Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3134322e3234372e302f32342d3234203d3e20393137.roa
File:                     34352e3134322e3234372e302f32342d3234203d3e20393137.roa (raw, json)
Hash identifier:          dYpY7ONAV+QfpEEPjKS/QBfnMMC/j4tsqTef4AuIYFY=
Subject key identifier:   74:16:B8:5F:85:01:35:4A:6D:26:72:E2:76:BE:3B:7E:37:36:4E:FF
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       20967C9F1706065D8A45EBF3E1EB111CE94BCC37
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234372e302f32342d3234203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:26 +0000
ROA not before:           Sun 03 Dec 2023 21:33:26 +0000
ROA not after:            Sun 01 Dec 2024 21:38:26 +0000
asID:                     917
IP address blocks:        45.142.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:96:7c:9f:17:06:06:5d:8a:45:eb:f3:e1:eb:11:1c:e9:4b:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:26 2023 GMT
            Not After : Dec  1 21:38:26 2024 GMT
        Subject: CN=7416B85F8501354A6D2672E276BE3B7E37364EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:85:ad:df:bf:6f:ce:09:14:d3:47:30:9d:
                    e9:96:b7:80:c1:75:00:26:30:d6:1a:8f:ba:88:ec:
                    54:44:05:bd:d4:1d:f4:42:ae:6d:5f:a4:4f:fc:dd:
                    81:3e:a8:a2:b2:e0:32:9a:64:22:4f:60:bf:4f:43:
                    ed:6b:cc:a8:17:ea:0d:da:e3:39:38:69:a6:a6:1f:
                    40:2e:c2:be:fb:f1:cf:2c:01:60:fb:04:61:bb:51:
                    53:e7:e8:d0:e9:3e:13:77:d0:29:30:c2:75:1d:9c:
                    34:5b:03:52:71:af:06:7d:8b:b4:e6:41:3c:aa:28:
                    39:e2:de:59:dc:ce:5a:48:b9:5e:1a:83:05:25:d8:
                    72:93:fc:f7:8c:9e:7b:7c:2d:22:4f:6c:87:c0:63:
                    d2:f8:1b:26:7c:e0:98:a8:5f:d1:32:48:55:b9:41:
                    90:38:ae:1a:3d:ad:75:01:93:27:a1:07:92:06:7e:
                    3c:fa:96:69:87:eb:de:2d:6a:f4:e9:e5:3f:1c:f4:
                    3d:82:2a:17:a0:98:5e:b3:d1:dd:37:36:fa:fc:c0:
                    32:50:10:65:aa:4a:18:d4:24:27:08:dd:11:a0:91:
                    fe:67:9a:da:a9:9b:9c:e6:c3:6a:3c:8f:4f:6e:63:
                    89:40:e5:7e:85:27:86:6a:0a:53:44:53:a9:91:30:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:16:B8:5F:85:01:35:4A:6D:26:72:E2:76:BE:3B:7E:37:36:4E:FF
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234372e302f32342d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:10:e9:0b:86:9a:79:0b:3d:1e:d2:b5:e8:d9:74:b8:57:
         3c:b0:23:b1:e9:36:8f:6e:84:48:2d:e1:92:e6:8d:8d:3e:b6:
         05:96:d2:3e:b6:6b:a1:45:7d:58:a0:95:41:a7:f7:a3:30:b6:
         d1:9e:1f:e3:0c:f8:33:9e:1e:18:94:e7:cb:a4:ba:44:e0:81:
         41:b9:3c:49:02:58:7e:a1:43:d4:e8:c9:d5:91:f5:5c:cb:b0:
         b7:13:27:c7:b8:8e:cd:6c:61:d7:e6:e6:ae:b6:93:2a:68:6e:
         1f:07:71:a0:63:ff:cb:de:a1:ad:fa:89:ed:03:22:c1:43:3e:
         79:f3:9d:2b:77:5a:88:b7:e9:a5:8c:54:b3:44:33:fe:08:34:
         4e:f0:a5:9d:5a:13:94:cc:53:b5:cf:db:48:46:49:56:f9:f3:
         75:57:c8:94:53:3b:7d:d1:44:d5:5e:e3:ed:f2:26:ba:2a:cc:
         9b:fa:32:8a:da:1d:27:c2:2d:5b:da:f9:51:86:12:4a:a8:5c:
         de:5a:06:c2:c4:bd:2c:d5:49:bf:d8:7f:22:46:d2:c7:f9:4c:
         b2:2f:7e:11:d1:7a:75:75:bc:66:03:03:46:ec:87:b5:ad:31:
         c0:f4:95:89:b9:7c:00:9e:6f:f7:48:fa:2d:86:5c:80:be:87:
         64:19:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org