Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334323a343030303a3a2f33362d3438203d3e203537353738.roa
File:                     326130623a343334323a343030303a3a2f33362d3438203d3e203537353738.roa (raw, json)
Hash identifier:          +lcKu5peYfGjRxLSvqUC43Y+O4P+unOqAOfVl554qJY=
Subject key identifier:   BF:9C:90:84:32:1C:DF:D5:49:34:B7:5D:5C:97:75:23:45:11:7A:42
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       2A1903D134AE19F1C4E5945A61CC459001FBF011
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334323a343030303a3a2f33362d3438203d3e203537353738.roa
Signing time:             Sun 03 Dec 2023 21:38:17 +0000
ROA not before:           Sun 03 Dec 2023 21:33:17 +0000
ROA not after:            Sun 01 Dec 2024 21:38:17 +0000
asID:                     57578
IP address blocks:        2a0b:4342:4000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:19:03:d1:34:ae:19:f1:c4:e5:94:5a:61:cc:45:90:01:fb:f0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:17 2023 GMT
            Not After : Dec  1 21:38:17 2024 GMT
        Subject: CN=BF9C9084321CDFD54934B75D5C97752345117A42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:cc:63:af:63:c9:9c:6b:a8:ac:1e:7c:ec:
                    21:73:b3:86:49:e9:af:4d:d9:29:8d:ec:4c:3f:92:
                    3b:1a:9b:33:02:33:2a:1c:40:17:ea:33:8f:6f:c3:
                    b9:fa:14:5c:ff:91:9c:bf:62:4c:4d:31:95:3f:87:
                    f3:83:5b:9d:c8:be:ff:1f:be:d4:b2:15:30:49:11:
                    21:06:d9:bf:56:88:89:af:da:44:c5:07:ab:6f:48:
                    68:e4:36:de:20:72:bc:ae:0a:aa:59:95:0e:da:cf:
                    2a:1e:42:fd:ce:81:d8:7d:20:a9:a8:bc:33:5b:fa:
                    48:b8:1d:ea:d7:0b:1e:8f:72:2b:d1:16:25:60:c7:
                    45:68:1a:d8:80:66:de:86:59:36:bb:44:7e:6a:59:
                    97:4a:7a:5d:4b:1c:78:d4:87:52:4c:e9:45:76:de:
                    37:ea:35:d3:b0:d9:53:3b:32:3b:a5:ad:dd:d6:cf:
                    b2:39:40:d7:1f:f2:33:5d:0d:f8:e4:1f:12:b2:00:
                    d9:c3:66:c3:da:16:41:86:25:84:fe:49:8b:33:18:
                    1d:7d:bf:1e:22:f9:6c:38:a8:c4:69:83:0c:38:7a:
                    d4:1b:72:d9:da:e7:5b:a9:19:ca:40:8e:3f:a6:a0:
                    e3:43:1f:ef:b2:34:57:ee:09:88:bd:5f:06:89:79:
                    8b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:90:84:32:1C:DF:D5:49:34:B7:5D:5C:97:75:23:45:11:7A:42
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334323a343030303a3a2f33362d3438203d3e203537353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4342:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:af:c9:21:b3:9e:66:82:3e:9f:ca:92:2b:f5:e1:25:99:
         68:31:0e:8e:8b:db:db:4c:b9:2f:94:46:e2:4c:50:b8:7d:ed:
         f7:9c:88:61:87:d0:7b:99:2e:d2:c5:a1:ec:54:96:da:b2:6e:
         b3:1b:3e:9f:a6:22:e2:7a:36:20:f4:7a:03:01:89:5f:09:dc:
         75:ea:b6:3f:65:65:b2:8c:f5:5b:be:c1:5e:52:9c:66:29:8b:
         be:d0:dd:72:51:9e:9a:54:c9:80:6d:f7:32:b6:2b:e5:41:7a:
         18:05:30:cb:89:c9:fd:97:71:c6:c2:f2:02:c3:5c:2b:d4:df:
         ed:a2:cb:96:79:3b:77:13:5c:b7:65:d8:58:bf:6c:31:dc:47:
         00:98:f1:3d:38:1e:18:a0:95:08:55:7f:14:44:88:43:ab:c5:
         62:08:52:63:c5:8f:2d:57:cf:74:61:5e:34:15:ad:e8:56:f4:
         13:24:61:9b:77:a0:0f:ab:85:a8:88:a4:ad:35:ba:57:75:6d:
         67:80:a9:2d:2f:48:f7:29:c1:59:6d:99:5b:7e:51:f3:a6:cb:
         b0:92:25:81:75:59:b7:fc:1d:af:b4:82:1e:79:d4:32:8d:a3:
         a2:8a:1f:1f:85:e8:0b:7b:d5:b1:4d:ea:e6:e8:05:1f:92:48:
         3b:b8:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org