Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130643a353634323a3131333a3a2f34382d3438203d3e203438333836.roa
File:                     326130643a353634323a3131333a3a2f34382d3438203d3e203438333836.roa (raw, json)
Hash identifier:          sNWZ2tlvnl75v0FZfpssbevleaNDDMELE9mrYGDlSWY=
Subject key identifier:   CE:2F:D0:FD:5A:95:4F:12:3F:0B:13:AE:30:10:1A:AE:3F:2F:F9:85
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       187F53FCB2E48DFD866169026BAAD571BB92AD2D
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634323a3131333a3a2f34382d3438203d3e203438333836.roa
Signing time:             Sun 03 Dec 2023 21:38:21 +0000
ROA not before:           Sun 03 Dec 2023 21:33:21 +0000
ROA not after:            Sun 01 Dec 2024 21:38:21 +0000
asID:                     48386
IP address blocks:        2a0d:5642:113::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7f:53:fc:b2:e4:8d:fd:86:61:69:02:6b:aa:d5:71:bb:92:ad:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:21 2023 GMT
            Not After : Dec  1 21:38:21 2024 GMT
        Subject: CN=CE2FD0FD5A954F123F0B13AE30101AAE3F2FF985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:6a:b4:12:e7:4d:e0:f1:17:0b:d5:2b:ea:
                    5e:03:be:95:69:dd:74:72:bc:94:9f:29:06:6b:af:
                    6d:3e:5d:07:f4:ed:c9:a8:a4:23:ce:a0:8b:78:e1:
                    f5:eb:64:f5:9a:dc:eb:50:d1:a5:d0:cd:db:ef:53:
                    76:3d:6e:d0:21:78:2b:4b:a3:02:81:d0:b7:47:b0:
                    d3:da:00:ef:c8:bf:11:9c:8f:9b:41:bf:29:3f:2d:
                    47:9f:54:98:a1:55:69:72:26:25:c2:e7:e6:be:d5:
                    70:c0:b1:c7:8c:1b:8f:5f:74:88:84:93:fe:3f:89:
                    9f:0b:1e:c6:65:63:86:04:5e:aa:f2:65:0b:fa:63:
                    79:f5:e1:77:f4:fc:fd:d6:75:06:3b:89:76:39:e0:
                    81:a8:7a:b4:74:47:21:03:8c:dc:05:98:c7:ad:e5:
                    09:4b:17:f3:48:cb:50:c3:60:6e:5a:f8:f3:08:39:
                    d5:90:d1:55:95:93:9e:fb:56:07:b7:a4:01:d9:55:
                    6a:5a:4e:c1:d6:7e:2e:bd:1f:6d:d6:db:fd:2b:61:
                    ef:86:6f:a2:e5:5d:12:4c:0d:38:c5:ab:2b:00:3b:
                    a7:04:e8:42:e1:fc:43:38:22:35:1c:f5:37:6f:92:
                    cf:6e:40:c9:6b:a9:1a:63:0e:50:e2:10:cc:70:01:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2F:D0:FD:5A:95:4F:12:3F:0B:13:AE:30:10:1A:AE:3F:2F:F9:85
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634323a3131333a3a2f34382d3438203d3e203438333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:5642:113::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:03:f1:71:c0:b6:c2:de:5b:54:14:46:ae:c6:0b:8d:4c:
         19:a8:cf:40:d2:6a:a4:93:a2:e2:1d:37:dd:b1:dc:94:2a:e3:
         0e:15:5b:b9:e2:c7:b8:0e:4f:71:c9:8b:43:e8:32:8d:08:ab:
         85:f5:00:ee:81:56:78:d0:f8:c3:9d:2f:40:a0:ed:c2:7c:6b:
         53:5d:db:c9:0a:a4:25:46:43:f5:ea:10:de:1f:d4:84:f3:df:
         71:e7:fc:d6:56:e5:dd:cd:32:81:73:08:c4:ca:9e:8f:8a:7b:
         90:9f:9d:c0:ed:1f:f4:b7:63:2f:44:e0:93:59:10:91:90:57:
         d3:df:1f:eb:d0:80:a2:1b:ac:29:24:47:70:94:ed:bd:d0:c5:
         2c:f4:1a:bd:6a:f6:68:f4:ba:7d:07:f1:de:fa:03:1b:c8:98:
         6d:29:63:5a:48:37:08:ad:ea:4b:11:4f:06:21:58:84:c3:ae:
         ac:bb:19:fc:bb:7b:6c:e7:0c:05:a2:f0:df:54:8d:27:43:2f:
         e9:88:8b:54:bd:43:c6:c3:78:1c:2d:2a:be:81:7b:8e:c5:2a:
         ec:b6:85:5e:c4:2c:6d:5f:11:4d:ae:64:75:c4:84:08:45:36:
         3b:bf:74:d9:bc:79:9b:45:00:fd:9a:34:81:09:4b:1e:3b:cf:
         ac:c7:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org