Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133613a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          eCWmAXF2hSdOfu82pttMn3vj4tZKqicDEio9Vt5aCns=
Subject key identifier:   0D:F6:C8:FD:DD:6B:4A:AB:EE:09:E7:03:4C:57:62:26:00:61:B2:3F
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       587965CC2F806301D9A86117851BAF88D647539B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133613a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:59 +0000
ROA not before:           Mon 26 Sep 2022 07:56:59 +0000
ROA not after:            Mon 25 Sep 2023 08:01:59 +0000
asID:                     59282
IP address blocks:        2400:d680:13a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:79:65:cc:2f:80:63:01:d9:a8:61:17:85:1b:af:88:d6:47:53:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:59 2022 GMT
            Not After : Sep 25 08:01:59 2023 GMT
        Subject: CN=0DF6C8FDDD6B4AABEE09E7034C5762260061B23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:93:65:a3:f7:62:cd:e4:a7:46:ea:28:c7:
                    f2:b5:7a:4c:55:c3:ec:a2:fd:60:5b:42:42:ec:36:
                    fc:a0:a3:22:bd:ee:6d:60:85:50:94:e9:1e:2a:67:
                    28:10:42:93:00:d7:14:40:39:2d:db:96:07:2a:4c:
                    d7:f6:18:d4:b3:62:04:f9:4b:15:6f:11:bb:dc:99:
                    1b:66:b0:92:0a:b5:9a:7b:e5:4a:2e:a9:8c:a1:af:
                    ed:d7:ae:03:55:14:53:b4:e5:cb:50:f2:f1:44:eb:
                    39:2b:ff:18:d9:e1:2f:a6:4b:d5:c4:dd:bb:60:a3:
                    03:74:19:d0:23:0e:1f:63:02:00:c4:8f:54:b8:fc:
                    e8:f6:1a:bd:b7:37:25:62:fb:4d:02:36:65:1f:ef:
                    3f:b4:6e:da:61:f4:f5:19:e6:39:36:30:ae:eb:6b:
                    f3:1c:21:67:d9:28:e9:b4:e9:5b:93:40:3e:49:3f:
                    2e:15:6c:46:d1:c2:e1:22:4f:04:34:72:86:fa:0f:
                    4b:1c:5a:e4:45:e7:6e:9a:26:d4:6a:4e:7c:6f:5e:
                    ed:c5:7d:00:7f:4c:9e:c1:f2:ae:25:91:c3:73:a7:
                    0f:79:4d:e6:91:bb:78:c7:31:ea:af:80:a5:5e:ae:
                    d9:22:21:72:50:ea:51:c0:6f:68:2d:74:02:e7:7c:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F6:C8:FD:DD:6B:4A:AB:EE:09:E7:03:4C:57:62:26:00:61:B2:3F
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133613a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:13a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:a0:04:7c:d7:f8:53:86:5e:e2:5c:3e:81:91:4d:b1:51:0e:
         70:8f:61:14:81:e3:a7:43:80:34:3d:53:0d:dd:f5:15:6c:61:
         59:8a:89:65:b1:c9:98:74:0f:53:fc:3f:de:bf:67:10:4f:16:
         f9:12:bb:68:96:a0:73:12:63:a5:a4:7a:bc:f2:4e:6b:15:ae:
         7b:e7:57:ac:4a:fd:4e:51:5e:e8:0f:b6:cb:1d:73:19:ef:5c:
         9c:cf:cf:cb:22:20:9e:50:c8:81:28:aa:0a:87:23:81:4f:2c:
         8f:85:da:93:71:2f:7a:d9:f4:6f:ce:f2:55:57:66:21:54:3a:
         b2:9f:94:ef:ae:a0:6b:61:04:d4:19:3d:3e:a5:00:e4:70:93:
         81:6c:8a:77:84:e9:f7:29:cc:9c:a8:e1:95:ef:f9:dc:75:5a:
         08:f9:66:cb:b6:b3:15:66:c0:ff:1b:12:15:29:d8:d6:99:d6:
         6e:1f:08:73:f1:97:5a:91:a9:e1:32:78:3d:fe:2a:32:57:9b:
         04:a1:42:bf:ae:8c:b7:22:cc:17:ea:88:3c:d4:73:cd:67:3b:
         38:9a:8e:1d:b1:2d:7e:20:b9:b7:b8:fb:3f:40:7d:89:14:fa:
         31:05:bd:f4:64:79:cf:11:e3:4b:9c:e8:07:b2:b8:64:5e:f0:
         20:70:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----