Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3132343a3a2f34382d3438203d3e20313338383636.roa
File:                     323430343a666563303a3132343a3a2f34382d3438203d3e20313338383636.roa (raw, json)
Hash identifier:          XHJ5wlA/E7ZdZZfg0h4jnb0xAKEWZYG5QRpoUtn9nMo=
Subject key identifier:   A1:2F:AF:CE:FC:24:97:FD:CE:C1:9E:AD:BE:71:3B:22:74:16:49:DD
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       5A611D807D915D7EF17BE07B8A349F7C207C0CA2
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3132343a3a2f34382d3438203d3e20313338383636.roa
Signing time:             Sun 05 Feb 2023 18:04:44 +0000
ROA not before:           Sun 05 Feb 2023 17:59:44 +0000
ROA not after:            Sun 04 Feb 2024 18:04:44 +0000
asID:                     138866
IP address blocks:        2404:fec0:124::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:61:1d:80:7d:91:5d:7e:f1:7b:e0:7b:8a:34:9f:7c:20:7c:0c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Feb  5 17:59:44 2023 GMT
            Not After : Feb  4 18:04:44 2024 GMT
        Subject: CN=A12FAFCEFC2497FDCEC19EADBE713B22741649DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:95:44:2f:aa:2d:ee:70:2a:91:6a:5f:30:
                    1a:46:02:d0:bd:34:50:3d:7a:4a:ad:e5:54:7c:58:
                    a1:ed:38:bf:0c:56:ee:2f:e1:4c:a9:b4:46:6c:16:
                    61:a0:84:9b:92:fd:fc:4d:f0:d1:fa:66:a2:6b:0c:
                    5d:c2:b7:77:b5:96:60:ac:e2:98:e0:d5:0f:a4:58:
                    3a:36:0c:53:1d:66:a1:a1:62:3e:cf:62:a8:ad:67:
                    e7:23:bc:44:eb:23:7c:6d:49:78:47:df:ae:26:11:
                    d5:fb:c5:88:9e:17:6a:9d:5d:d0:12:53:cc:04:be:
                    bd:4b:4d:9b:97:66:8a:6e:e2:33:3b:52:2e:66:86:
                    1a:3a:92:07:b9:72:fd:94:ec:51:3b:24:a1:86:61:
                    61:c9:52:30:75:d7:b6:0e:a0:76:e2:bb:44:47:98:
                    bb:52:53:a8:84:af:25:31:49:3d:21:f8:68:18:5f:
                    92:40:c1:74:4e:63:bd:53:cd:3c:73:cd:cb:e1:c5:
                    5f:44:78:f1:3a:00:dc:ff:27:3b:c5:a1:91:28:3e:
                    8c:c0:b9:85:cf:01:a8:a8:94:de:db:e0:ab:5b:e2:
                    5c:2d:2b:ca:66:f5:3d:b4:05:bf:a1:1f:4e:0d:46:
                    d8:bf:54:fc:e1:2f:66:53:8a:5e:f4:b7:e0:5f:e3:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:AF:CE:FC:24:97:FD:CE:C1:9E:AD:BE:71:3B:22:74:16:49:DD
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a3132343a3a2f34382d3438203d3e20313338383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:fec0:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:34:1f:d8:41:ab:6b:9b:f1:69:03:85:8c:ef:83:fb:af:5b:
         1c:59:9d:80:ef:52:44:ee:23:4e:0b:e4:d2:20:e6:2c:28:eb:
         d6:67:76:d8:8b:3f:ad:ff:e6:dc:26:fe:f0:f6:f6:66:07:ed:
         22:e4:f0:c2:cb:6b:de:53:bc:a8:b9:d6:44:b6:1a:7c:ab:a1:
         de:3a:f5:75:ee:e1:f5:00:5c:6b:b7:e4:93:c7:34:fc:5e:7f:
         10:25:d3:6d:8a:c5:96:b2:35:f5:cf:80:9a:8b:8b:2a:45:13:
         eb:d1:de:58:4b:2c:4e:6b:6a:38:55:44:8f:6c:ca:3c:e4:0d:
         60:90:4b:a8:5f:54:f6:1c:b6:3f:bb:8f:5c:42:52:cc:d6:51:
         b0:98:38:00:c3:f6:e7:45:e2:e0:e9:9d:bc:60:8a:9c:3a:bc:
         d9:77:8f:8a:61:70:0a:62:d2:ae:61:20:6e:33:8f:16:e6:fa:
         36:ea:44:95:91:fb:2d:0c:65:c0:18:20:8c:cb:0b:9b:52:9a:
         eb:8e:96:63:93:6d:d5:5b:89:0c:c3:48:9d:ae:c5:12:fd:41:
         97:b5:87:d1:76:93:93:2b:b3:2c:91:1b:4b:2d:63:04:84:0f:
         52:05:54:67:65:32:cc:58:f8:6f:7e:cc:da:ab:c9:27:c5:2e:
         f0:59:46:1d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWmEdgH2RXX7xe+B7ijSffCB8DKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yMzAyMDUxNzU5NDRaFw0yNDAyMDQxODA0NDRaMDMxMTAvBgNV
BAMTKEExMkZBRkNFRkMyNDk3RkRDRUMxOUVBREJFNzEzQjIyNzQxNjQ5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUpVEL6ot7nAqkWpfMBpGAtC9
NFA9ekqt5VR8WKHtOL8MVu4v4UyptEZsFmGghJuS/fxN8NH6ZqJrDF3Ct3e1lmCs
4pjg1Q+kWDo2DFMdZqGhYj7PYqitZ+cjvETrI3xtSXhH364mEdX7xYieF2qdXdAS
U8wEvr1LTZuXZopu4jM7Ui5mhho6kge5cv2U7FE7JKGGYWHJUjB117YOoHbiu0RH
mLtSU6iEryUxST0h+GgYX5JAwXROY71TzTxzzcvhxV9EePE6ANz/JzvFoZEoPozA
uYXPAaiolN7b4Ktb4lwtK8pm9T20Bb+hH04NRti/VPzhL2ZTil70t+Bf48sTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUoS+vzvwkl/3OwZ6tvnE7InQWSd0wHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05
NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzEzMjM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzgzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAT+
wAEkMA0GCSqGSIb3DQEBCwUAA4IBAQBENB/YQatrm/FpA4WM74P7r1scWZ2A71JE
7iNOC+TSIOYsKOvWZ3bYiz+t/+bcJv7w9vZmB+0i5PDCy2veU7youdZEthp8q6He
OvV17uH1AFxrt+STxzT8Xn8QJdNtisWWsjX1z4Cai4sqRRPr0d5YSyxOa2o4VUSP
bMo85A1gkEuoX1T2HLY/u49cQlLM1lGwmDgAw/bnReLg6Z28YIqcOrzZd4+KYXAK
YtKuYSBuM48W5vo26kSVkfstDGXAGCCMywubUprrjpZjk23VW4kMw0idrsUS/UGX
tYfRdpOTK7MskRtLLWMEhA9SBVRnZTLMWPhvfszaq8knxS7wWUYd
-----END CERTIFICATE-----