Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34382d3438203d3e20313530323338.roa
File:                     323430363a323063303a653030323a3a2f34382d3438203d3e20313530323338.roa (raw, json)
Hash identifier:          1YF9cPLaU0zPUCTKzOxxQMHSsB92ywmDj00/g6G5SwA=
Subject key identifier:   13:2B:60:57:7A:91:81:D5:8C:63:10:86:73:A0:70:AF:8B:AD:41:0B
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       6A38B2205035B64DE6E71499F8D5A04711A66D2B
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34382d3438203d3e20313530323338.roa
Signing time:             Sat 22 Oct 2022 03:11:39 +0000
ROA not before:           Sat 22 Oct 2022 03:06:39 +0000
ROA not after:            Sat 21 Oct 2023 03:11:39 +0000
asID:                     150238
IP address blocks:        2406:20c0:e002::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:38:b2:20:50:35:b6:4d:e6:e7:14:99:f8:d5:a0:47:11:a6:6d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 22 03:06:39 2022 GMT
            Not After : Oct 21 03:11:39 2023 GMT
        Subject: CN=132B60577A9181D58C63108673A070AF8BAD410B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:ad:b7:0e:b4:b9:ab:2a:76:ef:80:c7:ea:
                    8c:70:40:2f:4a:10:cc:63:4d:8b:05:eb:ec:53:ce:
                    ce:67:10:a3:06:9a:b1:3d:b0:8e:3f:a4:64:98:f6:
                    19:a8:98:50:87:7a:b0:dd:3a:1d:01:7a:43:79:57:
                    c3:4c:4e:4f:f7:10:f6:4d:48:c4:ef:34:dc:5d:b4:
                    8a:ee:03:ce:91:37:1f:08:ec:8e:be:d7:2c:d5:f7:
                    17:1e:73:20:8d:d4:98:2f:2f:d9:a3:7c:30:9e:1b:
                    16:1f:82:dd:8d:7c:5d:f0:c0:c4:8b:61:a0:c9:1c:
                    94:7f:f2:5e:8e:10:61:8a:75:a5:77:28:b7:9f:50:
                    77:f3:79:15:ec:83:09:7b:bc:f3:8f:19:85:c7:51:
                    d2:96:6e:51:7a:da:bb:1d:0c:2c:b1:21:52:62:5f:
                    fa:16:5f:fd:07:3f:c3:75:08:43:61:c4:63:3e:e3:
                    48:23:68:15:8c:6a:b9:b2:97:e2:7d:8b:87:b2:5d:
                    16:01:e7:a6:39:6a:8c:dd:fb:99:9b:dd:f6:a3:c8:
                    7e:80:8b:a1:45:d8:db:f9:3c:15:13:38:b0:e6:fb:
                    2b:2d:82:3d:82:98:13:5e:46:5f:1d:8f:66:a5:22:
                    d8:45:e8:88:1b:31:aa:a3:7d:3f:9b:d2:05:4e:14:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2B:60:57:7A:91:81:D5:8C:63:10:86:73:A0:70:AF:8B:AD:41:0B
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030323a3a2f34382d3438203d3e20313530323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:e002::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:66:19:ed:e3:60:1a:28:d3:c8:3e:59:16:bf:31:74:fd:
         65:fe:03:b1:d8:a8:17:4d:83:6a:f9:13:00:4c:d6:da:c5:c4:
         ab:30:3a:d8:e5:7f:e5:dc:aa:8e:bd:90:5b:91:98:cb:ce:ca:
         3d:54:58:8a:24:95:43:42:b8:9a:b3:e2:84:b7:4b:63:5c:3d:
         3d:24:e7:eb:b9:ef:12:ee:29:df:67:7d:df:2c:f8:3c:8c:cf:
         63:6d:6d:d9:12:1e:20:37:d5:ac:5d:2b:d8:2e:4c:87:c4:3c:
         4e:a3:8e:89:1f:5c:62:02:1c:d6:6f:69:19:cd:61:88:14:26:
         9c:40:a2:bf:99:0d:c1:ae:3e:f7:ce:74:16:57:48:19:4d:a1:
         9a:73:4f:38:6d:ef:d1:94:1a:c4:a3:21:5b:de:a7:8a:4c:ae:
         b9:b8:f6:2f:f1:d7:14:54:e7:b1:a9:50:a0:7b:f6:7d:0f:3d:
         bd:ea:50:09:d2:50:a0:87:fc:91:1c:ff:d5:58:1d:bc:c9:b0:
         77:ed:81:e0:f3:ea:1d:06:f1:b8:08:14:d7:c4:c3:ee:e3:36:
         83:f3:ee:f7:cb:e3:92:94:9f:c4:03:c1:51:53:86:a1:c6:3c:
         8c:49:9a:f8:5e:f6:2b:bd:12:16:10:d5:25:e9:09:98:ff:50:
         36:56:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----