Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33352d3335203d3e20313430343233.roa
File:                     323430363a323063303a653030303a3a2f33352d3335203d3e20313430343233.roa (raw, json)
Hash identifier:          Frxfb62VmS6U47TQNUAbBFxsbDdxHi4cwC+QxqD0T5M=
Subject key identifier:   64:95:CD:48:0B:C0:AB:6A:9F:66:4B:DA:8E:BC:D1:13:B0:F2:F4:09
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       4F168F8D2D05DD8501484D3C144A2F41B984F50E
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33352d3335203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:28:40 +0000
ROA not before:           Thu 08 Sep 2022 04:23:40 +0000
ROA not after:            Thu 07 Sep 2023 04:28:40 +0000
asID:                     140423
IP address blocks:        2406:20c0:e000::/35 maxlen: 35

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:16:8f:8d:2d:05:dd:85:01:48:4d:3c:14:4a:2f:41:b9:84:f5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:23:40 2022 GMT
            Not After : Sep  7 04:28:40 2023 GMT
        Subject: CN=6495CD480BC0AB6A9F664BDA8EBCD113B0F2F409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:7e:b3:4e:80:f7:90:3c:d4:e7:65:67:ad:
                    e4:be:e5:7f:92:3d:67:93:cc:ef:37:d2:9c:36:9d:
                    39:b5:ee:4b:c9:23:a5:5a:54:11:6a:8e:10:df:53:
                    21:40:4b:36:13:b4:0f:19:07:ff:92:14:34:54:16:
                    6d:56:ca:ae:66:50:4d:1c:a9:2c:be:cc:8f:6c:17:
                    91:d6:f9:ee:d3:bc:40:b7:eb:4a:fb:0b:b3:49:86:
                    de:78:83:0b:bb:2d:08:85:dd:1b:d7:92:aa:01:86:
                    77:01:b7:22:58:48:2b:28:e3:dd:99:c2:13:7f:6c:
                    a8:b6:f8:68:a3:28:b2:83:29:7d:3d:04:04:ba:7a:
                    cf:98:63:38:68:b4:e5:9f:6d:70:31:98:2b:a5:0b:
                    0f:2e:d0:a8:bc:72:70:48:c4:87:e8:4d:d5:25:8a:
                    ec:94:98:ef:f6:a3:c1:b0:3c:5f:b0:72:20:0a:0c:
                    20:87:75:25:24:89:91:0b:75:e8:ff:42:30:a1:dc:
                    83:56:85:3e:64:4a:90:a3:18:22:ea:af:39:1e:13:
                    27:aa:19:84:8c:88:a5:a9:97:2d:0c:4e:55:47:59:
                    d4:d2:68:0c:bf:ce:2e:4c:9b:0c:47:00:40:5d:1a:
                    40:2a:5f:51:ec:9f:78:c9:4a:8d:d8:ce:09:3e:d3:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:CD:48:0B:C0:AB:6A:9F:66:4B:DA:8E:BC:D1:13:B0:F2:F4:09
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33352d3335203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2e:d9:31:cc:a9:bd:fc:ed:73:ac:47:42:d7:5f:e1:4d:ca:42:
         aa:b3:46:ae:bb:e0:33:dd:6b:e3:65:bd:b7:6e:35:9c:a2:7e:
         83:b4:d5:15:94:98:86:b9:51:54:e2:a1:7e:2f:34:3f:60:3b:
         73:ab:90:74:f7:d7:fb:41:80:4d:85:21:20:4e:4b:ac:16:69:
         26:e1:77:e0:2e:17:fb:f8:5c:5c:dd:94:f2:5c:46:0f:81:e5:
         5d:de:34:a0:a9:62:0d:92:b0:52:a7:83:f9:f8:6a:09:70:68:
         23:28:f2:4c:ea:66:61:60:5a:55:e4:21:20:af:46:99:2b:7b:
         0a:8b:a6:a0:15:db:ae:1f:b6:55:72:b5:50:b1:3f:ed:be:1c:
         22:49:83:d8:13:e6:fe:93:c1:7f:18:4f:72:c1:60:f8:78:fc:
         52:58:a2:ff:63:4a:61:a0:b8:9a:60:c9:1d:a8:24:62:db:58:
         79:98:02:b4:43:de:a6:11:e6:82:3e:2c:67:6c:7a:2a:49:ef:
         99:7b:64:22:df:5a:f6:d6:e4:53:e7:d5:ef:35:46:c6:a6:82:
         0d:1b:9c:71:75:e6:33:75:55:a4:7c:cc:b5:f8:6e:f2:62:4f:
         98:b7:58:a9:88:94:7e:d5:54:b3:97:2e:64:7a:bc:5a:a3:28:
         40:24:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----