Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3232303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a3232303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          vPiXrQFQEx1au17bv90PO7DqoV8G7eUso2B+MPpLEaA=
Subject key identifier:   72:E6:BF:A0:F5:AE:7A:DB:21:59:AD:78:2F:3D:B4:C7:E2:E7:2F:4E
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       3C107A6EB9F67F5EC01DAD372F700045C3B07151
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3232303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Mon 10 Oct 2022 21:22:16 +0000
ROA not before:           Mon 10 Oct 2022 21:17:16 +0000
ROA not after:            Mon 09 Oct 2023 21:22:16 +0000
asID:                     140423
IP address blocks:        2406:20c0:220::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:7a:6e:b9:f6:7f:5e:c0:1d:ad:37:2f:70:00:45:c3:b0:71:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 10 21:17:16 2022 GMT
            Not After : Oct  9 21:22:16 2023 GMT
        Subject: CN=72E6BFA0F5AE7ADB2159AD782F3DB4C7E2E72F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:2a:32:c4:02:aa:80:ff:a4:4a:56:e0:96:
                    8b:3c:4c:cd:58:6c:fb:2a:33:57:fa:40:78:e9:54:
                    e6:15:b0:92:3b:91:50:d5:2d:80:02:e8:3b:b9:d7:
                    aa:b2:b3:6f:69:28:5c:02:82:2a:c4:60:f8:06:fc:
                    81:ac:5b:d9:ec:d2:e0:24:2e:84:ed:f5:42:0c:64:
                    dc:2e:f5:67:c4:01:28:49:4e:03:6b:a2:fb:f6:96:
                    96:89:11:5e:3a:00:89:c0:a9:d5:55:4d:2e:ac:9d:
                    78:0c:51:e0:1c:20:68:46:aa:58:3e:f9:76:31:2f:
                    6a:7f:48:82:39:31:8d:9d:59:dd:f8:53:0f:4c:a7:
                    56:3c:23:5d:84:e7:56:82:83:39:7a:91:18:a7:48:
                    1d:27:52:c1:80:35:54:6b:11:e1:fa:3b:14:0b:51:
                    4b:78:8b:8e:12:b1:95:67:f1:99:17:a1:2b:6b:98:
                    51:a2:40:83:97:ee:3b:1e:09:90:d9:26:ef:11:b2:
                    ee:10:f7:c4:36:5e:0e:19:85:22:6f:ca:b0:80:21:
                    8a:c9:22:7b:5b:11:d0:67:01:4a:07:dc:b4:81:be:
                    bb:a4:0d:48:51:a9:e0:7c:98:ce:17:f9:11:40:c6:
                    4c:b8:88:5c:9c:1c:00:85:9c:2c:62:b7:93:e9:a8:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E6:BF:A0:F5:AE:7A:DB:21:59:AD:78:2F:3D:B4:C7:E2:E7:2F:4E
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3232303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:220::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:6e:e8:0c:8e:17:b8:bd:21:61:e6:eb:11:c3:14:5b:3c:
         b6:84:37:32:b4:0c:86:86:ad:b1:d4:4b:52:22:2e:f4:05:45:
         9e:22:4a:9e:01:a8:f0:2a:33:f3:a8:ea:cb:c1:af:e1:be:43:
         f1:d5:3f:9a:e8:14:c2:41:2c:f1:31:1a:41:4f:00:e2:ad:b9:
         e1:7b:25:82:67:a5:a5:84:fa:be:8c:21:1c:bf:11:70:5f:fb:
         cd:e3:60:da:12:99:ea:45:7a:56:11:9f:57:b4:45:03:2f:ec:
         1a:6c:f4:56:bf:9d:0f:21:13:3d:de:32:cc:85:51:d9:a2:80:
         b5:ce:c1:c1:4c:06:fa:77:5f:6f:b7:02:3b:d1:fe:54:96:60:
         50:52:4d:df:9e:67:28:78:0d:75:bc:48:f7:78:5d:f1:3b:f1:
         2f:b0:f2:87:71:5d:19:c7:2c:ee:fd:c5:0d:2a:17:07:ed:f2:
         b6:4a:3a:07:f5:ed:f0:85:8a:0e:d0:e9:35:3c:57:62:89:a8:
         28:4d:6e:5c:71:05:69:b9:88:43:ff:63:ab:da:0d:04:8a:7e:
         de:9b:4d:4f:8f:49:aa:5f:5d:70:8d:a4:9a:eb:c2:b3:b4:d4:
         e3:9f:0e:37:07:94:d7:4a:70:91:03:b6:62:69:e5:16:25:20:
         32:00:5f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----