Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          4sppG32NpwktSTeL9qR9EvIlAxDG+KStr3OE6eXaLJY=
Subject key identifier:   A9:39:DA:57:F5:7A:D1:C8:93:6F:AC:39:BE:1C:B7:DF:D8:A8:5E:FF
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       13CC9AA72888F4CC090C4A3E8FC92EE1B6724872
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Mon 10 Oct 2022 21:23:23 +0000
ROA not before:           Mon 10 Oct 2022 21:18:23 +0000
ROA not after:            Mon 09 Oct 2023 21:23:23 +0000
asID:                     140423
IP address blocks:        2406:20c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cc:9a:a7:28:88:f4:cc:09:0c:4a:3e:8f:c9:2e:e1:b6:72:48:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 10 21:18:23 2022 GMT
            Not After : Oct  9 21:23:23 2023 GMT
        Subject: CN=A939DA57F57AD1C8936FAC39BE1CB7DFD8A85EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:06:7c:de:aa:7f:b3:71:e4:f7:97:7b:2c:
                    8a:08:d9:cf:4f:f0:ae:24:3b:77:20:64:a1:e7:ec:
                    7a:cf:ea:bb:99:3b:9e:da:b1:7d:e3:fa:71:1b:67:
                    d9:93:9f:29:5a:33:de:11:58:cb:f1:fc:ca:17:7e:
                    35:64:0d:4c:d0:e1:ca:a2:3b:7a:39:5d:32:4f:41:
                    a6:40:d2:88:2e:86:a4:df:e0:2a:28:f6:ab:37:5c:
                    a0:f4:5e:60:94:c0:4f:2f:5c:c8:79:ea:43:3d:0f:
                    91:e5:09:dd:9b:d5:ad:0c:17:b8:fb:3c:f1:69:ca:
                    e5:5d:6e:f2:34:e3:d0:9e:2b:d7:41:c8:1e:1b:4f:
                    b5:d7:ca:96:77:01:6e:65:b0:96:9b:b4:01:be:fc:
                    2e:58:2f:a0:5c:d9:40:02:cc:6e:9e:70:3e:00:35:
                    36:27:69:f7:b5:0d:29:75:1b:00:6d:12:81:df:f6:
                    42:c2:8f:1f:11:33:56:9b:17:38:8c:24:f6:d6:82:
                    60:64:58:04:9f:42:ba:b3:45:64:b1:01:1d:d0:b8:
                    cf:1f:7f:38:af:46:fc:4d:98:c0:ee:e2:39:6b:51:
                    94:53:f6:55:77:42:18:49:f6:41:ad:db:68:94:e8:
                    b9:9f:02:4b:34:cd:b6:a7:ce:e9:9b:ab:55:50:e6:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:DA:57:F5:7A:D1:C8:93:6F:AC:39:BE:1C:B7:DF:D8:A8:5E:FF
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:52:35:0a:31:94:e5:93:64:24:27:1a:08:da:40:e0:d9:83:
         47:76:f5:69:a0:da:ab:d9:6d:66:6b:e6:8c:c4:42:0c:ab:1e:
         5b:bd:6a:91:1f:9c:c6:60:6c:b8:dc:35:23:ec:8b:47:01:10:
         08:1a:98:4b:4f:0a:2c:dd:88:ee:e1:e4:4d:fb:7e:68:06:97:
         42:01:38:05:85:b9:14:65:3c:96:bd:ea:5e:ff:58:ee:2a:85:
         d7:39:b0:cd:50:07:9e:fc:8c:25:92:f7:1d:87:d2:61:43:f6:
         52:b0:69:c4:2b:01:5e:49:fc:8c:b8:c5:77:55:ef:75:1f:e8:
         ec:8b:59:d4:69:4f:fe:fb:11:39:17:7d:ee:35:10:89:21:9d:
         41:b1:5e:02:f8:30:46:62:8e:8d:5d:cb:e3:0b:de:ff:e6:9c:
         3f:27:ea:46:70:16:76:c8:12:f8:a5:75:52:06:36:63:00:52:
         0f:d1:a9:33:19:90:ae:20:df:b6:99:b1:b6:61:cd:ed:11:75:
         18:a5:16:79:4c:3b:3f:52:be:9a:da:41:50:dc:9f:8b:91:9f:
         b4:90:39:2d:18:0d:c7:63:ce:8d:12:13:6c:94:91:29:14:c4:
         3f:0c:a9:21:51:a0:d1:a7:0e:89:15:85:e2:18:2a:18:f9:d4:
         fd:44:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----