Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134313a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          MlQ/CDl6JemwbAdHaCDO/lp7jEw9n1uUn9sxBjU2su4=
Subject key identifier:   58:D0:27:9B:3B:66:7B:EE:7C:C4:8D:DD:4C:60:DA:6C:77:F5:24:8C
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       51ED1849F20CB17419BBD0E65C06CBE2E74D99CD
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134313a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:02 +0000
ROA not before:           Mon 26 Sep 2022 07:57:02 +0000
ROA not after:            Mon 25 Sep 2023 08:02:02 +0000
asID:                     59282
IP address blocks:        2400:d680:141::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ed:18:49:f2:0c:b1:74:19:bb:d0:e6:5c:06:cb:e2:e7:4d:99:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:02 2022 GMT
            Not After : Sep 25 08:02:02 2023 GMT
        Subject: CN=58D0279B3B667BEE7CC48DDD4C60DA6C77F5248C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:c9:44:60:15:d6:66:95:00:4e:96:a9:78:
                    54:c2:8e:b9:ad:24:dd:a5:22:9c:0a:d3:82:ca:13:
                    1c:94:ee:d1:e4:17:f3:94:65:78:4d:16:b7:28:1e:
                    6a:e6:da:9d:af:fc:c0:6a:4e:6e:b8:a6:a6:a8:a3:
                    0d:42:62:7f:98:aa:2a:db:c4:09:73:6b:ca:b2:6d:
                    2c:7a:92:ad:2b:6a:ce:e4:fd:02:a1:46:73:2a:e0:
                    b2:64:16:db:ac:30:23:43:56:0a:ef:ea:b2:da:58:
                    68:0b:1c:54:9e:ea:fa:11:c2:ee:50:bc:92:98:5b:
                    9d:85:e0:d2:df:9b:09:a4:e1:9c:e4:f2:02:71:db:
                    2b:a9:9d:3b:d5:61:37:2b:f8:fe:58:ac:51:cf:74:
                    14:92:c4:3d:9f:65:4c:0e:45:14:02:0d:43:48:ce:
                    32:f8:91:d3:ad:d9:ed:f7:06:8f:1e:b2:5e:9b:56:
                    66:43:26:dd:10:63:66:d3:d0:d9:20:ab:57:09:4e:
                    2b:d0:4e:10:e3:12:72:ba:ed:df:23:22:21:85:84:
                    1a:3a:5a:bf:5f:12:6e:7c:59:a7:f1:90:f7:a1:cb:
                    00:80:7a:29:a9:87:47:fe:85:d9:86:6a:e3:0b:1d:
                    93:bf:8d:ca:c9:80:ce:b1:11:11:a6:15:c1:ac:e0:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D0:27:9B:3B:66:7B:EE:7C:C4:8D:DD:4C:60:DA:6C:77:F5:24:8C
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134313a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:141::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:22:a5:7e:b8:10:49:72:47:85:60:13:e6:ed:0a:9e:39:
         21:6e:18:7b:73:8d:63:86:74:94:b8:c6:5a:d8:62:8e:d7:bf:
         aa:44:1b:05:a1:86:9d:f7:88:8b:65:94:ed:57:50:38:28:1c:
         67:2c:4d:48:05:43:b7:c2:86:37:42:9c:8d:47:b6:34:af:d2:
         30:d0:94:15:be:54:44:29:c8:6f:7f:b1:56:d1:84:60:49:02:
         b4:21:34:06:d0:1c:a0:22:b2:71:9e:38:09:e0:25:71:1a:71:
         f0:1d:c3:2a:33:44:b0:20:be:c8:6c:64:98:68:83:3b:19:b2:
         ea:7d:cc:b0:a3:ed:97:4d:e8:f0:6b:a4:96:23:90:10:d9:5b:
         16:69:5b:c1:97:fc:a8:69:ff:ec:30:38:88:67:b5:d0:f6:a8:
         4e:70:0e:20:8b:e3:42:04:02:6c:87:07:df:1b:2d:07:ea:98:
         68:79:37:91:ec:12:16:56:3e:2b:a9:59:e8:a3:e8:b6:d9:b9:
         72:0a:97:0d:05:ea:da:8d:5e:f4:ca:51:7c:f5:b3:4a:6e:d7:
         6e:6e:cd:06:8c:1e:a6:4e:9b:a4:3b:83:dd:d9:c3:1a:8b:8f:
         8a:9b:fb:38:a3:a6:57:a6:ce:34:d1:97:c7:41:31:c6:4d:84:
         49:d4:85:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----