Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a313a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a313a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          biNb9rF1/heksbBwulOw/M8jeJ5zJhoWIrPj6CNw6L4=
Subject key identifier:   54:8E:CC:BB:C6:B9:89:6F:3B:0A:29:A4:85:28:AE:C6:FD:2B:41:5D
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       63B24DE894A3F7C03A5F5480C3419785ED119618
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a313a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Mon 10 Oct 2022 21:22:06 +0000
ROA not before:           Mon 10 Oct 2022 21:17:06 +0000
ROA not after:            Mon 09 Oct 2023 21:22:06 +0000
asID:                     140423
IP address blocks:        2406:20c0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:4d:e8:94:a3:f7:c0:3a:5f:54:80:c3:41:97:85:ed:11:96:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 10 21:17:06 2022 GMT
            Not After : Oct  9 21:22:06 2023 GMT
        Subject: CN=548ECCBBC6B9896F3B0A29A48528AEC6FD2B415D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:d3:05:f3:d4:6a:25:d5:97:e6:9c:cb:5c:
                    44:ef:62:fd:7a:bb:47:59:be:88:2e:67:19:0d:00:
                    a4:33:52:8e:b4:01:37:01:c3:cc:44:a2:e9:a0:6f:
                    bb:3f:e0:38:78:2a:14:9f:41:43:56:d7:91:b7:7d:
                    de:80:f8:96:05:83:62:63:d3:32:59:6e:97:c9:2a:
                    1b:fc:dd:e5:d2:02:ba:b2:95:46:36:eb:17:7a:39:
                    2a:6c:4b:13:53:ee:ca:3a:9d:7e:0c:37:50:bd:e4:
                    4f:f7:e3:01:ac:26:70:58:39:c5:1f:16:49:c1:e3:
                    88:58:1f:4f:56:81:c0:27:e1:a2:a6:0c:56:28:11:
                    8f:fa:87:8d:8b:cf:a3:1e:ec:60:01:61:45:25:72:
                    c7:ea:2c:58:46:11:9a:8b:54:b4:c2:85:cd:35:76:
                    e6:20:f4:64:74:37:6e:e7:2b:8e:44:a5:c8:b1:f4:
                    22:0f:f7:09:42:79:a9:94:d6:04:d4:68:f7:fb:8b:
                    30:72:96:13:ce:83:61:e9:1f:f8:3e:9f:67:47:2a:
                    bd:5b:db:b8:f5:bf:5b:0e:49:4d:78:db:58:8b:1b:
                    25:dd:d7:27:37:c1:49:b8:fc:b8:d6:e8:92:da:2f:
                    30:c5:42:c5:ec:d1:38:22:88:a3:9d:7c:d1:8c:69:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8E:CC:BB:C6:B9:89:6F:3B:0A:29:A4:85:28:AE:C6:FD:2B:41:5D
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a313a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:46:07:0e:78:12:89:af:a3:cb:ea:c1:ce:6f:42:f0:56:9c:
         1e:6f:dd:e5:fb:3a:40:04:cc:f0:0f:33:3a:48:55:26:62:13:
         7c:b5:aa:3a:72:08:68:d6:8b:c8:4d:a1:c7:f4:bd:60:0d:52:
         7b:d8:5b:bd:39:a1:35:3a:44:5e:d6:63:e8:5c:58:75:c3:ef:
         d3:50:aa:92:bf:7c:9e:b5:38:ba:d5:f4:dd:98:95:53:9e:c1:
         bc:91:c5:0e:e1:1f:09:11:c7:e8:99:d9:df:e7:e6:78:37:4a:
         18:75:96:5d:61:a7:39:bb:2c:a2:90:93:5c:cf:d3:2f:1a:85:
         46:e8:f3:fe:50:47:5f:49:d8:ec:66:ea:0b:3a:d8:16:a5:39:
         f1:c7:d1:a8:1e:9e:19:31:c4:bd:7b:f5:96:17:8e:47:b1:19:
         76:e9:90:c8:08:88:bb:e3:e9:7d:9c:77:77:25:99:88:e0:dd:
         9b:51:1b:7d:c8:04:1c:0e:c9:4c:28:2a:ba:d4:b6:2e:9c:76:
         d3:15:4d:16:d6:ea:9a:4d:38:59:33:ac:14:85:5c:a6:66:ba:
         d3:3c:15:44:fa:7c:db:d3:a4:32:b9:c5:35:e1:14:9e:63:fb:
         d3:99:9d:84:5c:58:0e:51:43:1d:65:c4:4d:4a:89:5d:3f:2a:
         18:a7:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----