Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3335203d3e20313430343233.roa
File:                     323430363a323063303a323030303a3a2f33352d3335203d3e20313430343233.roa (raw, json)
Hash identifier:          /eXOFwqtW92/vpZHdphzj1U/1+dhU7TRwGjEfz8sTxQ=
Subject key identifier:   6B:C0:79:E4:D3:1A:33:0A:15:5B:7C:EA:21:A0:30:A5:A1:12:33:5F
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       3ECB3B4B8F07CB0403E1F96DCAA434D75CEF5C6A
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3335203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:27:47 +0000
ROA not before:           Thu 08 Sep 2022 04:22:47 +0000
ROA not after:            Thu 07 Sep 2023 04:27:47 +0000
asID:                     140423
IP address blocks:        2406:20c0:2000::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cb:3b:4b:8f:07:cb:04:03:e1:f9:6d:ca:a4:34:d7:5c:ef:5c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:22:47 2022 GMT
            Not After : Sep  7 04:27:47 2023 GMT
        Subject: CN=6BC079E4D31A330A155B7CEA21A030A5A112335F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:b6:7a:38:30:af:e0:c2:d3:07:85:92:31:
                    bb:8b:73:74:88:f0:18:c0:e7:3b:ac:d9:b7:ee:4f:
                    da:6a:4b:8b:f6:a0:fe:99:d5:46:a5:74:af:e3:10:
                    ed:ad:b9:ec:41:a8:70:a1:ab:3c:df:e2:67:99:62:
                    34:6b:e6:e4:14:bc:fe:2a:5d:63:16:1d:15:91:24:
                    0d:b3:7c:07:17:2f:3a:9d:8a:b2:75:60:49:91:30:
                    ce:74:f3:da:79:09:c0:37:d0:be:eb:a8:21:b5:33:
                    c7:d3:a8:0b:44:96:99:b4:00:07:83:96:3e:80:0f:
                    06:31:ff:4f:22:f1:d6:4f:2e:ed:87:f2:2b:a5:33:
                    5c:86:ef:0b:53:19:ff:47:6e:cb:78:c2:c9:92:9f:
                    56:81:d2:98:60:94:1a:63:f9:48:8d:00:33:e4:fe:
                    61:dd:c1:c6:4f:57:f7:6d:d8:29:9a:87:b9:9a:f0:
                    4d:59:5c:34:84:bc:9b:9b:53:55:81:ec:1a:07:f0:
                    ba:07:d5:39:5d:80:e4:08:82:b1:c9:b8:c4:92:a7:
                    46:ad:7b:07:06:84:1c:56:57:1a:a8:65:67:2e:55:
                    78:5d:e1:4b:37:d3:b3:8a:db:39:b9:14:93:fd:af:
                    70:8f:c2:24:aa:e6:3f:8c:c7:3f:5e:dd:e1:37:49:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C0:79:E4:D3:1A:33:0A:15:5B:7C:EA:21:A0:30:A5:A1:12:33:5F
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3335203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         05:87:36:de:22:95:bb:c4:af:23:e8:52:0f:a3:2f:03:99:5c:
         44:aa:bb:9d:1e:e9:a6:bf:19:6e:0f:be:9c:d1:fc:4f:c0:3b:
         19:ff:5c:de:ab:5e:fe:53:9a:ea:6d:d7:c3:b4:9f:89:26:93:
         a9:db:f6:28:f1:d4:6d:b8:d8:0c:90:0e:ef:33:61:4a:79:c9:
         c4:fd:61:ea:fc:a0:cf:3a:6b:78:dd:bc:66:fb:0e:92:f5:30:
         9d:fe:39:7b:fd:03:77:66:75:6a:59:cb:a2:94:f2:4f:f5:69:
         79:65:7d:70:2b:dd:8b:b1:48:57:c0:0a:b2:8b:bb:47:d2:07:
         f6:0d:f6:0b:93:5b:8d:ee:56:37:6b:ef:0a:82:8b:c8:60:ea:
         03:a1:ad:6f:1f:ba:a7:60:36:56:6f:50:25:9f:63:7d:6a:39:
         5e:32:68:cb:34:11:df:df:d2:87:34:19:05:f5:f8:b1:52:7e:
         af:7a:7b:4a:a1:29:19:29:2f:47:89:e7:e0:92:b9:0b:73:b2:
         9e:5b:21:a4:5d:9a:dc:cb:79:05:f9:8d:de:97:f3:08:2b:89:
         69:6f:85:f4:07:a5:40:f7:c6:d5:65:ab:00:4b:f2:cd:09:e7:
         c9:92:49:38:ca:f2:e6:41:f4:b3:21:37:de:e7:80:44:fa:9b:
         96:a5:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----