Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33352d3335203d3e20313430343233.roa
File:                     323430363a323063303a383030303a3a2f33352d3335203d3e20313430343233.roa (raw, json)
Hash identifier:          klmk7chr3EEFj5LapENA/qw+GfpkaOXm1AhIcXeWC80=
Subject key identifier:   85:61:91:FC:04:F3:35:4E:CC:AD:52:CF:48:E5:28:93:E0:1C:B6:A6
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       33466A0D0315CB6AA853E92F238B3B720D737098
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33352d3335203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:28:12 +0000
ROA not before:           Thu 08 Sep 2022 04:23:12 +0000
ROA not after:            Thu 07 Sep 2023 04:28:12 +0000
asID:                     140423
IP address blocks:        2406:20c0:8000::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:6a:0d:03:15:cb:6a:a8:53:e9:2f:23:8b:3b:72:0d:73:70:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:23:12 2022 GMT
            Not After : Sep  7 04:28:12 2023 GMT
        Subject: CN=856191FC04F3354ECCAD52CF48E52893E01CB6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:08:a7:e3:c0:97:3e:d1:a2:fe:bf:7c:d9:
                    53:0c:63:16:1a:4d:c7:d4:08:30:da:48:78:30:a4:
                    ca:ee:20:6b:48:d1:35:a5:89:e2:9c:ff:1f:b3:aa:
                    4d:a8:fc:11:07:1d:84:58:a0:d3:af:ba:59:0f:14:
                    8a:3d:32:c4:1b:8d:8e:d5:cf:e2:e8:7d:fd:6a:97:
                    a3:81:1f:f8:07:5b:07:09:57:65:7f:5c:30:6f:dd:
                    29:c6:f0:2a:9f:3b:e0:d4:b2:41:ae:c7:79:29:80:
                    ad:51:12:08:8e:de:34:ab:f1:71:3f:4a:7f:7c:0d:
                    04:94:52:33:a5:f7:79:1a:d5:0c:a1:2f:13:1d:e8:
                    73:72:ed:2e:fc:4f:8b:72:6a:de:68:09:3a:e7:b7:
                    51:57:9d:70:c0:50:46:9c:af:21:3b:4a:44:2e:35:
                    5e:38:76:80:8b:f2:e5:19:8d:c4:a4:a4:fe:29:71:
                    a3:2c:9a:3a:43:1a:3f:c4:1a:46:9c:0f:17:52:08:
                    70:ab:54:f4:be:7d:c4:2f:e7:1a:90:99:69:af:96:
                    1d:b1:3a:ae:63:63:cd:6f:df:29:ed:1e:9b:76:34:
                    e0:37:53:e6:34:6a:22:53:11:06:98:6c:46:99:af:
                    9b:13:14:ce:d9:a3:51:e3:ec:88:99:3c:eb:5e:41:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:61:91:FC:04:F3:35:4E:CC:AD:52:CF:48:E5:28:93:E0:1C:B6:A6
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33352d3335203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:55:64:e4:56:e8:9e:4b:62:16:99:61:cc:7a:ff:fb:85:
         a2:dd:5a:52:77:97:0e:00:cb:a4:90:9c:8d:0c:58:17:46:c9:
         3d:56:33:ee:2c:bb:dc:44:80:2a:c4:74:9a:38:4c:6c:d8:fe:
         df:2c:38:6c:67:b0:49:ea:5f:7d:ba:89:0e:85:f5:c8:01:5f:
         c4:72:cd:90:ab:72:fb:29:ed:2c:10:3c:f2:12:ac:47:01:2f:
         fa:42:c8:2c:3b:f0:7a:c7:58:fa:69:90:98:dd:04:1f:67:ce:
         1a:af:43:7a:2f:2e:cc:1d:0a:f4:fd:8e:56:aa:3b:ae:fc:97:
         4e:73:c4:4b:0f:ca:80:52:a3:5e:16:ac:ad:ad:31:07:ab:09:
         17:1c:0b:69:a1:06:58:5e:4a:65:ea:d4:4f:c4:36:f7:2c:08:
         8c:b8:d0:1f:90:0d:92:c4:00:cb:8b:57:fc:9f:5d:69:31:cc:
         9d:d4:5e:39:a6:29:2c:22:1d:43:4e:ff:6c:75:df:33:0f:ee:
         d7:e0:6e:fe:34:2b:e3:21:25:44:67:e0:fa:9e:d5:49:2e:d4:
         84:2c:03:fa:ce:ab:8c:f7:97:08:2e:57:8c:73:4e:af:5c:49:
         34:45:35:e5:e7:8d:ee:e6:00:85:2b:14:e1:0c:0d:42:00:79:
         c5:59:9c:7b
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUM0ZqDQMVy2qoU+kvI4s7cg1zcJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yMjA5MDgwNDIzMTJaFw0yMzA5MDcwNDI4MTJaMDMxMTAvBgNV
BAMTKDg1NjE5MUZDMDRGMzM1NEVDQ0FENTJDRjQ4RTUyODkzRTAxQ0I2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rQin48CXPtGi/r982VMMYxYa
TcfUCDDaSHgwpMruIGtI0TWlieKc/x+zqk2o/BEHHYRYoNOvulkPFIo9MsQbjY7V
z+Loff1ql6OBH/gHWwcJV2V/XDBv3SnG8CqfO+DUskGux3kpgK1REgiO3jSr8XE/
Sn98DQSUUjOl93ka1QyhLxMd6HNy7S78T4tyat5oCTrnt1FXnXDAUEacryE7SkQu
NV44doCL8uUZjcSkpP4pcaMsmjpDGj/EGkacDxdSCHCrVPS+fcQv5xqQmWmvlh2x
Oq5jY81v3yntHpt2NOA3U+Y0aiJTEQaYbEaZr5sTFM7Zo1Hj7IiZPOteQQ5BAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUhWGR/ATzNU7MrVLPSOUok+ActqYwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzgzMDMwMzAz
YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk
BiDAgDANBgkqhkiG9w0BAQsFAAOCAQEAm8BVZORW6J5LYhaZYcx6//uFot1aUneX
DgDLpJCcjQxYF0bJPVYz7iy73ESAKsR0mjhMbNj+3yw4bGewSepffbqJDoX1yAFf
xHLNkKty+yntLBA88hKsRwEv+kLILDvwesdY+mmQmN0EH2fOGq9Dei8uzB0K9P2O
Vqo7rvyXTnPESw/KgFKjXhasra0xB6sJFxwLaaEGWF5KZerUT8Q29ywIjLjQH5AN
ksQAy4tX/J9daTHMndReOaYpLCIdQ07/bHXfMw/u1+Bu/jQr4yElRGfg+p7VSS7U
hCwD+s6rjPeXCC5XjHNOr1xJNEU15eeN7uYAhSsU4QwNQgB5xVmcew==
-----END CERTIFICATE-----