Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          yel26grPjzdhCTUyElTbkh7O9HluwtnxKo2Swuz5ebo=
Subject key identifier:   39:0F:F4:CF:3C:6E:74:98:8F:9B:C9:75:ED:DF:03:60:C9:0F:89:99
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       4E89C1417265087BC67DE5934D9462C152B265A0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:56 +0000
ROA not before:           Mon 26 Sep 2022 07:56:56 +0000
ROA not after:            Mon 25 Sep 2023 08:01:56 +0000
asID:                     59282
IP address blocks:        2400:d680:13f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:89:c1:41:72:65:08:7b:c6:7d:e5:93:4d:94:62:c1:52:b2:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:56 2022 GMT
            Not After : Sep 25 08:01:56 2023 GMT
        Subject: CN=390FF4CF3C6E74988F9BC975EDDF0360C90F8999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:f7:71:3c:24:67:65:ae:23:16:27:5b:e6:
                    57:11:2c:0f:ba:94:2d:d5:39:f9:d1:07:d6:96:69:
                    c0:fd:14:b2:c2:92:d5:93:6e:bc:d6:26:40:47:03:
                    52:96:67:1e:03:ff:ce:25:1b:38:47:5b:27:51:96:
                    37:b1:92:ff:d5:f9:63:a2:58:06:10:eb:f0:ea:62:
                    90:d2:8a:dc:31:ac:cb:d1:ce:d7:64:06:4e:d9:a7:
                    ac:0a:5a:f3:5a:c0:cc:52:07:77:42:02:2c:86:4e:
                    df:fc:06:ef:31:1f:17:41:d6:c4:89:e2:16:80:1a:
                    d1:69:e3:5c:0c:11:63:ca:44:ea:91:e4:31:4c:1a:
                    55:d4:4a:a1:48:0d:c4:d3:90:a6:0a:63:3d:b5:c1:
                    63:16:8a:bb:d1:b7:28:3c:5b:5a:ff:02:ac:d4:53:
                    ab:60:d7:50:f0:b6:5e:d7:82:3c:14:32:49:1e:8a:
                    fd:fc:73:4c:60:5c:03:7e:fe:6f:bd:c2:06:13:67:
                    6d:4c:a7:8e:f4:2b:9d:09:3b:03:f6:dd:a9:2a:34:
                    28:0e:67:a2:2a:5a:09:e7:df:c5:1e:39:47:63:89:
                    e2:3d:92:da:43:98:6f:5d:81:48:f0:0c:68:8e:32:
                    67:8e:0a:24:99:9b:8c:49:ef:df:e1:27:21:be:de:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0F:F4:CF:3C:6E:74:98:8F:9B:C9:75:ED:DF:03:60:C9:0F:89:99
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133663a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:13f::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:50:2c:da:3d:75:40:33:a1:4c:7c:13:e3:66:03:95:fa:10:
         a6:29:57:50:00:c8:c6:ef:f8:a5:64:0c:b4:61:91:4e:15:ba:
         e9:cd:26:3c:6c:1e:1b:96:fd:0a:2e:57:58:ef:f0:e0:fd:0a:
         5a:04:d4:41:83:e9:72:46:a6:21:0b:67:7a:f6:c6:db:81:88:
         ea:13:bd:93:a9:4a:bc:7a:5a:7f:32:08:1d:d5:77:e5:99:f0:
         f0:07:1a:a3:66:1f:5a:4e:05:82:02:14:7b:8c:2c:63:0f:46:
         52:51:5d:41:9e:00:78:3e:16:20:b3:45:fe:f5:63:fd:be:7c:
         ce:cf:df:86:c3:9b:ae:52:94:02:a4:75:0d:70:b1:f6:82:3a:
         31:54:46:42:63:18:4f:af:3e:a1:cc:bd:96:c1:a1:22:cf:43:
         a3:e6:d3:78:98:91:88:e4:b2:b4:2c:55:5e:6b:e8:59:0b:7d:
         61:d9:d6:1d:14:dc:d0:ba:e4:cd:5c:c1:cf:32:3d:30:60:c0:
         ad:63:e1:3d:ac:3c:a9:da:d9:b0:38:f7:28:89:29:9d:7f:84:
         33:db:f2:79:cb:06:27:8e:e5:69:e1:a0:d9:19:f1:78:20:35:
         45:13:3d:e5:6e:0f:c5:fe:ce:4d:f5:0e:ce:0b:ee:2b:95:a6:
         ad:f2:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-ams.rpki-client.org