Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34372d3438203d3e20313530323338.roa
File:                     323430363a323063303a653030323a3a2f34372d3438203d3e20313530323338.roa (raw, json)
Hash identifier:          EIYKp2fCfhqfeRJlHyt37Lp5YMNXUqzI/EcKrbhkR3c=
Subject key identifier:   76:7C:D1:1F:31:AE:82:E2:3D:15:76:A1:53:FD:E8:D9:2B:24:3E:5E
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       02C7D842582CBE3C163AB5E785A778DE5D062D7C
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34372d3438203d3e20313530323338.roa
Signing time:             Sun 30 Oct 2022 05:44:25 +0000
ROA not before:           Sun 30 Oct 2022 05:39:25 +0000
ROA not after:            Sun 29 Oct 2023 05:44:25 +0000
asID:                     150238
IP address blocks:        2406:20c0:e002::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c7:d8:42:58:2c:be:3c:16:3a:b5:e7:85:a7:78:de:5d:06:2d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 30 05:39:25 2022 GMT
            Not After : Oct 29 05:44:25 2023 GMT
        Subject: CN=767CD11F31AE82E23D1576A153FDE8D92B243E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:ef:3f:e9:a0:ae:5b:af:44:70:a4:b5:31:
                    6d:e1:3c:a8:22:75:17:c7:7d:de:b1:d4:38:4c:22:
                    b2:91:f8:fa:41:3b:dd:fa:2b:df:75:7e:05:d9:ed:
                    cd:41:ab:b7:de:98:5a:af:90:4f:e9:fa:cb:53:38:
                    99:0d:22:7c:58:35:11:34:8c:ba:35:1e:db:ae:e4:
                    f0:23:96:e4:f4:cc:fb:ba:ea:1e:8f:54:0e:a1:03:
                    72:09:ab:ba:cc:b4:c9:25:98:98:a8:f1:ae:ba:a6:
                    bd:e0:23:12:ca:54:47:26:5f:ff:71:75:bc:cf:ab:
                    be:f1:81:9e:ec:64:6d:47:a9:eb:bc:22:8e:a4:72:
                    13:ad:68:5b:d5:60:7d:d7:70:17:68:18:81:cf:95:
                    23:0e:8f:7a:ae:f1:df:b4:19:13:53:aa:b5:1c:68:
                    3f:cc:bf:d5:36:66:d1:fd:e1:68:6c:d2:34:2c:d5:
                    80:4c:ac:5c:b5:91:12:29:4a:9d:1e:94:b4:3c:fe:
                    21:2e:35:ff:e1:25:46:f0:18:f9:e8:70:2a:df:40:
                    d4:79:c3:58:cb:a9:31:db:26:73:2d:3e:88:e7:29:
                    c9:0c:67:db:0d:32:77:db:bc:2e:ad:f8:69:c6:23:
                    4b:e7:b4:bf:bb:dd:32:ff:50:74:0d:01:f4:da:34:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7C:D1:1F:31:AE:82:E2:3D:15:76:A1:53:FD:E8:D9:2B:24:3E:5E
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34372d3438203d3e20313530323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:e002::/47

    Signature Algorithm: sha256WithRSAEncryption
         73:0b:7e:ad:b1:b9:1a:94:44:35:11:2a:23:6d:36:ec:2d:57:
         cf:2c:78:c6:e6:1b:bc:22:28:ac:f9:c4:b3:a7:b1:f5:5d:34:
         41:04:c7:89:0f:5a:db:f4:a8:51:4a:88:12:86:7f:d5:b7:39:
         ae:fc:62:5e:fb:62:9d:18:2a:72:4a:0b:e3:90:37:e6:c6:e5:
         6d:b4:a1:50:d0:2a:89:01:33:97:e5:f4:a8:c4:43:e2:22:52:
         0e:ad:87:a4:c4:7e:9c:80:8e:02:3f:45:db:f3:32:5f:92:b8:
         ba:dd:1e:78:15:7f:bb:15:4e:29:2b:a6:9d:7a:2c:e9:d9:80:
         21:5b:5f:8e:6c:60:35:57:65:35:f1:cd:46:28:3b:dd:48:e1:
         d8:9a:d9:15:ba:54:3d:0c:0b:24:7e:63:4f:41:02:96:03:08:
         a8:cf:3d:17:a8:7e:f9:e4:e8:89:1e:aa:92:7a:d0:d1:ee:80:
         54:cc:4c:d8:13:cf:28:1b:d7:a2:36:ba:c8:31:ae:26:36:29:
         ae:46:b5:77:d7:d3:2b:6e:6e:54:8f:49:3b:4f:a6:d9:fe:b6:
         52:97:a5:54:ec:49:2f:df:56:4a:ef:84:df:ac:c2:93:e1:e5:
         6d:5f:41:cd:f3:60:8b:39:3a:c6:76:01:00:03:f7:66:cc:78:
         ee:1d:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----