Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          00lsG97Ama3Aa5P/gTHUTvkQ8qxkgbMZD4OnWEKpPJQ=
Subject key identifier:   FE:66:44:43:73:E0:81:CB:18:EB:FF:25:19:D2:E8:05:57:1F:93:4E
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       137FBFC183DC111F2827EC7AB405C7255AF2D58D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:19 +0000
ROA not before:           Mon 26 Sep 2022 07:56:19 +0000
ROA not after:            Mon 25 Sep 2023 08:01:19 +0000
asID:                     59282
IP address blocks:        2400:d680:146::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7f:bf:c1:83:dc:11:1f:28:27:ec:7a:b4:05:c7:25:5a:f2:d5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:19 2022 GMT
            Not After : Sep 25 08:01:19 2023 GMT
        Subject: CN=FE66444373E081CB18EBFF2519D2E805571F934E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:2c:03:f7:0e:6b:55:49:57:ae:c0:ae:f6:
                    af:f0:ff:52:86:70:d4:f7:85:69:d4:ff:d8:e7:a9:
                    88:c2:61:bb:8a:28:0d:6e:b0:64:05:31:87:9e:24:
                    02:6f:ff:3a:f1:59:3a:c7:99:5b:06:26:5d:fc:ad:
                    af:4d:96:0e:ae:55:7c:0e:8e:9c:41:c7:6e:3b:9d:
                    14:4e:27:a4:18:6b:69:39:5d:bc:d3:cf:a7:6c:c4:
                    6a:39:b4:55:4e:aa:d8:fe:3e:dd:cb:98:04:5b:d0:
                    32:73:6b:74:e6:b7:9d:c8:8c:cc:b7:fd:87:6e:4b:
                    36:fd:c7:ab:fd:79:74:df:68:72:2f:af:7e:58:78:
                    68:07:20:df:0e:b3:53:c0:6c:c5:39:af:30:cf:93:
                    2d:d9:7e:dc:24:a4:93:2b:5c:dd:de:da:65:97:8d:
                    da:08:08:ba:ec:b7:a6:6c:fb:37:64:06:54:88:62:
                    e4:ad:89:3b:e6:4e:f3:56:2b:a7:78:d4:00:64:90:
                    4a:b2:b2:70:fa:07:c8:22:8d:d9:bc:f5:5c:1e:42:
                    41:01:41:8e:62:83:ec:19:9d:9e:37:40:f9:fd:7f:
                    55:98:18:d6:2d:ae:0b:70:9f:83:e8:69:44:05:9e:
                    f2:30:d3:f8:53:e9:7a:2b:ea:5e:4a:13:22:00:9a:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:66:44:43:73:E0:81:CB:18:EB:FF:25:19:D2:E8:05:57:1F:93:4E
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134363a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:146::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:44:d8:2a:04:72:4f:c4:60:ba:96:9a:86:2e:c7:4f:60:5f:
         83:25:46:7b:c1:85:75:eb:7d:87:e4:c3:cb:79:f6:d0:6f:e8:
         3b:c2:db:a2:39:28:c0:1f:73:0a:e3:3d:09:bf:3e:68:41:cb:
         ea:d5:6b:5c:5b:5f:20:e7:1e:f2:1c:11:76:6d:c0:c0:15:80:
         16:4d:d6:84:39:30:85:17:89:2a:eb:c9:c6:96:84:2f:f0:83:
         cd:4d:e0:d6:de:a6:5e:71:8e:fa:28:96:83:54:83:63:ec:0d:
         53:c8:5d:81:47:9c:b3:e2:b3:96:70:69:86:6f:80:a0:a0:03:
         4b:56:51:42:b5:38:90:bd:8b:8a:11:3a:72:33:eb:db:5c:57:
         be:45:8b:b2:5e:37:a1:11:9a:1e:ae:86:44:74:c6:4b:84:90:
         a6:d8:c0:e2:f1:fb:a8:e0:14:fb:81:af:94:85:76:eb:af:20:
         06:1d:63:9a:44:0e:b1:22:33:7b:51:c9:0e:6f:8f:b1:1f:be:
         05:4a:fc:f4:4d:8e:88:1e:a0:1f:fe:31:34:42:2b:79:24:b4:
         a9:c2:78:c8:67:6a:87:40:ef:e7:e7:66:ac:79:95:33:ab:49:
         c2:07:cd:bf:0d:f8:9e:a9:4b:09:d7:74:45:f5:3d:08:d4:02:
         2e:03:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----