Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a363030303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          EzKbImmgE3yYLS6TqaKcO9My0Q09E2Tlg9bRUr+xfmI=
Subject key identifier:   53:62:25:C9:73:55:D1:C9:E6:FC:70:96:97:17:28:BC:41:A3:5E:4C
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       3F107C5A3D76AD071AAF22AD563BA58AF2DD54D0
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:29:16 +0000
ROA not before:           Thu 08 Sep 2022 04:24:16 +0000
ROA not after:            Thu 07 Sep 2023 04:29:16 +0000
asID:                     140423
IP address blocks:        2406:20c0:6000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:7c:5a:3d:76:ad:07:1a:af:22:ad:56:3b:a5:8a:f2:dd:54:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:24:16 2022 GMT
            Not After : Sep  7 04:29:16 2023 GMT
        Subject: CN=536225C97355D1C9E6FC7096971728BC41A35E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:33:3e:34:94:55:fd:4b:13:72:60:80:5f:e8:
                    c5:fe:15:8d:60:1f:ef:21:98:dd:6a:03:33:3a:62:
                    ae:39:de:a4:34:0d:07:3f:ed:33:f3:0b:c8:b0:ee:
                    6b:df:6f:81:d6:4c:25:0d:d3:01:3e:c6:10:13:6b:
                    0a:b1:53:26:5e:fa:5c:77:35:fd:96:6e:fa:02:bc:
                    f8:16:15:35:26:dd:0f:ab:9b:bc:81:f6:e9:45:2c:
                    0e:9e:13:37:72:4a:88:37:61:83:dd:d4:38:a6:e9:
                    5c:e3:a4:7e:82:1c:d2:95:57:18:9e:4f:ad:df:78:
                    15:af:cf:0e:4f:28:18:44:54:22:87:c0:bf:84:22:
                    68:61:21:db:ba:27:00:f1:c5:f0:86:09:7f:ef:7d:
                    de:01:b8:1e:51:2e:01:78:0b:75:17:fe:d5:b4:72:
                    8a:f5:a3:dc:cf:6a:39:5e:48:74:31:a4:ee:bf:0a:
                    a5:1a:91:0c:b7:81:8a:7c:d4:43:08:a3:e8:b0:94:
                    74:5b:9a:34:54:42:d7:bc:05:70:02:db:6d:31:99:
                    e9:e6:82:8b:dc:02:7a:6e:b0:2e:cd:72:6b:78:4c:
                    5f:7a:dc:d9:65:dc:68:b4:4a:bf:83:a9:0c:1f:28:
                    fb:97:e4:89:79:f7:bd:58:3b:0f:b5:eb:a6:91:b1:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:62:25:C9:73:55:D1:C9:E6:FC:70:96:97:17:28:BC:41:A3:5E:4C
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:df:66:26:0d:50:ef:25:3c:8d:a8:a7:0a:9e:1e:01:44:
         dd:e1:de:07:5e:c7:5a:9c:10:2b:7d:cb:4f:5a:b2:52:55:2a:
         32:0d:01:4d:a3:84:4e:a9:5f:7b:9f:fd:ca:2d:63:15:cc:9d:
         29:b1:8e:c4:67:ef:94:de:cd:b3:83:ff:cb:fc:61:66:59:e8:
         d5:a4:a8:70:c1:81:11:2c:34:e0:85:a8:73:fd:d1:a8:3e:20:
         ac:fb:aa:78:db:99:00:c5:ad:2a:7b:6f:17:4a:1a:33:24:be:
         b3:60:a2:56:93:77:20:2b:2f:ea:4d:c2:66:09:c5:7b:77:22:
         e2:9f:61:ef:fc:e8:9d:75:69:ac:62:a7:73:fb:1f:6e:04:5e:
         53:14:01:d0:3d:b3:31:40:ab:e2:23:1d:a2:a1:4b:42:b9:3b:
         db:0f:8c:2d:d8:ab:fc:1d:a0:ec:0b:ea:3e:da:e1:00:36:9f:
         6e:68:56:e0:ea:6e:d7:00:b2:2f:60:62:72:88:8f:50:0b:5d:
         7b:b9:a7:aa:76:a6:5e:11:2a:3a:48:81:83:d1:1c:6a:d5:24:
         a3:89:a9:e5:7a:e8:a9:f0:2e:48:41:37:65:c3:44:6b:fc:d8:
         f3:99:a5:bb:e5:42:66:3c:24:55:fe:4c:b3:11:11:60:8a:7e:
         b2:89:b2:4e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPxB8Wj12rQcaryKtVjulivLdVNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yMjA5MDgwNDI0MTZaFw0yMzA5MDcwNDI5MTZaMDMxMTAvBgNV
BAMTKDUzNjIyNUM5NzM1NUQxQzlFNkZDNzA5Njk3MTcyOEJDNDFBMzVFNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMz40lFX9SxNyYIBf6MX+FY1g
H+8hmN1qAzM6Yq453qQ0DQc/7TPzC8iw7mvfb4HWTCUN0wE+xhATawqxUyZe+lx3
Nf2WbvoCvPgWFTUm3Q+rm7yB9ulFLA6eEzdySog3YYPd1Dim6VzjpH6CHNKVVxie
T63feBWvzw5PKBhEVCKHwL+EImhhIdu6JwDxxfCGCX/vfd4BuB5RLgF4C3UX/tW0
cor1o9zPajleSHQxpO6/CqUakQy3gYp81EMIo+iwlHRbmjRUQte8BXAC220xmenm
govcAnpusC7Ncmt4TF963Nll3Gi0Sr+DqQwfKPuX5Il5971YOw+166aRsed/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUU2IlyXNV0cnm/HCWlxcovEGjXkwwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzYzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BiDAYAAwDQYJKoZIhvcNAQELBQADggEBAD4132YmDVDvJTyNqKcKnh4BRN3h3gde
x1qcECt9y09aslJVKjINAU2jhE6pX3uf/cotYxXMnSmxjsRn75TezbOD/8v8YWZZ
6NWkqHDBgREsNOCFqHP90ag+IKz7qnjbmQDFrSp7bxdKGjMkvrNgolaTdyArL+pN
wmYJxXt3IuKfYe/86J11aaxip3P7H24EXlMUAdA9szFAq+IjHaKhS0K5O9sPjC3Y
q/wdoOwL6j7a4QA2n25oVuDqbtcAsi9gYnKIj1ALXXu5p6p2pl4RKjpIgYPRHGrV
JKOJqeV66KnwLkhBN2XDRGv82POZpbvlQmY8JFX+TLMREWCKfrKJsk4=
-----END CERTIFICATE-----