Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3232313a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a3232313a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          aWJVUQV0WSn8ripLjin4f7HueQEOORfBJV5xI3429N0=
Subject key identifier:   C8:96:4F:7C:DD:5C:05:81:81:DE:1C:9B:28:9D:4B:D9:76:A4:7E:F7
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       0DF9C89309D20B86E9A850C8AC667A6FE4E657AD
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3232313a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Mon 10 Oct 2022 21:22:25 +0000
ROA not before:           Mon 10 Oct 2022 21:17:25 +0000
ROA not after:            Mon 09 Oct 2023 21:22:25 +0000
asID:                     140423
IP address blocks:        2406:20c0:221::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f9:c8:93:09:d2:0b:86:e9:a8:50:c8:ac:66:7a:6f:e4:e6:57:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 10 21:17:25 2022 GMT
            Not After : Oct  9 21:22:25 2023 GMT
        Subject: CN=C8964F7CDD5C058181DE1C9B289D4BD976A47EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:47:73:41:16:11:9b:c0:9f:22:58:65:49:e7:
                    b4:38:22:71:e3:8a:89:80:80:69:c7:99:f8:d2:a3:
                    72:49:8d:a0:15:1d:95:61:a7:d1:5a:e3:33:06:6b:
                    ea:cf:35:b1:4a:b2:0e:d9:97:9d:ba:17:ad:c7:c2:
                    d9:dc:90:e8:32:44:47:17:f7:11:98:b0:fc:01:6c:
                    5e:52:aa:72:ee:b4:87:6b:58:43:70:a7:ef:65:a9:
                    d9:e1:20:c3:c9:10:0b:b3:97:83:16:5b:ea:5c:c5:
                    c1:e3:be:81:6b:ba:d8:ce:01:eb:70:d0:dc:99:9f:
                    e4:a3:be:b4:11:eb:59:2d:6e:3c:e2:3f:cd:d9:f6:
                    a6:e3:74:be:59:10:32:d5:04:dc:46:93:c0:1d:06:
                    9d:2e:e6:3b:5c:2d:5a:50:e3:2d:52:3e:77:34:bd:
                    2f:18:84:f5:3d:0b:72:40:d9:32:f7:72:d7:6c:ea:
                    8a:5b:f3:47:73:72:5e:b6:d2:6c:8a:5f:ef:6b:9c:
                    6b:90:35:b0:64:b7:ba:59:6a:61:05:59:2e:f9:66:
                    a6:f3:1e:c2:b5:b4:26:2b:07:60:7d:49:e4:c6:90:
                    ac:1a:86:2c:f3:8a:07:cc:76:1f:26:91:4b:3e:ee:
                    a1:4a:80:84:3e:3e:37:03:04:68:68:17:e5:34:fc:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:96:4F:7C:DD:5C:05:81:81:DE:1C:9B:28:9D:4B:D9:76:A4:7E:F7
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3232313a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:221::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:50:2d:23:cc:a5:94:88:f2:ca:cf:64:d8:dd:25:49:33:
         71:ad:d9:73:16:24:29:89:0c:93:a5:7b:aa:4f:af:a6:c1:d3:
         78:25:21:87:bc:66:a1:b3:46:f6:ec:9e:14:de:e8:14:98:27:
         16:98:32:35:89:fe:f0:8a:18:32:86:9c:78:45:dd:df:e8:8e:
         b4:c0:49:1c:7e:17:07:1f:3a:2d:87:86:00:e2:74:47:26:34:
         de:d9:17:36:26:80:20:d6:2f:e1:c9:78:d2:cc:94:92:20:f7:
         90:e6:d5:18:67:0c:b1:45:7b:fc:27:13:58:f9:33:1a:07:e9:
         7b:0b:eb:01:85:73:19:b8:a6:ea:33:d2:f1:2f:3c:0d:ba:a7:
         cf:df:81:8d:ba:04:de:9e:a9:32:dd:f8:6e:44:bd:c1:6b:79:
         ad:46:76:6a:39:2a:50:3d:5d:66:e9:bf:5e:22:39:53:ef:03:
         af:ca:50:19:72:17:db:eb:29:5a:9b:ca:62:2e:c3:20:42:6d:
         70:82:03:df:ac:bf:e4:e8:f3:58:62:98:b9:0c:4c:0e:b6:cd:
         2f:fa:57:4a:69:95:06:8e:23:1c:0b:71:68:1b:9f:5d:3d:60:
         53:a4:0b:a3:0c:8d:ff:34:7e:ac:9d:38:5d:d3:a7:d9:85:a8:
         7b:d9:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----