Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a313a3a2f34382d3438203d3e203530323234.roa
File:                     326130353a646663313a313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          4z0GVSIGqBH8Te28RkjGE6Il12iDWIoBBkOC0+S1KWU=
Subject key identifier:   58:C4:9C:C2:5E:66:24:12:E3:80:EA:91:D9:A6:0C:4D:55:2B:06:47
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       3803838B7E5B82564F5B3E4CE3D7C99ECA6E1210
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Sat 17 Jun 2023 01:56:29 +0000
ROA not before:           Sat 17 Jun 2023 01:51:29 +0000
ROA not after:            Sat 15 Jun 2024 01:56:29 +0000
asID:                     50224
IP address blocks:        2a05:dfc1:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 11:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:03:83:8b:7e:5b:82:56:4f:5b:3e:4c:e3:d7:c9:9e:ca:6e:12:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Jun 17 01:51:29 2023 GMT
            Not After : Jun 15 01:56:29 2024 GMT
        Subject: CN=58C49CC25E662412E380EA91D9A60C4D552B0647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:8c:5f:d8:fc:f2:cd:f5:b1:6c:a7:96:5d:
                    8e:4c:b5:e3:69:cf:03:c5:ba:68:bd:13:5c:ee:a1:
                    ec:c3:34:b0:bc:8a:87:54:23:cf:37:7f:58:d5:bd:
                    22:74:41:cb:0f:af:0f:3c:3d:5b:f7:f6:88:cd:6e:
                    94:e6:e1:58:ef:a6:3e:1a:3e:53:74:89:23:40:6f:
                    f0:97:e8:cf:49:fa:c5:b5:33:0f:5f:3a:f7:de:1c:
                    b7:28:8a:0e:85:bc:c3:7e:07:8f:ff:a8:12:51:53:
                    97:83:6e:fb:5d:2a:fc:b8:67:da:24:8a:4e:ef:55:
                    fd:b5:5d:10:d6:fe:ac:ec:4f:ad:ad:cc:20:94:02:
                    fe:33:4e:95:f0:38:bd:ed:b7:74:69:32:59:a5:18:
                    03:45:5a:d8:ee:d2:26:90:b1:80:a9:dc:c0:a3:9a:
                    d6:69:69:f5:97:da:65:09:ec:3d:01:b4:8a:91:60:
                    d4:2c:56:a7:ab:04:82:e9:ae:f7:6a:46:1b:90:c8:
                    6d:0a:31:ee:0a:23:a0:2c:1d:a6:8d:ad:0d:bf:28:
                    fc:20:7f:b3:31:b6:cb:68:be:4e:67:64:b1:52:13:
                    6c:39:63:10:32:27:8a:ff:5a:cb:d7:43:a6:69:fe:
                    f3:bf:3f:3f:25:ad:33:89:d1:74:51:64:bf:a2:cf:
                    4d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C4:9C:C2:5E:66:24:12:E3:80:EA:91:D9:A6:0C:4D:55:2B:06:47
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:a2:40:f9:6d:de:ee:5c:52:91:37:89:17:f4:bb:d5:d5:
         25:5a:41:a4:72:e1:e7:53:28:bc:e5:88:d5:16:c0:b6:62:09:
         12:e5:16:12:0d:2c:aa:17:a8:83:bf:db:79:09:99:df:da:bf:
         41:6f:79:35:b7:82:68:83:a8:1d:e8:29:6e:13:3f:3e:8b:d2:
         ee:60:1c:a8:c1:f7:18:60:99:0d:ca:11:b2:19:db:68:dc:25:
         f3:f8:c5:71:fc:44:f9:6f:50:07:5d:4b:8d:4a:be:7f:89:a1:
         e8:4b:30:a6:61:da:13:0a:9f:c5:cb:5f:a9:d0:01:b7:14:c1:
         54:a5:76:d7:79:63:dd:68:e1:0b:06:99:58:3f:de:45:f6:cd:
         9d:00:43:cc:56:d2:32:5a:2c:66:17:76:d7:ee:f5:40:6e:5b:
         a9:93:85:7d:6c:00:48:b9:fb:97:c9:c2:26:d7:a1:14:fb:25:
         c3:38:48:3d:b9:b0:51:1e:af:a6:6d:8a:3e:20:57:fb:e9:a9:
         8d:75:9f:72:70:51:1d:f7:dc:99:a1:25:17:6d:90:af:7e:e1:
         33:86:bb:78:db:83:a3:20:73:db:f6:4e:7b:d4:75:1b:d8:76:
         d7:47:d3:58:d9:73:69:e5:fc:d3:51:d9:4b:e6:ef:51:e0:cb:
         ce:74:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org