Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          bacAQBBWTSMdJ2rSQIeDj0inx99r3mUABYFkH7nRs6M=
Subject key identifier:   CE:40:45:EE:60:7C:8A:1F:1D:2B:E2:6C:25:63:15:41:BC:0A:C4:4A
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       030FAFDF09AFB667846AC66AA982947B9DFED02F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:16 +0000
ROA not before:           Mon 26 Sep 2022 07:57:16 +0000
ROA not after:            Mon 25 Sep 2023 08:02:16 +0000
asID:                     59282
IP address blocks:        2400:d680::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0f:af:df:09:af:b6:67:84:6a:c6:6a:a9:82:94:7b:9d:fe:d0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:16 2022 GMT
            Not After : Sep 25 08:02:16 2023 GMT
        Subject: CN=CE4045EE607C8A1F1D2BE26C25631541BC0AC44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:9b:76:e3:ae:2a:b7:9c:71:3e:58:37:d0:
                    da:e2:75:db:ec:ac:ea:03:b2:3f:be:f7:17:c0:f9:
                    90:65:b2:0e:42:e8:69:5e:b9:6b:c2:bc:9f:2e:1a:
                    f3:3a:bb:56:1e:e5:7f:99:96:71:89:72:e1:82:9f:
                    41:ca:7c:be:e2:b0:7c:2b:49:46:18:95:19:3a:e3:
                    5e:dd:49:59:fb:1d:da:49:e8:c6:4e:0c:84:66:2e:
                    bb:ac:58:f5:fa:02:f7:fa:2c:fc:06:c9:b2:52:19:
                    8d:1e:05:73:83:1d:38:ba:bf:b2:d0:1e:c3:1b:44:
                    bc:30:ba:8a:b8:2e:fd:bf:34:1d:f7:57:4d:94:ec:
                    2d:59:73:d6:e6:ba:9a:70:b3:2b:eb:5a:fa:ed:0f:
                    35:dd:00:35:1c:7f:8e:ab:94:f5:7b:8e:b3:ec:a2:
                    a5:fa:fc:59:ab:d5:eb:18:f9:56:72:75:37:b2:01:
                    18:19:22:f6:b2:10:dd:7e:7e:d0:c1:d4:0a:8c:30:
                    86:67:74:b2:99:d0:05:a2:7c:fd:eb:ad:2a:ad:c3:
                    f1:01:9c:86:d7:99:9b:50:f7:c1:fa:5b:a4:65:cc:
                    df:31:2e:61:54:97:76:9a:2a:ee:cf:21:f7:ff:41:
                    19:df:c8:cc:32:c9:e9:f3:14:a9:92:aa:ca:13:2e:
                    1a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:40:45:EE:60:7C:8A:1F:1D:2B:E2:6C:25:63:15:41:BC:0A:C4:4A
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:8b:94:d6:f1:04:67:fb:08:f3:49:5f:6c:e6:63:df:4d:
         b4:8c:a7:b3:53:95:3b:43:66:5e:a1:29:25:49:11:66:aa:5c:
         a6:f2:88:91:7c:ca:ce:c4:88:5b:7a:34:41:5b:fb:34:f9:a1:
         a1:d9:54:df:59:91:f8:dd:2a:51:eb:2e:fb:27:15:6c:b2:2f:
         6c:32:2f:c4:fd:e9:15:a5:53:fe:a9:b6:ca:32:df:61:45:69:
         36:f7:21:03:9f:16:b4:ff:19:02:8a:7f:29:7c:21:38:f2:f8:
         09:0a:20:88:a2:93:08:d5:9c:04:df:37:e9:ac:65:32:14:d9:
         8d:5c:d0:59:e4:95:58:0b:b9:85:8c:a4:df:8a:75:fa:43:da:
         f3:02:b2:f8:6a:17:e7:a6:20:89:f4:d0:3f:ee:46:27:d1:44:
         77:0a:bb:09:ad:57:fd:58:35:44:c2:aa:d0:5c:55:6b:f0:02:
         de:6d:09:11:68:ad:68:d1:97:76:b0:a3:7e:e9:c7:3c:57:f1:
         30:ba:85:de:59:82:fa:35:55:c8:d9:7a:f0:d4:35:2e:73:22:
         17:f0:cb:69:d9:36:f4:bf:5e:88:7d:1d:16:95:42:61:b7:a6:
         45:a3:ef:82:cb:13:8d:09:86:0b:be:8f:4d:ee:d8:65:e8:a2:
         c8:ce:62:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----