Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33342d3334203d3e20313430343233.roa
File:                     323430363a323063303a383030303a3a2f33342d3334203d3e20313430343233.roa (raw, json)
Hash identifier:          fzb9U+4dEkr4ccaijbm7g7bYo0CO/5y3Fvk3UedqylI=
Subject key identifier:   11:53:08:90:48:AA:2D:0F:53:85:08:8C:A8:C9:56:90:85:53:16:52
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       49FBFB3213A68679A433351C1F453B5B15E3AC11
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33342d3334203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:27:18 +0000
ROA not before:           Thu 08 Sep 2022 04:22:18 +0000
ROA not after:            Thu 07 Sep 2023 04:27:18 +0000
asID:                     140423
IP address blocks:        2406:20c0:8000::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fb:fb:32:13:a6:86:79:a4:33:35:1c:1f:45:3b:5b:15:e3:ac:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:22:18 2022 GMT
            Not After : Sep  7 04:27:18 2023 GMT
        Subject: CN=1153089048AA2D0F5385088CA8C9569085531652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:78:b7:e7:76:44:ba:0e:d5:5d:7f:56:ad:
                    06:38:d5:d2:30:71:53:f3:78:28:3a:56:6a:63:18:
                    e9:26:f2:6a:0b:10:fe:b7:96:e2:9a:fe:e3:46:3a:
                    af:b8:b4:e1:59:dc:4a:13:5a:56:d4:35:d8:0b:c6:
                    1e:c9:a1:2a:8c:04:2e:7a:e9:19:dc:1a:5e:ba:4a:
                    91:43:83:5d:0a:30:71:58:e3:2a:f6:6d:31:88:6c:
                    ba:64:8c:c1:f3:ef:97:f4:a3:d4:0d:81:4e:be:11:
                    b0:8a:97:5b:f9:f4:f8:7a:6f:0d:81:85:65:13:8a:
                    7d:ff:d7:6b:15:ac:17:2a:29:8d:5c:29:68:42:be:
                    6c:2b:d4:84:07:86:1b:98:2a:8f:a9:23:67:5e:19:
                    31:c4:e4:ad:a0:56:4b:20:c0:ef:d4:78:1d:6e:68:
                    73:f6:5d:69:9a:5d:33:07:05:a3:ff:10:69:93:cd:
                    2e:a1:de:0f:d5:34:73:c4:b7:56:6c:90:b2:9e:e4:
                    55:ca:17:14:b7:12:3d:e6:f0:82:70:73:1c:60:4e:
                    19:b4:d6:dc:cf:63:0c:5c:cb:eb:3d:dc:2d:dc:d2:
                    5a:81:82:72:6e:37:c0:65:d6:41:91:7f:a1:88:70:
                    94:30:f8:85:c5:f0:90:bf:02:46:a2:1b:42:c7:94:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:53:08:90:48:AA:2D:0F:53:85:08:8C:A8:C9:56:90:85:53:16:52
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33342d3334203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:52:f5:ea:53:6b:f9:57:d5:56:19:74:14:f6:35:44:9f:94:
         84:74:8f:ca:83:74:4c:a3:6f:66:14:f8:35:72:53:dc:4a:68:
         59:4e:07:24:73:d7:4d:75:5c:18:2b:b6:b6:e7:e3:e1:c3:f8:
         f6:11:24:a2:80:2b:7f:23:ec:a3:10:e5:54:dc:c1:1c:c1:71:
         52:2f:70:31:2c:97:ac:36:48:1b:fb:a6:e4:ab:4c:67:74:36:
         4b:03:ce:0e:98:ea:2e:ff:8d:1a:b6:11:74:15:76:ff:6b:7b:
         a1:e3:3e:82:80:91:00:8c:70:73:37:bd:62:1b:1e:0e:76:af:
         78:43:55:2e:06:55:9b:38:15:3e:1d:6a:a6:a1:14:a5:b9:23:
         f0:ec:e1:1a:c6:fc:f8:71:0a:c4:9a:d5:c6:9e:fc:49:f9:f6:
         17:52:6b:ef:e4:5a:d1:ae:5f:7a:e4:fb:34:15:9f:07:55:3a:
         de:a3:00:03:d8:f6:83:69:bd:c6:1a:3b:d4:c6:ef:45:5f:c9:
         d2:dd:65:45:f5:b2:63:8f:95:f1:93:11:21:5f:d2:18:62:ac:
         4a:55:c6:11:11:69:d4:8f:43:c3:b5:95:3a:26:41:b0:4a:5b:
         c9:11:01:32:87:f4:62:37:bd:3c:80:dd:0a:26:54:77:07:46:
         a4:f4:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----