Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134373a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          Br5RtNmP5rqKMDiVD0IQcXJpjQJEa5JxhIfqusUi+qs=
Subject key identifier:   D1:C8:D8:B5:C4:AA:C2:91:14:DE:41:CE:60:88:60:9A:57:26:E7:ED
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       2DD7E34D0EFD5AC5B4C0BB69C898E50B63FBCE35
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134373a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:04 +0000
ROA not before:           Mon 26 Sep 2022 07:57:04 +0000
ROA not after:            Mon 25 Sep 2023 08:02:04 +0000
asID:                     59282
IP address blocks:        2400:d680:147::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d7:e3:4d:0e:fd:5a:c5:b4:c0:bb:69:c8:98:e5:0b:63:fb:ce:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:04 2022 GMT
            Not After : Sep 25 08:02:04 2023 GMT
        Subject: CN=D1C8D8B5C4AAC29114DE41CE6088609A5726E7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:db:77:a2:43:19:4e:ea:c8:d8:dd:64:36:
                    c9:ac:bd:fb:12:bf:eb:d9:b4:40:3f:ff:36:4b:fc:
                    ae:9e:64:bb:81:12:34:b7:a9:88:7f:dc:09:02:a3:
                    b4:b9:fa:67:6b:e6:db:27:46:2e:bd:4d:4f:c1:62:
                    6f:5f:20:78:43:27:10:ae:17:06:95:96:06:9f:07:
                    5f:a3:48:ff:4c:2e:97:bb:bd:1f:6a:d9:fa:3f:f1:
                    3b:96:5c:71:68:9b:5c:53:39:60:02:5f:e2:e2:03:
                    9d:87:65:cd:1a:86:76:e1:79:fd:39:87:1c:d6:58:
                    cd:98:10:fe:27:ad:2d:77:3b:05:65:bd:74:6b:ae:
                    e9:1b:f6:21:d6:f0:8f:4e:2a:5a:b9:86:67:c1:b9:
                    76:6f:10:09:47:53:a6:1b:d5:02:5e:ec:64:01:8a:
                    e8:ea:6e:41:75:c0:d8:ec:b8:a1:2d:2d:5a:fc:d3:
                    59:7e:21:0c:98:38:e1:ec:e0:cc:ed:e4:b1:8a:7b:
                    3b:48:11:34:29:40:e3:c2:87:5a:6a:79:de:44:3f:
                    66:87:8f:29:5b:c0:a1:43:3d:5e:5d:0e:2c:61:81:
                    af:23:5c:92:c9:58:2c:c8:fe:f8:1d:2c:2f:27:1d:
                    4e:ef:79:86:ad:5e:70:13:54:6b:b5:f0:a2:ff:24:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C8:D8:B5:C4:AA:C2:91:14:DE:41:CE:60:88:60:9A:57:26:E7:ED
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134373a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:147::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:e4:19:8b:1c:5f:e1:41:a0:d3:50:34:9b:2f:67:41:4d:82:
         0a:12:96:ef:c4:07:6f:bb:74:7f:97:58:44:f7:d1:68:94:0b:
         78:63:35:fb:09:26:d5:7d:81:d1:bb:b5:12:81:17:88:80:e1:
         6f:48:9c:69:17:78:61:ba:f3:08:77:b2:01:8e:bc:71:8d:0b:
         56:50:1d:29:48:69:fb:65:bd:4f:f1:bf:f7:7a:a0:82:c4:da:
         84:f1:e1:60:44:a0:cf:54:52:dc:70:58:1a:e6:3c:e5:c1:0e:
         4a:76:c3:0f:fd:db:b9:23:4e:d0:c6:a0:4c:5e:35:30:01:ac:
         f9:25:ce:eb:2a:6c:01:33:d9:bc:06:2a:52:39:6d:b3:41:0e:
         78:d2:19:5b:82:96:43:f7:08:6a:58:ce:14:97:44:1b:72:43:
         8b:0d:44:93:55:42:1e:38:be:39:c3:62:82:71:da:42:ff:95:
         ac:01:fc:88:22:a1:6a:62:6f:20:43:1b:c1:09:59:03:f4:22:
         07:4c:cb:c5:29:45:33:13:64:0c:db:52:5a:86:81:95:33:7a:
         54:27:ab:f0:02:1d:dc:c9:79:5e:d0:12:6e:cb:8e:85:e4:bd:
         1a:21:e7:eb:66:e2:92:3e:aa:bc:6f:cf:0f:5f:52:92:da:3f:
         f0:12:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----