Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/kAvEUJHe6yPdEMR_hn4L4XCo8Ms.roa
File:                     kAvEUJHe6yPdEMR_hn4L4XCo8Ms.roa (raw, json)
Hash identifier:          uPWU1zdDFxI3t/qAL4eUjsRoACpleL5CXX72awfEYpE=
Subject key identifier:   90:0B:C4:50:91:DE:EB:23:DD:10:C4:7F:86:7E:0B:E1:70:A8:F0:CB
Certificate issuer:       /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial:       0FE7
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/kAvEUJHe6yPdEMR_hn4L4XCo8Ms.roa
Signing time:             Tue 19 Sep 2023 19:35:15 +0000
ROA not before:           Tue 19 Sep 2023 19:35:15 +0000
ROA not after:            Tue 17 Sep 2024 08:06:57 +0000
asID:                     146845
IP address blocks:        2407:9b40::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4071 (0xfe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
        Validity
            Not Before: Sep 19 19:35:15 2023 GMT
            Not After : Sep 17 08:06:57 2024 GMT
        Subject: CN=900BC45091DEEB23DD10C47F867E0BE170A8F0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:01:01:69:ef:e7:d5:fc:64:49:01:8a:e0:6d:
                    69:0f:61:05:3f:1b:0e:e2:23:be:27:47:76:4d:e9:
                    3b:95:ba:44:bc:91:79:3e:a8:7d:ef:3d:70:56:94:
                    60:da:fd:19:9b:78:2c:22:b8:9b:c9:17:45:48:ea:
                    48:7f:e3:12:46:17:ac:43:a8:9f:b2:1c:0a:52:39:
                    83:ef:5b:95:b7:6b:3e:ac:0b:80:3d:92:fd:86:a4:
                    1e:26:9a:10:e3:8a:79:e4:6b:d3:9a:67:0c:12:de:
                    bc:2c:cc:dc:1b:96:c1:38:b0:fa:e2:5d:fe:d0:71:
                    e9:40:a5:cb:69:b9:39:73:96:eb:80:63:e5:89:96:
                    1e:02:e3:b8:a5:a0:05:6d:d7:79:0d:e9:22:ee:b3:
                    79:57:e3:08:02:31:7e:24:81:da:7f:6b:a4:58:9c:
                    ea:f0:32:cd:68:84:d8:07:07:9f:63:ac:d1:fe:ba:
                    10:ef:15:91:ac:7f:b6:4c:a0:99:a2:00:f3:3f:5e:
                    76:59:2e:a7:ad:49:fd:3f:75:3e:5d:d2:24:43:36:
                    5d:e9:7f:4c:51:25:30:e8:f1:15:da:4e:d0:42:92:
                    2c:6d:e0:bb:6d:6f:65:29:20:19:a9:69:29:6b:4e:
                    08:22:52:d8:89:69:49:a3:b0:a3:bf:3c:ae:50:81:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0B:C4:50:91:DE:EB:23:DD:10:C4:7F:86:7E:0B:E1:70:A8:F0:CB
            X509v3 Authority Key Identifier:
                keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/kAvEUJHe6yPdEMR_hn4L4XCo8Ms.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:39:fd:05:4b:22:95:47:e4:74:06:1f:0f:d1:7c:6a:04:1d:
         7b:f6:8d:ee:b0:98:e4:ba:52:2d:4d:7c:bd:6e:7e:47:a9:5e:
         d4:78:1d:40:83:d5:99:1f:d2:36:b5:b7:f3:a5:84:e0:a8:06:
         ed:a3:30:a7:01:a6:88:28:39:00:72:b8:2f:77:42:e9:ea:82:
         93:09:e5:94:71:47:cf:9e:8f:37:15:9a:45:8c:5e:a8:63:2d:
         ec:42:be:df:c6:9f:79:8a:25:f2:a3:26:3f:76:c8:8e:9e:93:
         16:4a:80:c8:a8:ec:d4:f7:e4:12:8d:ed:08:8c:43:b1:a8:bc:
         da:fb:1f:94:09:d7:8b:91:a2:08:a8:3b:ac:8d:58:8e:a9:bd:
         b1:28:d6:93:7a:0e:5a:8e:73:12:ce:4e:e2:ba:a0:97:62:9f:
         f3:5c:c6:e2:15:e9:b5:c6:de:46:26:63:76:34:0b:a9:1d:d1:
         80:c0:d8:3b:e4:d5:e4:e7:53:4a:d1:03:fb:ff:b9:6a:1a:60:
         b1:51:4c:7a:b5:da:58:f0:b8:4e:50:9e:41:e0:0c:28:79:9f:
         37:8e:1d:65:ff:c3:ea:00:8e:20:41:e8:21:39:5c:21:6d:25:
         2b:6e:9b:72:9a:b0:83:37:fe:b9:b3:df:e7:55:a7:1b:40:59:
         ca:e9:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----