Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a3139333a3a2f34382d3438203d3e203538343835.roa
File:                     323430323a653130303a3139333a3a2f34382d3438203d3e203538343835.roa (raw, json)
Hash identifier:          8CGwj1j6GQ4g6Oq1CEpx6KWhG6NJ8yPd5yXuDrNTocE=
Subject key identifier:   A1:4C:A4:98:8D:A1:A4:08:B0:27:E2:37:4E:00:67:2F:47:DD:2F:03
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       2C542EBDC89B72D8BFEA773D8F76D2B7ADADBC62
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a3139333a3a2f34382d3438203d3e203538343835.roa
Signing time:             Sat 25 Feb 2023 05:16:27 +0000
ROA not before:           Sat 25 Feb 2023 05:11:27 +0000
ROA not after:            Sat 24 Feb 2024 05:16:27 +0000
asID:                     58485
IP address blocks:        2402:e100:193::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:2e:bd:c8:9b:72:d8:bf:ea:77:3d:8f:76:d2:b7:ad:ad:bc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Feb 25 05:11:27 2023 GMT
            Not After : Feb 24 05:16:27 2024 GMT
        Subject: CN=A14CA4988DA1A408B027E2374E00672F47DD2F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:4e:c6:d7:03:cd:c8:3e:6e:7c:16:76:63:
                    1b:ff:f0:4e:82:87:e3:6f:1b:d1:33:6d:1f:e9:9f:
                    8a:45:00:20:bd:79:41:da:bf:34:08:74:60:0a:14:
                    0d:37:e4:ef:66:0d:55:61:9a:7e:98:27:c2:5a:36:
                    36:84:57:0a:ee:81:fa:3f:5b:d7:42:a0:e4:06:8e:
                    35:b2:a4:7f:08:34:64:04:0a:68:87:cb:10:47:af:
                    a4:aa:b2:02:7a:73:e2:6a:6e:d3:9e:78:da:19:5b:
                    92:11:f6:db:22:00:1e:d7:b0:5c:0b:74:29:23:ac:
                    4e:18:c0:66:23:11:d3:c5:3f:c9:27:fd:34:9b:27:
                    cc:d7:08:06:3b:ea:32:4b:67:72:9c:9d:21:78:f2:
                    27:3d:c9:24:84:25:f3:ce:59:e2:95:41:fb:f5:81:
                    22:72:1f:94:17:f8:34:3b:87:d8:87:f0:dd:29:4a:
                    65:f8:60:d7:11:0a:eb:a1:a1:84:8f:f7:32:49:c4:
                    84:ca:c9:db:5b:a6:70:9b:79:ed:5b:ca:a6:97:58:
                    37:0b:22:6b:3d:d4:21:50:76:0b:c7:1c:07:2b:00:
                    93:b6:06:ae:fb:9c:71:e8:2b:73:f4:84:12:31:a5:
                    18:eb:9d:6a:01:b3:e8:46:1a:ad:06:5e:35:15:be:
                    d7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4C:A4:98:8D:A1:A4:08:B0:27:E2:37:4E:00:67:2F:47:DD:2F:03
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a3139333a3a2f34382d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100:193::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:62:22:2c:e1:64:fd:24:f8:59:0f:16:05:68:8a:b7:de:15:
         a6:64:61:6e:a7:be:f4:2a:16:b9:01:75:b9:73:11:f8:f6:73:
         f3:6b:52:5f:15:2b:8d:99:82:5c:ad:7d:ee:5b:f3:73:cd:fa:
         d4:4e:7f:e4:88:b7:42:06:a8:2e:8e:0e:8e:76:d7:c6:5c:77:
         10:97:d3:87:29:29:18:cd:b9:db:73:1f:ba:3f:b5:fc:6a:45:
         f9:e4:94:49:cd:7a:40:8a:c0:32:d5:9a:d6:a7:05:41:31:b2:
         ac:0b:4a:c6:6f:fc:83:06:56:64:69:3d:2f:87:23:74:ff:b1:
         1e:89:38:85:bf:7c:27:7d:d4:c6:d4:d4:18:48:00:80:7d:27:
         ae:03:57:f2:b0:5c:2d:21:8c:e3:3f:7b:9e:8c:a2:54:ea:8e:
         50:0d:3a:4d:e4:02:6d:e0:7d:71:12:a3:46:6c:d3:a9:67:56:
         a9:f3:58:d1:95:60:54:37:37:2b:37:a2:e4:33:06:1c:fe:9d:
         8a:a9:fc:e6:8a:f6:e7:d8:7f:c6:68:f2:c2:2d:95:de:0d:32:
         35:b4:40:78:84:4c:e3:fb:2a:6f:9d:4e:18:69:db:72:b2:7b:
         9f:4f:69:06:a7:2c:9e:41:07:d6:6c:f4:b5:a5:0a:1e:d8:ce:
         b6:12:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----