Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a613030303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          Ct7wtU/PFjts36yor8OfBUbFDlMyfo48IprEwHxXEGU=
Subject key identifier:   5D:63:C0:16:BD:7E:1E:E3:2D:14:E4:C7:E8:00:8B:25:99:C2:A2:BF
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       13AB3F51AAF07B5CB60BA607C3E5E83F2A66B1D7
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:29:30 +0000
ROA not before:           Thu 08 Sep 2022 04:24:30 +0000
ROA not after:            Thu 07 Sep 2023 04:29:30 +0000
asID:                     140423
IP address blocks:        2406:20c0:a000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ab:3f:51:aa:f0:7b:5c:b6:0b:a6:07:c3:e5:e8:3f:2a:66:b1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:24:30 2022 GMT
            Not After : Sep  7 04:29:30 2023 GMT
        Subject: CN=5D63C016BD7E1EE32D14E4C7E8008B2599C2A2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:f8:e2:f4:a6:60:cf:8e:ec:0b:18:4d:ad:
                    c0:92:d1:c0:8e:c6:03:96:6a:61:82:58:a8:28:cd:
                    a4:58:35:f5:15:7d:70:00:9e:cc:34:25:42:57:24:
                    28:f1:c1:82:7c:e6:6e:23:7d:50:d6:f1:be:e8:ae:
                    a7:0e:7a:57:6d:d9:a9:5a:2e:ec:30:57:43:30:d4:
                    ba:b7:18:a9:56:51:30:10:8d:6e:53:4e:17:1d:d8:
                    b2:fd:2a:27:3f:86:3e:48:95:f6:10:b9:8b:5a:1c:
                    16:8f:eb:7b:73:76:fb:7f:5b:0a:c3:f0:34:79:a2:
                    f6:4c:5a:21:8b:4f:57:36:1c:e5:d2:c6:08:71:cb:
                    f4:6d:b5:b3:bc:52:f0:5c:21:c3:d5:e6:eb:5b:33:
                    79:bc:cf:3a:5e:08:7f:f0:4e:de:9b:ed:a2:7f:f6:
                    a5:29:f6:ef:c6:32:2e:ba:d1:46:e0:20:89:48:4c:
                    7c:76:06:18:97:bb:5f:9b:3c:be:9f:0f:57:0c:8c:
                    0a:63:06:85:1a:af:24:ed:91:d5:17:03:b5:2e:0a:
                    5e:4b:80:5c:eb:0d:b0:3d:7e:ed:8b:42:ad:ab:0e:
                    11:c0:85:c5:16:1d:96:08:c1:2d:e1:e0:bf:60:a9:
                    46:27:c0:ea:b2:15:9c:72:96:c4:91:e5:c8:58:68:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:63:C0:16:BD:7E:1E:E3:2D:14:E4:C7:E8:00:8B:25:99:C2:A2:BF
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:74:8e:ef:5c:4d:68:1c:78:27:d3:18:f8:ec:18:67:cb:28:
         9c:23:1e:ef:3f:f2:c6:14:8e:0f:99:b8:75:4e:f1:6c:7e:19:
         34:50:02:53:fe:23:39:d9:39:fd:5f:fa:39:bb:aa:e5:6e:0f:
         61:dd:a3:51:48:56:c0:5f:19:e0:62:80:16:46:a0:1b:73:b1:
         93:e3:c0:81:59:b4:5a:28:27:2b:a8:0d:de:26:b8:e3:2a:d5:
         d9:11:30:f8:26:9e:c3:bc:0a:7b:0e:e2:22:fa:ed:12:56:88:
         0b:20:f7:c1:01:59:8a:a7:ce:7b:29:18:80:20:9f:ff:b9:e5:
         09:c1:22:7f:62:6a:7e:b8:e5:b9:ff:b1:4e:8f:79:05:df:e4:
         f5:64:71:8b:fe:8a:21:66:77:29:29:b1:a0:3c:f1:57:75:4a:
         c1:92:1f:3f:57:aa:bf:f9:78:3c:a4:5f:21:51:86:28:b2:35:
         4f:d0:be:ac:dd:ce:85:ab:e9:2e:3d:27:32:0c:29:5a:b5:80:
         00:3c:04:9d:84:fc:31:79:9e:9b:5e:ee:e3:9a:2b:54:1a:18:
         25:3d:f9:aa:9e:d8:d6:1b:b6:7c:0e:2f:6d:0f:6f:fc:4b:0c:
         fa:54:65:37:fe:5a:d7:4a:cb:de:d7:23:aa:32:55:64:37:e2:
         77:9f:fd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----