Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a3a2f33322d3438203d3e20313430333939.roa
File:                     323430343a326638303a3a2f33322d3438203d3e20313430333939.roa (raw, json)
Hash identifier:          eq4AtZNmLu9YbTo1Rzr0NyCI1JtpE6it8OO+vl5TF1c=
Subject key identifier:   E3:0F:C5:09:6C:6D:2E:23:42:98:EC:B6:F4:2E:12:C3:59:94:B0:00
Certificate issuer:       /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
Certificate serial:       57086D6A0485D8B30FE144CA12E2E7667D49DFF5
Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a3a2f33322d3438203d3e20313430333939.roa
Signing time:             Sun 28 Aug 2022 23:05:10 +0000
ROA not before:           Sun 28 Aug 2022 23:00:10 +0000
ROA not after:            Sun 27 Aug 2023 23:05:10 +0000
asID:                     140399
IP address blocks:        2404:2f80::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:08:6d:6a:04:85:d8:b3:0f:e1:44:ca:12:e2:e7:66:7d:49:df:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
        Validity
            Not Before: Aug 28 23:00:10 2022 GMT
            Not After : Aug 27 23:05:10 2023 GMT
        Subject: CN=E30FC5096C6D2E234298ECB6F42E12C35994B000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ba:e3:a1:6b:18:d0:01:dd:b9:25:38:7d:32:
                    a2:db:00:7f:19:25:20:e1:b1:88:fa:78:cf:d6:ac:
                    a6:74:09:10:bb:48:de:af:72:4f:f8:79:90:82:93:
                    68:2e:8a:c9:85:65:99:9a:46:c4:7a:bc:13:e4:bf:
                    f9:28:7a:a3:37:a0:75:8d:53:2f:db:bd:c1:a5:75:
                    ba:cb:00:a1:2b:17:30:fb:2d:07:ca:40:3c:37:85:
                    0e:7e:a5:fd:2a:41:fa:95:1b:82:cc:ac:b8:06:ea:
                    d2:e1:de:81:39:1b:fc:1e:57:9a:07:20:1b:32:82:
                    46:17:09:71:71:b2:9e:c5:09:9a:72:fc:2c:ce:f7:
                    84:6e:36:3d:5a:0a:3b:2e:56:a0:bc:fc:ba:9f:0b:
                    7f:42:3d:13:86:e4:09:43:2e:cb:48:d7:f5:12:54:
                    39:b5:b8:50:e4:d8:76:cd:f2:e5:6c:6b:1c:af:de:
                    19:4d:c4:86:0d:78:3a:ca:18:ba:3a:e9:c1:c4:df:
                    ad:e9:09:c2:8a:bb:08:3b:2b:66:db:c4:76:03:33:
                    46:d7:80:39:23:a0:ef:30:a5:7d:19:fd:b7:54:4b:
                    82:f8:b3:85:74:6e:97:a7:32:9c:44:8c:ec:a5:8f:
                    7f:9e:11:63:eb:3e:65:7f:d1:41:23:5e:9b:81:ba:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0F:C5:09:6C:6D:2E:23:42:98:EC:B6:F4:2E:12:C3:59:94:B0:00
            X509v3 Authority Key Identifier:
                keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a3a2f33322d3438203d3e20313430333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:9b:38:0b:6c:a9:73:f2:81:0b:89:2c:fe:08:b9:7f:9d:
         f3:7f:0c:ec:76:61:3f:ee:68:9f:f2:27:22:2f:3d:a4:1c:97:
         48:80:90:17:ac:14:01:90:17:c4:d9:f4:20:7e:d7:c8:94:8c:
         1c:2c:3c:0e:7e:e2:e5:b2:d6:27:9c:00:5e:0c:1e:cd:5d:b8:
         c3:f9:c5:4c:cc:6a:5b:9d:cc:28:21:a7:5c:1d:a3:26:e5:ab:
         9f:94:12:61:d4:b3:a2:18:cf:d4:c1:4c:63:dd:4c:17:89:f5:
         6c:78:01:81:d2:d5:5d:64:00:7f:fe:ff:aa:41:1f:1c:69:0b:
         98:36:47:2f:be:af:fd:62:58:7d:3a:47:8b:26:57:71:43:a6:
         69:24:c6:f1:48:9f:74:76:72:4d:8d:6e:1f:49:fe:1b:da:ab:
         46:96:ac:9b:06:2b:fe:75:6b:43:71:b9:40:d4:98:49:68:2c:
         9e:a7:b4:42:70:1c:9a:50:f5:73:48:83:9f:de:47:10:b8:d0:
         c4:54:d7:b8:68:32:80:73:88:d3:37:5e:01:3a:2b:63:38:f3:
         71:8c:2c:74:a1:3f:5c:e2:b5:58:cc:76:85:ce:03:49:78:75:
         5c:bb:96:3c:8b:c4:39:02:eb:c3:5a:88:dc:10:4f:bd:fc:72:
         1f:34:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----