Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a313a3a2f34382d3438203d3e203538343835.roa
File:                     323430323a653130303a313a3a2f34382d3438203d3e203538343835.roa (raw, json)
Hash identifier:          sz16jEfXqKulr+pIEsK7c58wmNr86lOa2SxjqKCVJIY=
Subject key identifier:   23:BD:95:46:E1:6A:22:43:C7:38:DE:96:3A:78:CB:D4:8B:5F:B0:E8
Certificate issuer:       /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial:       332A62A160287C9F15472913AA9E1076BE241F6F
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a313a3a2f34382d3438203d3e203538343835.roa
Signing time:             Wed 20 Sep 2023 15:03:44 +0000
ROA not before:           Wed 20 Sep 2023 14:58:44 +0000
ROA not after:            Wed 18 Sep 2024 15:03:44 +0000
asID:                     58485
IP address blocks:        2402:e100:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2a:62:a1:60:28:7c:9f:15:47:29:13:aa:9e:10:76:be:24:1f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
        Validity
            Not Before: Sep 20 14:58:44 2023 GMT
            Not After : Sep 18 15:03:44 2024 GMT
        Subject: CN=23BD9546E16A2243C738DE963A78CBD48B5FB0E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:79:34:b6:57:4c:02:a8:e6:75:0e:a9:64:
                    62:92:ee:07:dc:34:af:77:0e:20:20:4a:57:da:2a:
                    35:57:e6:41:c4:78:62:07:73:68:8d:53:ce:2d:41:
                    8d:80:f5:9e:9d:45:b0:0f:25:9e:d8:af:92:00:e9:
                    cf:c6:cf:9a:2f:09:d3:3d:49:2d:0b:d7:1d:92:82:
                    7d:3e:92:c2:8d:6c:27:b4:28:9c:46:15:33:78:98:
                    cf:f7:b5:0f:87:a4:89:58:7a:ff:5b:b6:ae:93:3f:
                    f0:ec:b6:33:0f:c9:ff:fe:d0:46:13:97:b7:d6:14:
                    84:f5:8e:50:8a:0f:de:42:85:9a:90:ac:93:a9:84:
                    dc:41:b7:62:ae:05:20:c5:34:eb:47:34:b6:9d:e7:
                    86:88:22:45:64:78:6a:0e:da:63:81:59:00:79:08:
                    59:37:0a:a5:44:8f:c6:e2:66:8e:56:cd:ad:ed:30:
                    6c:90:b9:c1:61:25:46:be:13:5b:47:4b:7b:50:e3:
                    ac:d0:7b:09:51:e1:5d:87:50:9b:de:fe:e9:69:d2:
                    86:e6:74:2b:7c:d7:56:26:7a:35:ba:3b:26:84:42:
                    a0:df:c5:72:ce:6f:a9:b5:5e:7e:74:d3:25:cd:6a:
                    17:f0:52:33:1c:3d:47:34:2d:ff:40:65:fb:45:a9:
                    77:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:95:46:E1:6A:22:43:C7:38:DE:96:3A:78:CB:D4:8B:5F:B0:E8
            X509v3 Authority Key Identifier:
                keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a313a3a2f34382d3438203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e100:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:67:dc:1d:77:59:a3:41:3b:7a:3e:43:59:39:0c:70:30:
         12:7c:79:4c:10:85:d2:62:1c:8f:12:23:f6:6a:67:fd:fe:69:
         1b:38:11:e5:1c:af:5c:ad:3d:d0:10:cf:37:69:a7:89:20:ca:
         d1:b8:24:b2:af:d5:23:7d:94:82:c7:b1:3b:ff:f0:61:7f:1f:
         a4:88:8b:e2:24:73:9e:74:5e:c5:4c:7f:74:97:d4:98:90:8d:
         fc:d3:bd:3a:8b:b5:92:3b:52:39:af:99:50:69:9a:27:a1:b3:
         c3:cc:30:84:9e:ab:de:7f:f2:7b:3d:55:d4:7b:d0:56:56:b4:
         a9:e7:c7:ec:57:f3:95:f2:89:3f:be:5e:5c:b1:ba:c6:be:1a:
         c1:e3:64:09:16:d1:5b:40:8d:68:9e:2b:89:dd:9e:86:1c:e7:
         3f:b9:00:d4:35:45:8e:72:8c:ff:42:a6:18:6a:99:2e:0d:20:
         75:40:cb:fd:97:26:96:e3:36:1f:71:29:93:f7:5d:13:dc:25:
         cb:36:d5:4d:2a:cc:39:a1:89:b7:cf:de:89:ae:97:3b:4b:e8:
         05:8b:4c:92:f8:72:23:ec:95:67:5a:c7:6e:82:f5:90:cb:ca:
         8e:86:53:0b:cb:34:cc:b8:da:d6:aa:2a:c2:67:f6:3b:72:d0:
         9e:be:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----