Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133633a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          FNzZJoGr4zbL5T9YvsDHYORaU3vYK9cCG7PgijuJGp4=
Subject key identifier:   0D:C9:FB:BD:25:E5:C3:69:13:FB:C5:FF:92:48:A2:60:2B:52:7A:C1
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       25F55D20BFE134A13829E8EA5041BFD3712E2D70
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133633a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:41 +0000
ROA not before:           Mon 26 Sep 2022 07:56:41 +0000
ROA not after:            Mon 25 Sep 2023 08:01:41 +0000
asID:                     59282
IP address blocks:        2400:d680:13c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:5d:20:bf:e1:34:a1:38:29:e8:ea:50:41:bf:d3:71:2e:2d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:41 2022 GMT
            Not After : Sep 25 08:01:41 2023 GMT
        Subject: CN=0DC9FBBD25E5C36913FBC5FF9248A2602B527AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:a1:9e:71:53:01:4a:b0:e7:89:3b:86:35:
                    4c:1a:bf:da:9d:32:8f:86:17:e0:98:5f:bf:cb:4a:
                    1a:fc:a6:3c:8f:e7:2c:ba:bb:55:e1:94:ea:e5:01:
                    26:c4:f9:86:60:80:6e:e6:d3:95:45:bd:10:75:1c:
                    e0:74:8a:b1:c1:a2:c1:7b:e1:e9:19:c6:f4:e6:b7:
                    6e:2a:4f:97:b1:5c:e8:8f:15:c9:40:77:9e:9a:9a:
                    b3:bc:5e:45:30:a6:86:f6:74:84:95:95:14:ef:1c:
                    7f:7e:1b:6f:fb:dc:5a:21:1f:da:16:21:2e:af:de:
                    b4:29:0e:a4:68:45:1b:d9:dc:94:fb:bd:f6:11:72:
                    65:9c:a1:f0:9a:a1:f7:34:6f:37:c7:86:03:75:2e:
                    0d:1c:ea:08:0e:63:f6:79:65:77:65:a0:f6:08:72:
                    49:d8:37:21:af:f5:87:7b:e0:25:39:82:ba:d3:6b:
                    aa:bb:88:a8:17:bb:51:4b:13:9a:6d:4d:c0:d7:a9:
                    56:cc:97:89:e1:12:71:a1:a0:4c:4d:4b:24:ff:88:
                    96:94:13:94:86:7f:8a:e1:79:8e:bb:3d:bf:0f:40:
                    9b:da:6f:e1:08:7e:74:f6:53:42:df:d3:51:db:78:
                    87:e5:ec:bb:5a:de:eb:25:1b:80:1b:2d:7b:81:96:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C9:FB:BD:25:E5:C3:69:13:FB:C5:FF:92:48:A2:60:2B:52:7A:C1
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133633a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:13c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:74:04:b8:72:6d:77:57:9c:de:77:3e:06:8e:81:98:ee:da:
         cf:27:3e:5b:1f:d8:96:e4:2c:ae:13:d5:4c:9d:ac:9e:12:72:
         40:77:da:21:a8:01:fb:b1:1a:45:a9:ba:3b:3b:ae:6f:9a:04:
         af:91:54:c5:a4:d0:4a:5e:1d:cf:1e:ec:6c:50:a7:a1:c4:56:
         98:8b:6f:b1:01:66:3c:89:7c:76:92:24:b1:db:4e:a3:d4:fa:
         92:fa:94:26:0b:ce:86:44:ca:2c:48:62:0d:fc:00:15:5f:42:
         e6:15:68:38:ee:f3:04:ea:94:e0:03:a0:fd:4c:88:b2:f5:07:
         f9:11:67:bc:27:de:66:67:ec:c9:87:fc:2a:18:c4:37:40:2b:
         ea:6d:5f:e3:83:dc:63:4c:db:04:b2:d2:2c:56:ee:e9:80:2e:
         19:d9:b4:36:36:cf:48:d0:92:7c:8b:e2:c2:33:a9:c5:33:d9:
         14:e1:6a:9d:c9:9b:e7:46:ad:f1:2a:5c:e0:d6:bb:dc:a4:b5:
         43:61:bd:57:8e:88:f5:b8:d3:47:53:ff:dd:5c:6f:3f:de:74:
         1a:aa:73:3c:9d:c5:e2:49:59:ab:1e:08:72:40:11:7d:3a:51:
         7e:e2:e0:1a:0a:ff:27:c5:c7:d2:43:41:65:17:a8:3d:fe:5b:
         f5:bd:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-fra.rpki-client.org