Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3138352e3230392e38342e302f32332d3234203d3e203537353738.roa
File:                     3138352e3230392e38342e302f32332d3234203d3e203537353738.roa (raw, json)
Hash identifier:          0jyKFQY6XQfEbwEtvS9fqRfu3kDoMiPEVQreo9mtl0k=
Subject key identifier:   9C:16:97:89:3F:75:03:F5:39:15:72:50:BC:97:17:91:10:EB:DD:09
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       6D8F54B848D314E8641D48BCFA596FCFAA351405
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/3138352e3230392e38342e302f32332d3234203d3e203537353738.roa
Signing time:             Sun 03 Dec 2023 21:38:25 +0000
ROA not before:           Sun 03 Dec 2023 21:33:25 +0000
ROA not after:            Sun 01 Dec 2024 21:38:25 +0000
asID:                     57578
IP address blocks:        185.209.84.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8f:54:b8:48:d3:14:e8:64:1d:48:bc:fa:59:6f:cf:aa:35:14:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:25 2023 GMT
            Not After : Dec  1 21:38:25 2024 GMT
        Subject: CN=9C1697893F7503F539157250BC97179110EBDD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:ed:68:f7:46:2e:4f:ec:71:ca:4a:d8:f2:
                    9d:b8:b0:33:21:db:29:2b:d4:ea:22:fe:72:71:3e:
                    3f:f6:23:c8:6e:04:14:83:fb:b4:5d:20:eb:ce:cb:
                    96:cb:18:8a:38:8f:e1:66:f3:b8:24:a6:c2:54:ec:
                    c3:4b:b5:c8:be:9c:50:b5:1f:60:e3:f2:28:df:ca:
                    be:8c:75:7f:aa:b5:87:b4:0d:21:6b:a6:6e:01:b8:
                    24:d1:cc:4a:19:fe:8c:0e:e5:3c:5f:33:e2:b0:4d:
                    64:d0:5b:5f:d9:47:2b:b4:d6:75:68:e0:1c:65:55:
                    b5:83:92:11:cd:ea:73:5a:e0:04:99:e5:e9:8f:1c:
                    57:bc:09:36:db:ce:7a:3e:44:75:f9:fe:2a:68:2b:
                    42:d4:f7:06:98:6d:9d:a0:5a:88:99:a4:7e:0c:d1:
                    71:0d:a2:42:0b:17:f8:c4:20:19:2f:b5:5e:00:b9:
                    e2:e4:b9:4d:36:c1:ae:b5:33:8d:00:e0:5c:fb:af:
                    ec:87:90:1d:f3:51:da:0e:d0:c2:2c:88:ca:63:22:
                    95:83:72:dc:49:29:56:1a:30:14:ef:32:1a:57:5d:
                    c3:a1:d7:e3:06:66:42:24:c6:37:e5:98:18:4e:4d:
                    6a:50:fb:2d:35:7b:ed:ea:c3:8d:27:89:eb:78:1f:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:97:89:3F:75:03:F5:39:15:72:50:BC:97:17:91:10:EB:DD:09
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3138352e3230392e38342e302f32332d3234203d3e203537353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:83:50:af:44:e9:51:1e:f7:61:bd:93:eb:b4:87:ec:93:d6:
         c2:25:bd:b9:09:9e:f1:f5:82:46:21:46:b8:cf:3c:1c:50:60:
         3b:a4:d4:53:a1:aa:67:ff:b1:5f:74:90:7a:15:95:f5:7c:44:
         14:c0:87:b6:f6:9e:c5:65:a9:68:43:3b:d5:d2:17:b2:42:2a:
         34:dd:15:40:da:88:d4:0d:f0:cc:b6:9e:42:05:9e:30:e4:79:
         b5:18:c2:bf:60:f3:5a:48:01:cb:a2:80:7d:a4:81:a4:0d:47:
         ef:2d:c6:de:20:2c:7d:5b:c7:96:90:d5:f3:73:d1:71:ce:f7:
         66:c2:73:c5:05:4e:f2:77:b4:eb:26:3f:4a:a9:83:c1:54:d5:
         80:22:ea:1d:02:bf:91:28:50:40:b1:1b:11:b9:e3:07:02:85:
         75:05:c0:f4:8f:60:34:61:bd:49:e1:9b:cf:fe:1b:13:3d:a8:
         8f:a8:f2:f3:60:bc:96:7d:ac:a0:03:ad:fd:dd:cc:d8:cf:7b:
         c4:0d:d5:6b:8d:e2:8b:a3:ca:38:f3:a0:1d:e3:dd:24:84:54:
         fb:2d:18:39:e8:7f:d6:7d:db:d7:1c:51:8b:d6:c3:bc:28:e5:
         f6:fc:17:65:c3:5c:3f:58:7f:7e:d9:40:d1:3a:04:e4:39:da:
         c1:9b:4e:20
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUbY9UuEjTFOhkHUi8+llvz6o1FAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjVaFw0yNDEyMDEyMTM4MjVaMDMxMTAvBgNV
BAMTKDlDMTY5Nzg5M0Y3NTAzRjUzOTE1NzI1MEJDOTcxNzkxMTBFQkREMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yu1o90YuT+xxykrY8p24sDMh
2ykr1Ooi/nJxPj/2I8huBBSD+7RdIOvOy5bLGIo4j+Fm87gkpsJU7MNLtci+nFC1
H2Dj8ijfyr6MdX+qtYe0DSFrpm4BuCTRzEoZ/owO5TxfM+KwTWTQW1/ZRyu01nVo
4BxlVbWDkhHN6nNa4ASZ5emPHFe8CTbbzno+RHX5/ipoK0LU9waYbZ2gWoiZpH4M
0XENokILF/jEIBkvtV4AueLkuU02wa61M40A4Fz7r+yHkB3zUdoO0MIsiMpjIpWD
ctxJKVYaMBTvMhpXXcOh1+MGZkIkxjflmBhOTWpQ+y01e+3qw40niet4H167AgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUnBaXiT91A/U5FXJQvJcXkRDr3QkwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzEzODM1MmUzMjMwMzkyZTM4MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM3MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudFUMA0GCSqG
SIb3DQEBCwUAA4IBAQAWg1CvROlRHvdhvZPrtIfsk9bCJb25CZ7x9YJGIUa4zzwc
UGA7pNRToapn/7FfdJB6FZX1fEQUwIe29p7FZaloQzvV0heyQio03RVA2ojUDfDM
tp5CBZ4w5Hm1GMK/YPNaSAHLooB9pIGkDUfvLcbeICx9W8eWkNXzc9FxzvdmwnPF
BU7yd7TrJj9KqYPBVNWAIuodAr+RKFBAsRsRueMHAoV1BcD0j2A0Yb1J4ZvP/hsT
PaiPqPLzYLyWfaygA6393czYz3vEDdVrjeKLo8o486Ad490khFT7LRg56H/WfdvX
HFGL1sO8KOX2/Bdlw1w/WH9+2UDROgTkOdrBm04g
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org