Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a633030303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          HG34XLUZKMSLDdmQh5gPdwAbpZGtbNFCgWAK5w8qD+c=
Subject key identifier:   A0:89:67:24:CA:F2:32:56:3F:93:3D:3E:F1:DC:5E:8E:47:EC:52:67
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       0D07DB98161FADAEA7FF8BB670D74414FF0568A0
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:29:37 +0000
ROA not before:           Thu 08 Sep 2022 04:24:37 +0000
ROA not after:            Thu 07 Sep 2023 04:29:37 +0000
asID:                     140423
IP address blocks:        2406:20c0:c000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:07:db:98:16:1f:ad:ae:a7:ff:8b:b6:70:d7:44:14:ff:05:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:24:37 2022 GMT
            Not After : Sep  7 04:29:37 2023 GMT
        Subject: CN=A0896724CAF232563F933D3EF1DC5E8E47EC5267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:5f:c6:d6:e5:31:33:3c:c8:ca:8b:71:fb:
                    dc:9a:65:42:bc:77:3b:02:ba:f0:2b:2d:bb:f2:2c:
                    16:fd:71:09:b3:9b:22:58:e7:1a:88:44:2f:83:0e:
                    f1:d5:d6:d2:89:5a:04:4b:54:c7:2a:07:73:6e:8c:
                    c0:6a:e6:68:2c:81:57:be:f0:c4:cd:54:2a:5b:c6:
                    9e:03:79:4d:44:cc:9d:45:87:15:31:cd:c3:cc:7e:
                    65:7e:3f:fe:44:c3:2d:8e:fc:60:6d:6d:10:e0:fb:
                    4a:dc:00:05:7d:23:6e:62:72:53:c9:f1:33:ba:21:
                    43:0c:12:66:4c:c7:e5:26:92:c4:cc:0e:f8:5f:4c:
                    c5:18:a4:54:13:2f:2f:d1:fa:02:63:51:e2:57:72:
                    01:f7:d6:7e:41:cf:d9:0b:4b:dc:8a:2a:c5:0a:93:
                    bc:c3:9d:ad:28:60:cc:31:6d:da:e4:82:db:7a:15:
                    44:b0:bb:06:8a:c2:c7:aa:2a:24:f1:dc:af:50:6b:
                    53:1e:e4:04:55:52:c6:8e:7a:82:db:db:f3:14:09:
                    e7:64:01:7a:70:cf:dc:fa:b8:42:bf:2d:b0:3a:f4:
                    e3:d6:4c:db:0d:50:9a:17:65:9f:3e:5c:e7:ce:09:
                    68:2a:7b:0b:e2:f1:0e:70:f0:ad:1c:fb:66:86:12:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:89:67:24:CA:F2:32:56:3F:93:3D:3E:F1:DC:5E:8E:47:EC:52:67
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:9e:51:69:5e:6f:bb:84:48:69:16:61:78:ae:b6:3c:6b:5f:
         20:f8:5c:65:5b:45:d8:65:75:ce:58:92:4c:50:7e:ba:c9:97:
         39:18:34:af:58:41:f9:d1:80:39:b7:b0:31:fc:b6:32:a9:37:
         2c:8a:6b:8f:b8:77:8d:f4:c2:29:93:a4:4b:aa:a1:db:43:24:
         20:e3:4b:c4:06:e5:05:09:ba:79:43:e8:92:3e:b1:9f:3d:e0:
         d3:2a:bf:10:13:35:35:7c:8e:87:1e:eb:5e:03:17:04:a1:fc:
         49:08:25:a2:b6:e5:f5:cc:cd:83:c3:89:83:31:cc:89:74:fb:
         3a:d1:b6:81:12:81:f3:e5:49:d7:05:70:1f:12:c2:99:d2:01:
         9b:d9:e8:ca:76:f0:f5:8c:0b:33:6b:e0:9d:d1:55:32:f2:03:
         27:9d:15:ff:66:47:9a:e1:c1:e9:8e:2f:43:af:15:a1:e4:4b:
         d7:d7:2a:8e:79:c7:91:18:9b:5d:2d:4c:92:c1:b5:83:b1:48:
         0b:64:2b:15:b3:ee:cd:ee:b3:97:d7:11:b2:6b:76:44:c7:71:
         e5:7a:f1:0d:0c:50:98:09:79:3a:2b:05:4d:b9:a7:53:6b:65:
         df:cd:6b:75:a8:b3:91:52:bb:bc:e5:44:8a:53:4e:48:bc:e4:
         08:b8:f3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----