Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34372d3437203d3e20313530323338.roa
File:                     323430363a323063303a653030323a3a2f34372d3437203d3e20313530323338.roa (raw, json)
Hash identifier:          PHTBG/2VNo+Iso4YN/jORChyL2TmwwRGZolwQxpTGNY=
Subject key identifier:   D3:6C:82:A5:BE:9B:A7:9D:B0:B3:FE:BA:E9:5B:DB:83:80:88:03:8E
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       7322F9A764C6187F6C37F7F144B8D3EDF370E607
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34372d3437203d3e20313530323338.roa
Signing time:             Sat 22 Oct 2022 03:12:28 +0000
ROA not before:           Sat 22 Oct 2022 03:07:28 +0000
ROA not after:            Sat 21 Oct 2023 03:12:28 +0000
asID:                     150238
IP address blocks:        2406:20c0:e002::/47 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:22:f9:a7:64:c6:18:7f:6c:37:f7:f1:44:b8:d3:ed:f3:70:e6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 22 03:07:28 2022 GMT
            Not After : Oct 21 03:12:28 2023 GMT
        Subject: CN=D36C82A5BE9BA79DB0B3FEBAE95BDB838088038E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:31:e8:1a:f5:ec:cf:78:e8:a2:1f:10:72:
                    a8:c9:fa:d8:82:b3:a0:25:b5:75:cb:5a:82:49:e4:
                    11:d6:51:f4:7a:e5:f4:9c:3f:2c:df:a9:ce:01:13:
                    a7:d0:b7:a6:6f:5d:6c:80:24:72:f5:a1:71:4a:fe:
                    47:3c:38:11:c6:6f:53:4d:9f:26:4b:48:88:ca:be:
                    2f:5b:f3:46:85:cd:c5:27:44:65:34:d9:db:75:45:
                    c3:45:a6:b0:b2:97:b5:fd:9c:51:fb:2e:7f:86:21:
                    bc:0a:aa:8a:7a:43:71:57:41:f3:17:ba:f9:7e:ea:
                    fe:55:2f:26:5b:e6:61:29:45:37:9f:ac:2f:90:e1:
                    0b:a3:42:ed:3c:e5:68:ae:af:c6:fd:35:4e:b8:16:
                    4d:dd:29:f5:91:6b:47:3c:56:a1:e0:0d:f8:24:0b:
                    70:ff:94:6f:22:e5:03:3c:ea:d7:75:fc:19:16:cf:
                    b1:af:f5:65:6c:d6:09:87:6a:08:1e:7c:48:b7:60:
                    0c:81:91:45:1c:e5:60:f3:f5:69:ad:aa:58:b9:c5:
                    b1:15:b4:e0:da:1c:44:50:eb:26:d7:c6:2d:a8:25:
                    20:90:7d:8f:aa:e2:87:02:cd:f4:04:03:54:42:6b:
                    b2:ff:dd:80:2d:cf:c2:ec:f1:95:9f:ad:db:8f:71:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6C:82:A5:BE:9B:A7:9D:B0:B3:FE:BA:E9:5B:DB:83:80:88:03:8E
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34372d3437203d3e20313530323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:e002::/47

    Signature Algorithm: sha256WithRSAEncryption
         72:30:83:2d:0f:d1:0e:13:b0:82:a2:8c:cd:63:e6:a9:ee:d0:
         02:64:87:5b:1c:50:9c:eb:ee:54:bf:62:65:64:9d:d9:c3:7a:
         9d:d6:e2:47:e2:7a:50:5c:e2:bf:48:54:ba:e9:ae:0a:38:34:
         1b:1f:07:0d:4a:83:d7:12:a5:d8:1f:2b:69:77:59:91:7b:b2:
         54:09:8d:03:02:42:bd:4c:1b:37:29:00:21:fb:79:84:9c:de:
         c8:e5:ff:4b:a8:c7:db:1e:f8:82:72:bc:26:9c:52:52:b7:04:
         50:2e:31:bb:d1:32:9a:93:fc:a8:77:80:e6:da:5a:3d:f4:ee:
         dd:37:94:16:e5:78:5f:4d:a9:ee:31:f9:27:dd:53:48:bc:dd:
         bb:71:09:3a:14:b9:71:57:ef:16:41:5c:e9:5b:70:16:7d:3c:
         d4:17:7d:7f:9b:3c:74:a0:44:c9:99:89:fc:9b:79:89:ae:31:
         53:70:4d:be:d9:b3:07:f8:43:9d:db:dc:d7:92:d7:75:3f:b5:
         43:61:a7:5c:03:b2:26:03:4f:14:c8:0a:55:fd:35:3b:f6:3e:
         e9:d8:45:b9:36:aa:5c:4d:af:7e:39:60:8a:04:bb:e3:4e:8f:
         5f:61:fd:9e:4c:ba:48:fa:66:bb:1a:b5:36:9a:79:37:01:fb:
         fb:ab:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----