Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a383030303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          9bRNV8wU4KYaGHtVQ8TH0HG5O0PRZ7kWBTbEr0bwu9Q=
Subject key identifier:   76:73:BD:38:D6:0D:DC:22:99:EA:25:58:E6:BE:36:E3:40:5B:6D:55
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       1D1FE20943A7E37A9D6F09806C11C0F53F321940
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Mon 10 Oct 2022 21:22:45 +0000
ROA not before:           Mon 10 Oct 2022 21:17:45 +0000
ROA not after:            Mon 09 Oct 2023 21:22:45 +0000
asID:                     140423
IP address blocks:        2406:20c0:8000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1f:e2:09:43:a7:e3:7a:9d:6f:09:80:6c:11:c0:f5:3f:32:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 10 21:17:45 2022 GMT
            Not After : Oct  9 21:22:45 2023 GMT
        Subject: CN=7673BD38D60DDC2299EA2558E6BE36E3405B6D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:e9:13:17:46:d7:30:aa:a8:44:af:23:58:
                    54:32:ad:6d:3d:30:5f:4b:a9:e5:9a:30:c8:c9:0a:
                    60:e5:52:41:29:07:84:fc:55:93:a9:3b:e4:b2:be:
                    b8:fe:26:bc:f5:a8:d9:25:90:34:bf:53:6e:bc:25:
                    2f:86:07:46:3f:4e:5a:ae:db:9c:01:03:60:6d:60:
                    71:91:46:f6:30:70:16:17:2c:8f:5b:91:68:72:87:
                    0c:11:f3:4f:c8:69:8c:cc:6d:42:bd:9a:66:4d:da:
                    76:46:69:7b:30:f0:78:2d:32:fb:4e:cd:22:0d:33:
                    aa:d0:03:f6:06:59:62:bc:89:9a:64:1e:0a:02:53:
                    69:2d:8f:96:9c:5b:f9:8c:4f:37:ab:68:73:86:e2:
                    b5:fb:1f:c9:a4:d2:67:be:8a:83:8b:64:8f:03:c7:
                    f5:3f:81:55:56:bf:62:4d:a1:15:4f:d3:83:58:ca:
                    75:00:f8:b8:df:3b:d6:f1:a0:f9:9c:8e:91:2c:d5:
                    6f:39:ae:8b:0a:ce:82:fd:4a:94:53:6e:09:7a:f2:
                    7b:4d:67:56:39:b6:19:40:33:6a:e6:2a:88:79:94:
                    d1:76:c9:45:dc:f5:6e:c2:80:4c:ae:2a:76:bf:33:
                    05:53:4e:b5:97:3a:3d:97:33:bc:0d:ae:91:01:67:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:73:BD:38:D6:0D:DC:22:99:EA:25:58:E6:BE:36:E3:40:5B:6D:55
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:f6:96:f5:ae:4a:a0:ce:1d:39:c3:b0:6a:b8:0a:83:2e:
         40:cd:b5:c6:50:06:8f:e5:94:2b:44:82:2d:fd:27:2f:2d:aa:
         f4:fa:c7:f1:38:2d:94:e1:d6:97:b4:74:a6:b1:a7:ea:38:f4:
         b7:9b:e8:53:15:7b:af:f2:c8:ac:b5:07:57:8d:f9:d6:0a:3a:
         38:3d:bd:c2:05:b7:29:72:09:e0:73:6e:41:ef:4b:23:18:fe:
         37:5b:cd:10:cc:66:7b:19:0a:a8:a4:cc:de:be:1d:ba:9e:1b:
         73:02:f2:4a:d5:a5:63:07:b5:31:79:9c:ff:13:b4:78:93:06:
         46:4b:f4:2d:5f:cb:84:ea:36:b1:37:e3:b5:a7:c3:ba:5b:14:
         c6:f5:8c:39:da:5f:9f:29:ff:be:d1:c4:de:d0:ab:88:90:3b:
         d4:0d:ef:aa:cf:32:2e:a8:b3:4d:7e:76:e7:38:11:18:9f:4d:
         ce:db:ce:84:8e:ce:44:23:58:4e:96:ca:5f:4c:28:40:97:b6:
         e4:83:1e:c3:29:e7:68:d4:4a:75:09:64:d8:e6:3c:72:5e:f2:
         7b:ad:86:72:98:d5:3f:86:da:ec:f4:92:31:cc:6e:64:b4:1c:
         58:3c:96:a4:e6:f1:1a:3a:37:fb:b6:33:25:b8:1c:02:df:30:
         97:87:d3:ca
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHR/iCUOn43qdbwmAbBHA9T8yGUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yMjEwMTAyMTE3NDVaFw0yMzEwMDkyMTIyNDVaMDMxMTAvBgNV
BAMTKDc2NzNCRDM4RDYwRERDMjI5OUVBMjU1OEU2QkUzNkUzNDA1QjZENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlukTF0bXMKqoRK8jWFQyrW09
MF9LqeWaMMjJCmDlUkEpB4T8VZOpO+Syvrj+Jrz1qNklkDS/U268JS+GB0Y/Tlqu
25wBA2BtYHGRRvYwcBYXLI9bkWhyhwwR80/IaYzMbUK9mmZN2nZGaXsw8HgtMvtO
zSINM6rQA/YGWWK8iZpkHgoCU2ktj5acW/mMTzeraHOG4rX7H8mk0me+ioOLZI8D
x/U/gVVWv2JNoRVP04NYynUA+LjfO9bxoPmcjpEs1W85rosKzoL9SpRTbgl68ntN
Z1Y5thlAM2rmKoh5lNF2yUXc9W7CgEyuKna/MwVTTrWXOj2XM7wNrpEBZ/BlAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUdnO9ONYN3CKZ6iVY5r4240BbbVUwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzgzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BiDAgAAwDQYJKoZIhvcNAQELBQADggEBADl89pb1rkqgzh05w7BquAqDLkDNtcZQ
Bo/llCtEgi39Jy8tqvT6x/E4LZTh1pe0dKaxp+o49Leb6FMVe6/yyKy1B1eN+dYK
Ojg9vcIFtylyCeBzbkHvSyMY/jdbzRDMZnsZCqikzN6+HbqeG3MC8krVpWMHtTF5
nP8TtHiTBkZL9C1fy4TqNrE347Wnw7pbFMb1jDnaX58p/77RxN7Qq4iQO9QN76rP
Mi6os01+duc4ERifTc7bzoSOzkQjWE6Wyl9MKECXtuSDHsMp52jUSnUJZNjmPHJe
8nuthnKY1T+G2uz0kjHMbmS0HFg8lqTm8Ro6N/u2MyW4HALfMJeH08o=
-----END CERTIFICATE-----