Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          vGy4QQS5w1hNTqDGiv5r662UDZqxem68lGhanQ4nzSw=
Subject key identifier:   5A:25:23:25:5E:EB:B6:7F:5A:81:F6:A1:26:DE:91:5A:04:DC:4B:D6
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       3E23C7BE1FFC445BF37C420BEA28816FDF8DBE88
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:42 +0000
ROA not before:           Mon 26 Sep 2022 07:56:42 +0000
ROA not after:            Mon 25 Sep 2023 08:01:42 +0000
asID:                     59282
IP address blocks:        2400:d680:149::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:23:c7:be:1f:fc:44:5b:f3:7c:42:0b:ea:28:81:6f:df:8d:be:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:42 2022 GMT
            Not After : Sep 25 08:01:42 2023 GMT
        Subject: CN=5A2523255EEBB67F5A81F6A126DE915A04DC4BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:93:2c:b6:21:7f:92:cc:5d:bc:90:a4:99:
                    19:a1:34:e1:c6:2e:59:f1:d7:26:a5:5d:b3:75:41:
                    ef:28:21:43:17:30:12:22:06:0e:9c:e5:0b:cf:0a:
                    cb:3b:02:92:cc:8f:40:cb:a8:b0:49:f2:a2:3e:3a:
                    d6:79:8b:b2:21:2b:9e:fe:5c:00:d1:0d:f0:92:af:
                    29:a4:56:02:df:60:48:42:a2:87:dd:6f:2c:0f:b8:
                    4d:13:97:a0:5f:60:03:ea:f9:1e:f8:04:aa:bb:bd:
                    af:7c:01:63:46:30:52:05:d1:4f:e3:89:01:e2:1c:
                    81:f4:5f:a0:87:54:1c:24:a7:69:29:11:a4:9b:d7:
                    68:8e:75:4a:26:bd:ab:3f:6e:f4:83:20:ae:91:35:
                    16:a7:53:5c:a5:e3:4b:34:e7:fe:75:0b:6b:02:bd:
                    da:0f:23:2c:53:09:b8:ea:5d:d7:3d:3d:5e:47:27:
                    15:5b:12:1a:8e:04:00:68:fd:f6:f7:42:1f:e1:b9:
                    bb:7d:6c:e2:c7:d9:47:94:c1:7f:62:f7:01:c2:00:
                    2a:1d:bb:90:22:7c:93:08:7e:7d:08:b2:0f:28:02:
                    3a:1c:1a:db:b7:71:f4:57:12:a3:b5:3b:5a:f3:8c:
                    95:98:80:b1:ae:69:ad:db:17:8e:cb:20:1b:da:62:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:25:23:25:5E:EB:B6:7F:5A:81:F6:A1:26:DE:91:5A:04:DC:4B:D6
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134393a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:149::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:77:e2:29:57:ef:1b:99:81:37:d3:27:cc:9a:84:92:60:4f:
         f4:9e:f6:6f:e1:30:8f:f9:cb:90:68:43:b1:f5:e1:05:12:ca:
         6c:15:41:7b:21:7c:78:83:f7:34:5a:95:af:d1:04:a7:3c:8e:
         4e:a9:a2:5a:07:a6:da:6d:c4:c1:52:77:0b:ff:6f:18:22:23:
         85:2f:8c:32:d4:ee:0c:51:07:9e:d2:ea:de:48:28:f4:e7:c1:
         21:0e:57:a0:ab:ad:f6:2b:39:ec:90:e2:70:86:3a:e7:2b:87:
         74:e5:ed:50:58:4e:2a:dd:b4:35:e7:3a:1a:26:51:8b:38:ff:
         eb:35:97:e0:65:8d:7d:57:72:c5:59:c3:95:9d:97:00:f3:62:
         fe:83:e6:a3:ec:22:13:a1:f4:fb:64:80:76:ac:a0:1a:f5:32:
         e3:9e:01:1d:cc:23:43:db:0a:58:f4:e5:de:1e:9d:6e:35:5b:
         ca:27:f4:9a:d5:36:1c:e3:b4:3b:d3:ec:f5:fc:1f:33:e1:32:
         af:33:16:27:08:48:88:d7:a9:f9:b5:ea:ac:21:89:1e:ee:8b:
         01:26:9d:25:7b:35:8d:ef:65:ed:35:37:28:27:c3:ae:9e:4a:
         d5:4a:5c:d1:6b:da:60:17:f9:62:07:6e:8a:59:a3:3e:81:de:
         81:4d:e7:c7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPiPHvh/8RFvzfEIL6iiBb9+NvogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NDJaFw0yMzA5MjUwODAxNDJaMDMxMTAvBgNV
BAMTKDVBMjUyMzI1NUVFQkI2N0Y1QTgxRjZBMTI2REU5MTVBMDREQzRCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAn5MstiF/ksxdvJCkmRmhNOHG
Llnx1yalXbN1Qe8oIUMXMBIiBg6c5QvPCss7ApLMj0DLqLBJ8qI+OtZ5i7IhK57+
XADRDfCSrymkVgLfYEhCoofdbywPuE0Tl6BfYAPq+R74BKq7va98AWNGMFIF0U/j
iQHiHIH0X6CHVBwkp2kpEaSb12iOdUomvas/bvSDIK6RNRanU1yl40s05/51C2sC
vdoPIyxTCbjqXdc9PV5HJxVbEhqOBABo/fb3Qh/hubt9bOLH2UeUwX9i9wHCACod
u5AifJMIfn0Isg8oAjocGtu3cfRXEqO1O1rzjJWYgLGuaa3bF47LIBvaYuT7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWiUjJV7rtn9agfahJt6RWgTcS9YwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNDM5M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
STANBgkqhkiG9w0BAQsFAAOCAQEAM3fiKVfvG5mBN9MnzJqEkmBP9J72b+Ewj/nL
kGhDsfXhBRLKbBVBeyF8eIP3NFqVr9EEpzyOTqmiWgem2m3EwVJ3C/9vGCIjhS+M
MtTuDFEHntLq3kgo9OfBIQ5XoKut9is57JDicIY65yuHdOXtUFhOKt20Nec6GiZR
izj/6zWX4GWNfVdyxVnDlZ2XAPNi/oPmo+wiE6H0+2SAdqygGvUy454BHcwjQ9sK
WPTl3h6dbjVbyif0mtU2HOO0O9Ps9fwfM+EyrzMWJwhIiNep+bXqrCGJHu6LASad
JXs1je9l7TU3KCfDrp5K1Upc0WvaYBf5YgduilmjPoHegU3nxw==
-----END CERTIFICATE-----