Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134303a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          x9VG5xrkNlrudGEUx4JAAN8GMSpNVA9lynzpPV6rWNg=
Subject key identifier:   44:77:78:74:FE:6A:0A:57:4B:56:42:BC:6B:6B:2A:CD:C1:FE:7D:E6
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       787E4E63381AD3691F79616B2DC0FCB6E6BD472D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134303a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:10 +0000
ROA not before:           Mon 26 Sep 2022 07:57:10 +0000
ROA not after:            Mon 25 Sep 2023 08:02:10 +0000
asID:                     59282
IP address blocks:        2400:d680:140::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7e:4e:63:38:1a:d3:69:1f:79:61:6b:2d:c0:fc:b6:e6:bd:47:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:10 2022 GMT
            Not After : Sep 25 08:02:10 2023 GMT
        Subject: CN=44777874FE6A0A574B5642BC6B6B2ACDC1FE7DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:31:c8:9c:45:e5:0d:79:e5:ed:cf:2c:62:
                    78:d5:d2:23:fd:f9:85:64:17:4e:1a:7c:ef:5a:b7:
                    25:a3:3b:a4:fe:50:2d:8b:4c:b9:7d:f5:6e:8e:9b:
                    0d:99:2c:7e:25:97:e3:16:e1:5f:e6:6c:49:09:aa:
                    0d:a0:18:4e:b7:00:79:2c:97:02:58:4e:4b:a3:d7:
                    9b:d2:55:3c:3e:86:3d:90:1c:3b:5f:44:f0:2d:f4:
                    a6:53:2c:27:7e:a4:05:dd:d1:57:aa:7f:3f:fd:09:
                    0d:e8:be:d0:4e:70:3f:4e:87:76:c9:c8:b0:54:57:
                    47:e6:5d:62:50:ee:af:07:bb:3b:3f:ae:db:0a:6e:
                    e3:64:36:bf:91:38:6c:99:54:05:16:35:25:db:19:
                    6a:6d:25:e9:58:92:e5:c2:05:e2:c4:8a:07:1c:db:
                    a8:1f:db:d4:e9:c3:3c:4d:c4:ff:8b:b5:e7:8f:45:
                    19:2b:14:a3:66:01:f3:f8:2e:f4:94:0b:9d:f8:b9:
                    f3:57:b7:0c:f6:f9:44:ee:28:ab:5a:85:a3:e5:c7:
                    3f:69:20:58:02:89:b1:b4:c4:2d:2c:e0:d3:c0:ef:
                    87:74:fe:c4:39:85:4d:18:d5:8c:d4:e3:3b:95:f5:
                    5b:77:dd:7d:b9:98:78:9f:56:97:82:e7:d7:89:f9:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:77:78:74:FE:6A:0A:57:4B:56:42:BC:6B:6B:2A:CD:C1:FE:7D:E6
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134303a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:27:22:fa:46:7c:b1:a2:52:02:25:12:2d:b6:02:73:7e:d7:
         b6:1e:da:b6:5f:17:f1:e7:61:9f:10:78:24:1d:e6:70:fb:76:
         cb:c6:68:ad:c6:32:6d:2e:82:f6:cb:49:ec:5b:f9:b1:b7:1b:
         70:a7:18:55:91:7c:0e:ff:6c:73:b2:34:68:6d:be:bc:1c:39:
         66:1e:b2:67:5f:70:7d:ac:ce:10:11:cc:df:6f:0a:f9:06:57:
         a5:10:56:26:1a:04:26:95:10:eb:65:23:86:fe:ab:78:56:d8:
         2b:da:5a:32:15:2e:f3:63:c8:14:f2:1e:d5:f6:21:16:a0:f1:
         70:e9:25:3d:2b:bf:a9:70:58:1e:86:b4:7d:6a:84:9d:0f:df:
         09:62:c8:d9:6d:33:62:37:25:52:67:65:88:2a:1f:c7:32:a4:
         21:c3:1e:5c:7a:ef:3d:59:45:37:cc:c0:92:ed:ca:06:f3:9c:
         2e:d5:91:95:06:4a:bc:fe:f1:d7:e6:cf:40:eb:d2:45:58:28:
         bb:94:f3:9e:03:f6:36:03:d6:f9:e6:d1:b1:e5:bf:05:85:b4:
         2d:ab:9f:87:69:83:2d:88:43:de:b9:9b:4e:8a:9e:63:fa:39:
         bf:15:a2:d9:c0:7c:06:91:67:9c:b7:70:e0:42:71:d7:b1:47:
         02:58:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----