Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134623a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          DFsAzmFAdMD1TEYwv4P4F300orcWvMcdMO0bGhGZMWg=
Subject key identifier:   C0:A0:38:B0:3B:2E:CA:BF:02:98:9A:91:71:C8:39:8B:16:AB:9C:86
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       3404D4FA82EBF49A7C7497C238F5AEC0B5FC135D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134623a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:18 +0000
ROA not before:           Mon 26 Sep 2022 07:57:18 +0000
ROA not after:            Mon 25 Sep 2023 08:02:18 +0000
asID:                     59282
IP address blocks:        2400:d680:14b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:04:d4:fa:82:eb:f4:9a:7c:74:97:c2:38:f5:ae:c0:b5:fc:13:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:18 2022 GMT
            Not After : Sep 25 08:02:18 2023 GMT
        Subject: CN=C0A038B03B2ECABF02989A9171C8398B16AB9C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:8f:7a:2c:9f:cb:49:ee:7b:1f:44:fc:da:
                    8d:bd:ee:a2:f5:fc:ec:1d:6f:4f:41:25:9a:74:cc:
                    4a:c9:5c:3f:a9:cd:30:4e:75:74:f8:df:ed:56:76:
                    f0:d5:b6:40:09:2e:f6:a2:4c:18:07:6a:90:69:a8:
                    13:e3:a5:3c:45:4d:e0:cb:af:15:03:01:57:58:c8:
                    85:b4:b2:a7:08:d9:58:a1:62:5c:65:27:b7:d8:0f:
                    3f:54:a2:0e:30:ab:e0:60:54:87:6d:37:68:8f:41:
                    7e:a0:df:1e:b8:fa:6a:15:40:75:c8:f3:0b:a8:8d:
                    1c:91:9b:59:78:7c:d9:52:fb:ed:02:e2:92:bc:df:
                    f0:20:88:06:aa:0d:93:fc:b3:29:43:29:3d:8d:b1:
                    bf:1c:32:e4:1c:75:b8:ac:68:76:86:94:03:32:2d:
                    d4:16:12:52:d3:56:05:d0:a0:7d:3c:a2:0e:61:3c:
                    da:30:b4:83:c5:10:4f:75:c2:e5:c6:d0:fa:50:66:
                    9c:35:1b:d6:47:2c:c6:c1:8d:b8:4f:a2:cc:3b:ee:
                    19:21:8c:a6:ff:f9:30:02:23:7a:13:e8:17:cf:b5:
                    ac:71:98:b5:82:db:ef:33:38:4d:73:de:ee:f2:71:
                    dd:21:b9:b1:d8:d2:1a:7a:9d:11:ba:2a:a1:bc:38:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A0:38:B0:3B:2E:CA:BF:02:98:9A:91:71:C8:39:8B:16:AB:9C:86
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134623a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:14b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:d3:f1:0a:fc:c0:98:cb:5c:04:7b:76:62:79:fc:94:fa:f6:
         1f:5d:14:45:7a:95:32:d2:2e:d8:cb:b0:da:a4:e1:55:aa:62:
         f6:a8:3f:fd:c1:39:82:ce:92:0a:b3:1e:c6:9e:2d:92:2e:75:
         fd:a1:b7:6b:ae:6c:af:4c:c0:50:60:f8:43:14:46:d9:d4:2b:
         8f:eb:fb:9c:5e:23:58:24:a1:9e:37:d3:73:4f:b3:e8:7a:5c:
         99:99:8c:f2:a5:28:11:9c:ab:65:11:87:5c:a3:0d:a0:84:29:
         8b:49:da:2b:e2:9c:4f:db:8c:47:be:42:5a:31:5b:3b:0f:8c:
         b1:d0:04:d4:53:ef:ea:8f:b4:5f:ac:5f:50:ec:79:6f:31:47:
         bb:69:c1:5a:45:28:a6:31:dd:f7:c2:31:cd:e5:26:31:50:ed:
         6f:e1:12:58:36:3a:fe:b7:b2:52:ec:23:34:30:4e:e9:0e:6c:
         e3:05:3d:4d:64:ee:12:db:da:7f:36:ef:fb:37:9d:2a:96:aa:
         53:8f:ca:5e:7b:5b:48:88:81:42:27:32:9c:e5:55:bb:b5:a7:
         a9:31:ce:8e:22:d8:44:b1:e5:3e:38:d0:d6:c4:e5:d5:03:37:
         23:8f:30:ff:d6:79:2b:ed:c6:d6:79:dd:01:90:53:21:d0:57:
         aa:75:60:a0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNATU+oLr9Jp8dJfCOPWuwLX8E10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MThaFw0yMzA5MjUwODAyMThaMDMxMTAvBgNV
BAMTKEMwQTAzOEIwM0IyRUNBQkYwMjk4OUE5MTcxQzgzOThCMTZBQjlDODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdY96LJ/LSe57H0T82o297qL1
/Owdb09BJZp0zErJXD+pzTBOdXT43+1WdvDVtkAJLvaiTBgHapBpqBPjpTxFTeDL
rxUDAVdYyIW0sqcI2VihYlxlJ7fYDz9Uog4wq+BgVIdtN2iPQX6g3x64+moVQHXI
8wuojRyRm1l4fNlS++0C4pK83/AgiAaqDZP8sylDKT2Nsb8cMuQcdbisaHaGlAMy
LdQWElLTVgXQoH08og5hPNowtIPFEE91wuXG0PpQZpw1G9ZHLMbBjbhPosw77hkh
jKb/+TACI3oT6BfPtaxxmLWC2+8zOE1z3u7ycd0hubHY0hp6nRG6KqG8OG7/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUwKA4sDsuyr8CmJqRccg5ixarnIYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNDYyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
SzANBgkqhkiG9w0BAQsFAAOCAQEAmtPxCvzAmMtcBHt2Ynn8lPr2H10URXqVMtIu
2Muw2qThVapi9qg//cE5gs6SCrMexp4tki51/aG3a65sr0zAUGD4QxRG2dQrj+v7
nF4jWCShnjfTc0+z6HpcmZmM8qUoEZyrZRGHXKMNoIQpi0naK+KcT9uMR75CWjFb
Ow+MsdAE1FPv6o+0X6xfUOx5bzFHu2nBWkUopjHd98IxzeUmMVDtb+ESWDY6/rey
UuwjNDBO6Q5s4wU9TWTuEtvafzbv+zedKpaqU4/KXntbSIiBQicynOVVu7WnqTHO
jiLYRLHlPjjQ1sTl1QM3I48w/9Z5K+3G1nndAZBTIdBXqnVgoA==
-----END CERTIFICATE-----