Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33332d3333203d3e20313430343233.roa
File:                     323430363a323063303a383030303a3a2f33332d3333203d3e20313430343233.roa (raw, json)
Hash identifier:          GHt8bmMJ6if3aikRSUUyOqDTna9AdPFfagQF7AAK8M4=
Subject key identifier:   C5:A1:29:84:3B:67:81:0F:79:3C:67:B3:52:11:81:01:98:15:66:A5
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       5358F1B007DF5A8E2F22514FBD4C67B63600C0EB
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33332d3333203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:26:53 +0000
ROA not before:           Thu 08 Sep 2022 04:21:53 +0000
ROA not after:            Thu 07 Sep 2023 04:26:53 +0000
asID:                     140423
IP address blocks:        2406:20c0:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:58:f1:b0:07:df:5a:8e:2f:22:51:4f:bd:4c:67:b6:36:00:c0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:21:53 2022 GMT
            Not After : Sep  7 04:26:53 2023 GMT
        Subject: CN=C5A129843B67810F793C67B352118101981566A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:70:92:c6:ec:14:6e:53:c3:39:fa:35:88:
                    1b:6a:b1:78:cc:10:1a:23:27:52:6f:34:67:d2:06:
                    16:42:b2:21:db:1d:ef:33:7e:3f:8d:0d:e0:78:95:
                    52:42:a0:58:0f:7d:26:21:01:56:63:72:b1:4f:3e:
                    9b:ea:c7:15:ba:06:e5:0d:59:14:ec:94:49:9e:44:
                    68:f2:9a:28:80:fb:83:94:87:91:86:6b:ee:91:5f:
                    64:95:46:ba:ea:1f:9f:06:f4:17:03:ba:de:a3:88:
                    4a:7a:4f:d5:8b:3a:c1:b4:05:21:04:4a:0e:ec:80:
                    5f:dd:d6:90:ff:66:c9:9b:79:60:85:81:69:67:c4:
                    57:fb:a6:97:d8:b1:c5:94:49:a8:0d:04:e0:1f:6d:
                    fc:d8:0b:fb:21:d5:ba:10:46:4a:53:a6:92:f3:84:
                    f8:20:84:f6:00:45:43:08:8e:bb:68:86:42:05:5f:
                    12:14:43:4a:48:fb:ef:b0:78:5a:3d:ac:7f:fe:e1:
                    8e:b5:98:9d:32:6f:be:df:c1:30:9a:ee:b4:a9:d7:
                    77:61:43:da:5f:4d:0e:10:0f:0e:d1:5b:99:08:fc:
                    90:43:f4:cb:30:05:e4:8b:4f:e9:62:05:75:90:46:
                    df:8b:a8:f8:f1:c4:6a:c5:b6:b8:94:2f:f5:72:96:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A1:29:84:3B:67:81:0F:79:3C:67:B3:52:11:81:01:98:15:66:A5
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33332d3333203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c8:30:e5:88:38:8b:17:51:b9:17:ea:f2:d5:8e:8f:7f:60:08:
         31:e4:7f:7f:31:b6:a6:43:83:31:a5:e9:61:3e:ed:86:4e:4a:
         b5:6c:0e:16:1f:dc:aa:37:e9:09:26:d3:f3:08:8f:3d:80:9b:
         ec:f7:dc:94:f6:ae:ba:e2:45:e2:8b:32:6a:fc:05:31:6d:f0:
         e7:c2:03:29:15:cc:56:5c:32:84:e7:08:79:99:67:da:9f:21:
         cd:ae:77:b4:58:02:00:d5:53:d7:67:b0:3f:31:20:ab:03:06:
         d7:14:65:09:2b:3a:48:bf:b6:02:04:e0:a3:ab:d1:ab:c1:6a:
         04:51:db:80:d6:e8:7b:1b:3e:3b:43:f3:b2:dc:71:9b:51:e7:
         49:32:e5:28:b8:c7:16:66:d9:d4:dd:5b:e4:ee:6a:1a:b7:54:
         3b:5a:02:86:0a:81:a5:58:99:b5:06:bb:cb:44:31:48:85:18:
         21:52:eb:58:02:a4:15:a9:b5:7c:c1:90:0e:d2:83:39:77:14:
         88:bb:c4:a0:99:c7:30:79:57:e8:94:f6:57:95:2d:be:73:c8:
         42:e3:a9:a9:cc:58:4d:58:f2:e9:6e:ab:91:fb:4c:df:ae:e0:
         16:ef:2c:9a:4b:af:de:20:77:0c:a0:98:ee:de:e4:34:c8:66:
         74:26:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----