Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3134362e31392e332e302f32342d3234203d3e203335343837.roa
File:                     3134362e31392e332e302f32342d3234203d3e203335343837.roa (raw, json)
Hash identifier:          9guB54N5eqHbadUaBMP+9s4ZfC6vl/dpaY734ZlTyl0=
Subject key identifier:   66:4D:59:DA:89:59:9A:AA:A9:A3:EF:F8:CB:51:0D:67:53:4A:3C:6C
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       750DBCA39B79ECD4802B0E255C0FB2C85F1580B6
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/3134362e31392e332e302f32342d3234203d3e203335343837.roa
Signing time:             Wed 13 Dec 2023 12:02:13 +0000
ROA not before:           Wed 13 Dec 2023 11:57:13 +0000
ROA not after:            Wed 11 Dec 2024 12:02:13 +0000
asID:                     35487
IP address blocks:        146.19.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0d:bc:a3:9b:79:ec:d4:80:2b:0e:25:5c:0f:b2:c8:5f:15:80:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 13 11:57:13 2023 GMT
            Not After : Dec 11 12:02:13 2024 GMT
        Subject: CN=664D59DA89599AAAA9A3EFF8CB510D67534A3C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:de:ed:47:5a:ff:b4:4f:17:62:14:d0:03:
                    9e:be:38:e5:c4:a5:01:e6:db:8f:ed:71:54:52:4b:
                    13:dd:c6:3d:e1:c2:e2:13:8c:d3:dd:07:b9:03:c8:
                    6b:6e:6b:8b:2c:65:d2:20:f2:f9:7d:3a:fc:7f:bf:
                    b1:d8:56:ae:b1:2b:e7:76:bd:74:e7:bb:df:63:24:
                    df:18:a7:3f:5e:40:81:f5:e3:6e:0e:b6:c0:18:71:
                    ca:fc:6f:b5:35:86:0a:b2:e3:ce:c9:d2:4b:4a:ee:
                    b0:3e:6c:e4:8d:74:49:3c:1d:23:9f:c4:0f:59:3e:
                    0d:37:a0:18:72:01:f6:a2:5f:6d:a4:d0:27:f5:59:
                    b8:ab:60:b5:14:bb:e2:2e:e1:c4:d4:62:a9:80:96:
                    36:2d:d4:13:06:34:db:5e:3a:e2:ec:98:8c:0b:1b:
                    70:31:11:8d:71:b5:49:e9:5a:54:1a:a9:c1:2a:8f:
                    f1:dc:35:e7:e4:55:cc:20:5c:7d:ad:aa:a6:5c:a8:
                    a8:9c:c8:10:61:a0:91:ce:4b:fb:4b:3d:37:b6:93:
                    ad:ae:bd:30:c6:5f:d4:7b:42:c0:61:28:b7:a9:c0:
                    ef:29:79:67:56:97:17:db:ec:4a:d9:34:ee:de:ec:
                    d6:3b:68:2c:7b:94:e7:aa:1a:07:0b:6e:96:dd:6d:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:59:DA:89:59:9A:AA:A9:A3:EF:F8:CB:51:0D:67:53:4A:3C:6C
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3134362e31392e332e302f32342d3234203d3e203335343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:fd:dd:01:fb:9a:b2:d2:5d:d5:95:78:dc:15:08:6c:66:
         11:1e:e4:8b:bd:ba:32:d3:3b:03:9a:ff:a5:60:aa:8f:0f:06:
         d3:5f:ff:42:e9:19:55:c6:95:9c:19:f2:f1:50:14:14:07:f0:
         eb:6a:74:62:1e:49:1a:f2:b6:cb:02:29:50:22:79:ea:95:42:
         d9:98:08:88:d1:16:30:da:8c:c9:82:0d:bb:5a:bc:d6:af:17:
         33:14:5d:2f:b5:7b:f4:61:02:81:54:4a:5a:42:71:43:7d:a8:
         49:8c:a6:19:10:8f:5e:be:76:21:8b:0f:bf:6f:17:9f:ba:5b:
         b3:de:1c:71:10:e6:e9:9a:ac:be:21:16:81:17:1b:aa:12:aa:
         60:b6:12:2d:12:22:90:a7:14:60:44:f3:a1:3b:ae:70:34:ab:
         24:e1:d7:8f:1c:85:55:52:ba:4f:1e:bd:55:0f:fb:02:c2:c7:
         e6:f4:99:90:50:03:66:0b:37:42:ed:d8:d2:e1:d3:b0:1e:e9:
         7d:d6:6a:1b:49:e7:08:92:d0:b7:30:a5:9c:0b:b4:d8:b1:59:
         fd:97:b8:df:92:90:61:22:57:8f:05:34:1d:61:22:58:06:64:
         2e:e8:00:15:ad:8b:79:4e:d4:f0:73:b1:11:56:de:7c:b0:f8:
         10:42:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----