Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          xdAGomWGQWtkNv0BYlv/bdAshxIF7wRrAxtKJ1Q/Alg=
Subject key identifier:   24:D7:F9:EE:18:00:A8:70:79:86:89:3B:83:B5:35:B9:5E:92:01:16
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       38EECC69A0D238F848687353E135F8974C3E827C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 07:00:06 +0000
ROA not before:           Mon 26 Sep 2022 06:55:06 +0000
ROA not after:            Mon 25 Sep 2023 07:00:06 +0000
asID:                     59282
IP address blocks:        2400:d680:14::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ee:cc:69:a0:d2:38:f8:48:68:73:53:e1:35:f8:97:4c:3e:82:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 06:55:06 2022 GMT
            Not After : Sep 25 07:00:06 2023 GMT
        Subject: CN=24D7F9EE1800A8707986893B83B535B95E920116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:ad:fb:09:cf:0d:35:5a:0b:38:70:65:9e:
                    fd:2c:70:8b:a1:eb:b5:df:cd:5a:9e:9f:5e:29:3c:
                    62:6b:46:bf:dc:9a:1e:c8:32:0d:a8:08:14:57:1c:
                    3c:0f:09:c2:10:8d:a6:a8:67:ad:4c:ee:66:aa:a2:
                    09:a7:2a:d2:ae:8f:52:4a:51:37:be:b0:1f:6b:40:
                    e8:31:ab:e6:96:e8:16:7e:26:d3:61:ca:66:06:42:
                    7a:05:21:e7:f4:fd:e9:c5:52:a5:a9:5a:c5:a4:60:
                    23:ee:67:84:51:e1:3e:9c:a2:57:da:83:f3:7f:c5:
                    a8:1d:cf:36:9f:ea:fe:76:76:a3:8b:c1:19:c4:19:
                    ae:2e:ea:c2:71:56:36:b0:cb:50:9e:27:a1:de:71:
                    b5:97:c1:4d:db:35:6e:20:5d:02:f2:4c:4c:61:a4:
                    ed:81:5f:e2:03:54:96:7b:79:bb:ab:da:81:ab:e3:
                    0d:83:1d:8f:1e:bc:2f:7b:bc:8a:fe:68:cf:a9:d4:
                    5e:22:2f:c1:26:c9:fe:9a:a5:6a:5d:4d:2b:19:40:
                    d7:20:4c:d8:70:b3:6d:2f:76:c1:8a:cd:f8:c8:13:
                    4e:1a:d5:30:4d:e0:ba:6d:e3:de:6e:0f:90:d9:50:
                    c2:11:f7:89:3d:48:16:06:ee:9f:a3:2c:de:76:de:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:F9:EE:18:00:A8:70:79:86:89:3B:83:B5:35:B9:5E:92:01:16
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:d8:61:ea:e3:54:dd:d9:d0:b0:67:ff:0b:73:6e:6e:0f:
         9e:2b:e3:7e:35:0e:e2:f5:3d:35:69:d8:6e:ee:90:51:a3:f2:
         4f:ac:0f:7b:83:12:33:ab:2d:a6:05:ea:0c:77:f8:b0:85:ed:
         df:96:b4:27:91:c7:3c:71:ea:c2:17:12:21:a9:c4:0b:ed:4b:
         59:28:7e:44:ef:00:da:f4:ce:b7:24:34:72:08:ca:ea:ac:b7:
         94:aa:ed:4e:bf:04:2b:92:ab:ae:6c:61:aa:47:df:8e:a7:5f:
         66:75:6b:f2:00:33:8c:44:df:7c:f1:5a:71:14:1e:7a:82:40:
         a2:58:15:cc:20:8e:d9:90:67:10:1a:5e:7e:59:ad:cc:a8:42:
         54:0a:ad:a6:78:cf:ed:e2:3d:04:4a:99:9e:20:37:be:e4:4f:
         6a:43:b4:f3:ea:4c:d1:69:df:c4:09:77:77:a0:f8:c3:af:ef:
         85:f2:cd:64:ff:cc:7b:3a:65:68:ca:1a:31:d9:71:40:02:f4:
         8e:42:c3:a1:d8:61:3d:31:c1:de:66:ce:10:ca:18:06:8e:63:
         c2:1e:24:03:0c:e8:86:27:7b:9a:75:0a:43:ef:27:cd:ea:78:
         f7:ed:db:b9:40:0f:6a:15:aa:94:c3:d9:8f:21:23:6d:21:c7:
         f7:f5:80:a9
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUOO7MaaDSOPhIaHNT4TX4l0w+gnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNjU1MDZaFw0yMzA5MjUwNzAwMDZaMDMxMTAvBgNV
BAMTKDI0RDdGOUVFMTgwMEE4NzA3OTg2ODkzQjgzQjUzNUI5NUU5MjAxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVa37Cc8NNVoLOHBlnv0scIuh
67XfzVqen14pPGJrRr/cmh7IMg2oCBRXHDwPCcIQjaaoZ61M7maqogmnKtKuj1JK
UTe+sB9rQOgxq+aW6BZ+JtNhymYGQnoFIef0/enFUqWpWsWkYCPuZ4RR4T6colfa
g/N/xagdzzaf6v52dqOLwRnEGa4u6sJxVjawy1CeJ6HecbWXwU3bNW4gXQLyTExh
pO2BX+IDVJZ7ebur2oGr4w2DHY8evC97vIr+aM+p1F4iL8Emyf6apWpdTSsZQNcg
TNhws20vdsGKzfjIE04a1TBN4Lpt495uD5DZUMIR94k9SBYG7p+jLN523iPDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUJNf57hgAqHB5hok7g7U1uV6SARYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAABQw
DQYJKoZIhvcNAQELBQADggEBAAz62GHq41Td2dCwZ/8Lc25uD54r4341DuL1PTVp
2G7ukFGj8k+sD3uDEjOrLaYF6gx3+LCF7d+WtCeRxzxx6sIXEiGpxAvtS1kofkTv
ANr0zrckNHIIyuqst5Sq7U6/BCuSq65sYapH346nX2Z1a/IAM4xE33zxWnEUHnqC
QKJYFcwgjtmQZxAaXn5ZrcyoQlQKraZ4z+3iPQRKmZ4gN77kT2pDtPPqTNFp38QJ
d3eg+MOv74XyzWT/zHs6ZWjKGjHZcUAC9I5Cw6HYYT0xwd5mzhDKGAaOY8IeJAMM
6IYne5p1CkPvJ83qePft27lAD2oVqpTD2Y8hI20hx/f1gKk=
-----END CERTIFICATE-----