Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa
File:                     323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          vGfmMhxX1aTriyYJtJZ2YbgM+CEhqitVnM16CdrEHwQ=
Subject key identifier:   11:D0:B4:B5:92:2F:43:17:25:2C:96:D2:14:2D:67:FA:9D:BB:6D:21
Certificate issuer:       /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002
Certificate serial:       774A27B919D901B5404AB6C841931D4FB6AF3DB3
Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Thu 27 Jun 2024 04:19:47 +0000
ROA not before:           Thu 27 Jun 2024 04:14:47 +0000
ROA not after:            Thu 26 Jun 2025 04:19:47 +0000
asID:                     140423
IP address blocks:        2001:df3:e5c0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Aug 2024 20:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4a:27:b9:19:d9:01:b5:40:4a:b6:c8:41:93:1d:4f:b6:af:3d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002
        Validity
            Not Before: Jun 27 04:14:47 2024 GMT
            Not After : Jun 26 04:19:47 2025 GMT
        Subject: CN=11D0B4B5922F4317252C96D2142D67FA9DBB6D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:88:f2:1f:ff:96:95:86:ba:a9:c7:11:41:
                    2b:4f:9c:d5:48:19:18:1d:f9:20:e2:55:da:97:86:
                    10:86:7b:3d:3e:db:44:e7:cf:7d:d0:2e:42:01:a6:
                    bc:5b:7c:90:e0:75:32:4c:d1:80:ea:b5:da:00:2c:
                    fb:f8:8a:f4:99:9e:17:a2:af:08:a4:d7:02:fb:26:
                    49:08:21:d0:40:59:be:cc:fc:d7:a2:ca:df:13:50:
                    26:a5:ec:a3:fd:f5:fc:11:04:28:68:e7:db:fe:84:
                    89:27:14:ee:77:c1:aa:2a:2a:47:78:ef:91:68:df:
                    a6:be:e3:05:ad:9e:d4:db:9b:ec:3b:30:43:ad:64:
                    86:29:44:fb:6a:d9:4c:eb:37:8c:8e:40:cc:f1:30:
                    70:37:23:9d:d9:b8:a2:bc:43:9d:0e:e0:49:d1:a9:
                    7b:1f:a4:1a:47:7d:f5:bb:57:dd:ee:22:2b:3b:71:
                    e7:a7:35:fb:85:41:ec:0d:36:de:8b:5b:64:ba:1c:
                    6a:e8:30:63:9c:b1:90:2a:3d:95:80:ae:54:12:c7:
                    4b:81:4a:5b:4a:ee:80:76:5c:a4:a4:58:11:bc:a5:
                    4f:5a:34:7a:9e:be:4b:98:fb:67:ad:0d:b4:a8:90:
                    ad:0a:e1:dd:81:a9:e8:08:ad:26:96:f6:db:b8:3a:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:B4:B5:92:2F:43:17:25:2C:96:D2:14:2D:67:FA:9D:BB:6D:21
            X509v3 Authority Key Identifier:
                keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:e5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:b2:8a:f4:1b:22:ab:91:b9:c4:07:b0:4b:0e:b6:ea:d2:13:
         c8:f4:81:ba:3d:20:c6:68:1d:04:03:f2:c5:14:d7:d5:14:5f:
         75:1d:44:61:88:4b:38:c3:b2:43:f2:91:51:ae:06:bb:fc:6f:
         fa:96:6a:01:30:da:17:d8:e8:80:14:73:6d:cd:d3:bc:82:01:
         56:1a:54:79:41:13:37:ed:ec:bd:c8:94:f4:b4:92:f5:72:9e:
         54:23:35:d6:32:78:7f:24:b1:dd:52:ce:a0:18:07:ba:91:bf:
         1b:41:5d:03:87:2e:6f:2e:62:4f:42:b6:9c:8a:02:c3:ce:db:
         ba:40:db:21:53:73:f7:22:e0:2b:99:26:ff:15:36:ba:3c:79:
         f2:0c:6e:03:f5:b1:75:7c:58:fe:59:ab:9b:b2:dd:8e:e8:41:
         33:66:b3:df:ba:9a:f9:f7:51:7e:0a:35:d9:aa:a8:26:c2:93:
         a0:4b:04:15:90:0c:a9:79:3f:d3:24:72:70:01:c6:28:80:e5:
         e5:38:e4:35:aa:68:d7:96:cd:d7:74:7f:8c:64:45:d7:64:ab:
         99:ba:97:2e:12:e1:ac:64:bb:11:bb:5f:36:1b:42:ee:d9:a9:
         bb:3a:f9:0a:f6:8a:69:bd:c0:b2:1b:95:b7:77:7c:a3:72:7f:
         86:27:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----