Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3139342e3135362e3136322e302f32332d3234203d3e20393137.roa
File:                     3139342e3135362e3136322e302f32332d3234203d3e20393137.roa (raw, json)
Hash identifier:          NqFPly2ArZQ8qMcME9KIj086Fsg66RNGOz25403EsGQ=
Subject key identifier:   A5:72:8D:1D:AA:53:9F:D4:56:8D:55:3A:5A:33:46:AD:14:8D:B3:AF
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       0BF7E1748618681DA8D22147F324F58CCEB3EE9A
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/3139342e3135362e3136322e302f32332d3234203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:26 +0000
ROA not before:           Sun 03 Dec 2023 21:33:26 +0000
ROA not after:            Sun 01 Dec 2024 21:38:26 +0000
asID:                     917
IP address blocks:        194.156.162.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f7:e1:74:86:18:68:1d:a8:d2:21:47:f3:24:f5:8c:ce:b3:ee:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:26 2023 GMT
            Not After : Dec  1 21:38:26 2024 GMT
        Subject: CN=A5728D1DAA539FD4568D553A5A3346AD148DB3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:47:9a:ad:34:d3:ed:9f:cc:f1:e0:1f:94:
                    7c:b4:8e:0a:f4:72:1b:98:cd:43:8b:0e:70:90:97:
                    97:5c:12:8a:1e:bc:e4:e4:4d:b4:d6:29:f7:1e:70:
                    70:be:36:1d:75:1f:92:ee:ff:9e:7c:de:95:ea:8c:
                    6e:51:e2:6a:72:1b:0d:ab:f0:86:30:11:cd:7d:5a:
                    3d:56:30:d6:2f:97:1b:0a:83:97:31:75:96:02:58:
                    3a:59:04:41:7e:fb:c1:ef:43:e9:65:39:9e:b2:c2:
                    66:a4:f0:c4:55:af:63:d7:4b:fa:61:37:7f:dc:16:
                    c1:63:00:04:4c:e5:4d:2f:39:d7:6a:0b:aa:8e:41:
                    31:68:6c:aa:1d:7e:d7:fe:cc:6a:39:4e:d4:39:67:
                    b9:bf:a6:c0:42:3d:50:3a:6e:d9:68:fd:86:1d:2e:
                    e9:99:06:4b:bf:96:2d:3a:18:33:5e:1a:0b:0b:9c:
                    90:73:3f:72:7f:59:62:6d:c0:cb:a1:67:b8:20:83:
                    51:e8:50:4d:05:7c:43:f9:2c:cf:95:07:ee:79:60:
                    f4:bb:79:fc:3b:58:c9:ef:0b:12:27:e8:ae:83:06:
                    07:15:1d:73:be:fb:6b:5a:27:5b:95:c9:f8:3f:56:
                    1b:d4:d6:87:18:1d:a9:d1:33:b9:fd:b6:3f:ab:0a:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:8D:1D:AA:53:9F:D4:56:8D:55:3A:5A:33:46:AD:14:8D:B3:AF
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3139342e3135362e3136322e302f32332d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:20:e1:14:06:00:12:be:cb:53:24:2c:76:b8:d5:12:c4:85:
         73:ea:92:9b:5f:78:df:7a:15:b0:3a:69:d8:91:1f:ed:d9:31:
         c9:2e:98:ca:05:77:d3:8d:2d:4e:d4:f5:d5:dc:be:f1:4d:d1:
         57:16:dc:d6:ea:62:b3:ae:6f:b9:da:82:a0:46:56:90:d2:49:
         f5:7d:bf:29:b9:f0:7b:d4:ac:ba:73:13:05:b8:f2:c7:9e:db:
         b2:e1:4b:a9:3f:fb:e3:8e:b7:05:75:c3:41:fc:6c:c7:ca:aa:
         1c:31:c0:b7:37:55:fc:76:4c:59:f7:c2:66:a7:43:6d:10:95:
         c4:3d:12:b2:25:fb:62:86:83:1d:f4:15:ec:fa:b8:00:1a:bd:
         de:a1:29:58:5d:fa:e0:63:6c:4d:aa:5e:40:e2:53:d5:24:5d:
         e4:c5:38:f5:15:05:24:e0:cf:b3:ac:eb:d5:ee:75:c0:32:7f:
         d1:41:7c:19:c4:3d:fb:4a:56:4e:a3:be:4e:38:1f:e2:50:e4:
         3b:f0:7d:9a:38:3c:3c:1f:1a:e2:12:50:8f:23:de:49:c6:41:
         17:f3:e2:92:ac:0a:8e:7f:a3:5b:0a:49:19:81:0b:b5:1f:de:
         9b:b4:c7:14:3d:7e:4a:f7:11:e6:e3:e4:68:e6:d9:67:72:00:
         97:14:6e:a1
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUC/fhdIYYaB2o0iFH8yT1jM6z7powDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjZaFw0yNDEyMDEyMTM4MjZaMDMxMTAvBgNV
BAMTKEE1NzI4RDFEQUE1MzlGRDQ1NjhENTUzQTVBMzM0NkFEMTQ4REIzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvekearTTT7Z/M8eAflHy0jgr0
chuYzUOLDnCQl5dcEooevOTkTbTWKfcecHC+Nh11H5Lu/5583pXqjG5R4mpyGw2r
8IYwEc19Wj1WMNYvlxsKg5cxdZYCWDpZBEF++8HvQ+llOZ6ywmak8MRVr2PXS/ph
N3/cFsFjAARM5U0vOddqC6qOQTFobKodftf+zGo5TtQ5Z7m/psBCPVA6btlo/YYd
LumZBku/li06GDNeGgsLnJBzP3J/WWJtwMuhZ7ggg1HoUE0FfEP5LM+VB+55YPS7
efw7WMnvCxIn6K6DBgcVHXO++2taJ1uVyfg/VhvU1ocYHanRM7n9tj+rCrtDAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUpXKNHapTn9RWjVU6WjNGrRSNs68wHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzEzOTM0MmUzMTM1MzYyZTMxMzYzMjJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcKcojANBgkqhkiG
9w0BAQsFAAOCAQEAOCDhFAYAEr7LUyQsdrjVEsSFc+qSm19433oVsDpp2JEf7dkx
yS6YygV3040tTtT11dy+8U3RVxbc1upis65vudqCoEZWkNJJ9X2/Kbnwe9SsunMT
Bbjyx57bsuFLqT/74463BXXDQfxsx8qqHDHAtzdV/HZMWffCZqdDbRCVxD0SsiX7
YoaDHfQV7Pq4ABq93qEpWF364GNsTapeQOJT1SRd5MU49RUFJODPs6zr1e51wDJ/
0UF8GcQ9+0pWTqO+Tjgf4lDkO/B9mjg8PB8a4hJQjyPeScZBF/PikqwKjn+jWwpJ
GYELtR/em7THFD1+SvcR5uPkaObZZ3IAlxRuoQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org