CB:F4:85:C6:72:5F:7C:60:6D:01:98:F5
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31333a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:77:7f:a9:d5:d3:53:7f:5d:01:d3:1d:1b:e3:d0:f8:95:46:
         bc:93:4b:fa:46:2e:41:cb:a1:d4:a6:42:39:a2:45:e9:bd:f4:
         08:69:c4:4a:e5:93:95:ff:d5:0f:ff:b1:e4:78:62:30:36:6d:
         48:0f:24:be:b2:df:b6:b7:7b:4b:9e:45:6c:db:8c:52:dc:4d:
         e2:a8:85:d9:4c:65:ab:ab:6f:f2:93:fb:30:41:d6:c3:be:ea:
         1c:4c:f9:bb:f9:2c:27:bd:5c:c4:69:d9:94:ad:0f:26:7b:ec:
         6b:89:2d:00:3a:73:22:d9:7b:1f:20:50:1c:13:0a:28:6f:08:
         b0:6d:0e:cc:fb:b5:02:4e:be:54:69:71:52:a0:ad:48:b7:08:
         4a:ee:53:de:fa:80:54:08:4a:82:46:e1:8f:37:22:88:6a:d1:
         95:59:91:d5:6a:49:b6:ac:19:8f:cb:75:80:63:a4:47:e8:cb:
         f5:67:64:03:0a:46:60:3c:0f:4d:df:9e:f6:b2:6e:46:97:b8:
         f6:5a:55:d5:79:db:1c:0f:b9:37:b2:05:b9:5c:50:de:11:a4:
         56:0d:9b:38:b5:ef:60:84:b2:29:19:d1:10:76:09:16:37:0d:
         76:19:b3:ca:a3:62:af:c4:98:bd:7a:ee:b8:b3:5d:25:6b:26:
         72:8b:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----