Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134333a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          kw68LdohZpcFzvYKlR7c6dCjZ0KjAy+mrMuAfpt/QNc=
Subject key identifier:   C0:34:CE:6E:87:22:3F:10:AD:35:4D:CE:0F:30:DC:9E:9D:CC:41:6B
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       0F07B528E2811C5CA135D6C2B00B273E32D08AD8
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134333a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:28 +0000
ROA not before:           Mon 26 Sep 2022 07:56:28 +0000
ROA not after:            Mon 25 Sep 2023 08:01:28 +0000
asID:                     59282
IP address blocks:        2400:d680:143::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:07:b5:28:e2:81:1c:5c:a1:35:d6:c2:b0:0b:27:3e:32:d0:8a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:28 2022 GMT
            Not After : Sep 25 08:01:28 2023 GMT
        Subject: CN=C034CE6E87223F10AD354DCE0F30DC9E9DCC416B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:5d:f5:d8:5e:bd:6c:a5:cf:b7:69:7f:51:
                    79:35:93:b7:0c:c3:04:82:14:45:e5:d4:64:3c:53:
                    ac:38:f2:90:47:f5:d5:8c:f4:c4:76:48:4f:90:4d:
                    b0:93:11:2a:31:e7:73:06:eb:02:06:2f:d2:09:83:
                    04:69:1a:41:fd:36:ff:c9:79:73:5c:d2:1a:fd:f5:
                    36:89:07:04:a7:5a:a4:aa:07:f4:ac:e6:e9:b1:4c:
                    99:91:c6:d1:0f:ab:bc:13:0b:6e:ab:0d:56:83:5e:
                    4a:d3:cb:6a:26:8e:1a:51:65:82:32:e4:79:d7:1c:
                    f1:4a:06:65:f0:0f:b0:e1:e8:23:cf:cd:f7:30:92:
                    b8:0e:57:33:a2:7a:cc:5b:2f:53:1a:fe:fd:9d:36:
                    37:d6:71:07:e3:d3:ef:ad:c8:fd:57:2d:86:50:97:
                    c7:01:4f:31:23:77:8c:70:8f:47:ff:7d:7e:98:b8:
                    a5:f3:f9:95:42:78:8b:f3:46:05:fa:75:25:a4:8d:
                    cb:0f:8a:d7:47:dd:d6:43:24:63:b6:5d:6c:79:7c:
                    8e:44:6a:e1:99:b8:01:04:39:80:a8:26:0c:d8:92:
                    82:5d:6f:63:fd:81:35:23:85:41:a7:11:50:71:bc:
                    48:ca:a2:40:8e:66:c4:ba:8c:b0:d7:c9:a7:ce:41:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:34:CE:6E:87:22:3F:10:AD:35:4D:CE:0F:30:DC:9E:9D:CC:41:6B
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134333a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:143::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:14:9d:99:50:ee:c7:a5:49:1f:3f:1e:78:cd:b5:df:54:f3:
         40:79:d0:75:c5:d9:e1:65:5d:e7:2b:2f:ca:ac:1d:86:98:bc:
         76:bf:0d:0c:cc:7b:1f:86:3c:37:6c:f2:38:6c:f8:80:f4:53:
         b9:b3:c9:fd:cb:98:e1:4f:db:ef:0e:24:17:2e:80:76:78:90:
         9a:86:c8:89:f2:f7:3d:ff:56:f0:cb:84:20:a2:41:cb:99:51:
         56:72:fa:02:c0:e0:85:a5:c8:70:07:42:66:1d:ab:36:f4:f3:
         f5:d7:2a:40:54:af:cd:e5:88:14:1e:c5:02:fc:f6:43:c2:90:
         b6:36:af:31:f7:dd:ad:58:70:a6:06:2a:8a:8d:18:df:00:1f:
         7b:85:53:3d:e4:15:a6:74:f5:74:05:58:a6:f9:52:a8:9f:86:
         3d:5c:ef:98:ed:d0:fa:dd:92:97:6e:39:20:46:2f:7d:0f:2e:
         41:c1:50:d2:1c:06:84:32:52:b0:9e:cc:40:83:11:81:50:0f:
         5e:ce:3d:a7:02:43:ca:cd:ca:d0:7a:31:6e:db:04:61:95:78:
         39:c2:fa:fb:6a:0f:b7:93:e2:ce:87:10:ea:b5:c2:ee:65:f9:
         7f:7c:a3:31:fe:59:2c:f6:d0:63:9b:67:07:b2:9c:72:0a:4d:
         30:98:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----