Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231342e302f32342d3234203d3e203434343231.roa
File:                     3138352e3233342e3231342e302f32342d3234203d3e203434343231.roa (raw, json)
Hash identifier:          Hik7iIMpHge5qBpYmoFVmCZMvYTMzZdGvkTpsdNbbN4=
Subject key identifier:   30:36:D3:5A:87:C0:54:BE:B4:FB:7D:ED:21:DF:02:3B:3E:D5:87:9D
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       3B59CEE5FF74BC9A95EABDFC26189B576A879659
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231342e302f32342d3234203d3e203434343231.roa
Signing time:             Sun 03 Dec 2023 21:38:27 +0000
ROA not before:           Sun 03 Dec 2023 21:33:27 +0000
ROA not after:            Sun 01 Dec 2024 21:38:27 +0000
asID:                     44421
IP address blocks:        185.234.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:59:ce:e5:ff:74:bc:9a:95:ea:bd:fc:26:18:9b:57:6a:87:96:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:27 2023 GMT
            Not After : Dec  1 21:38:27 2024 GMT
        Subject: CN=3036D35A87C054BEB4FB7DED21DF023B3ED5879D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:c6:23:8f:7b:a3:be:02:05:5c:f4:03:6a:
                    7e:3b:b6:40:ea:ff:34:a2:76:0b:37:44:bd:d6:e7:
                    8d:19:36:77:95:01:de:d2:38:ef:ed:bd:29:23:8d:
                    f1:a8:a3:ce:46:e7:6f:36:15:0a:80:d5:db:a9:28:
                    b5:5f:21:ce:b6:86:06:32:c7:73:6e:2b:aa:ff:ab:
                    96:75:cf:f3:8e:1c:01:6d:4a:5f:47:fb:bd:5c:ab:
                    5d:9a:44:8b:6d:51:bf:8c:ad:08:53:1f:74:c4:6b:
                    7d:eb:14:e8:01:66:01:64:c3:ad:2f:26:38:59:9f:
                    9e:a4:a0:ee:90:d6:03:32:89:4f:c9:dc:71:ff:f9:
                    41:0b:4e:8f:ba:12:87:19:20:01:47:17:2a:ac:05:
                    53:33:17:85:80:c5:e8:e1:0a:aa:b6:90:70:3a:42:
                    0f:46:2f:93:5c:1c:b8:13:86:92:37:58:aa:7d:af:
                    ba:65:b7:60:4a:2c:48:71:d7:0c:52:34:6d:40:9a:
                    4b:1e:68:f8:03:50:67:a7:36:40:14:cc:78:d4:16:
                    a4:40:c4:eb:5a:f0:a7:5c:3b:64:56:15:2f:95:1f:
                    99:61:39:c8:a5:15:24:ee:af:51:9d:09:0f:c8:5b:
                    18:27:f5:be:7f:2f:f8:e9:6d:45:fe:a4:3e:84:63:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:36:D3:5A:87:C0:54:BE:B4:FB:7D:ED:21:DF:02:3B:3E:D5:87:9D
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3138352e3233342e3231342e302f32342d3234203d3e203434343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:12:94:cc:91:ae:a4:3a:cb:f9:c3:54:ad:cc:65:2c:11:47:
         cb:85:2f:76:2f:03:55:e0:f1:e9:a3:df:3b:87:9d:43:ee:82:
         7e:3b:d2:87:9d:3c:57:dd:1f:31:6c:ce:a9:4f:4a:f9:ff:92:
         42:88:d0:30:d2:60:16:f4:03:75:a2:04:48:6b:b7:9d:51:9f:
         7e:d3:81:58:63:83:4c:87:a6:eb:c6:43:12:7f:9e:fe:68:5f:
         19:ca:a9:42:64:d0:9b:8a:29:ca:43:17:11:45:e8:99:a8:2c:
         94:61:53:dc:f7:e0:3f:ff:a3:0a:e7:cc:74:64:d3:d6:27:7d:
         71:39:88:0f:78:d3:d2:d5:31:67:28:40:73:01:52:c0:62:fa:
         9a:5e:84:82:c1:c1:34:fb:37:8b:0e:94:77:5d:d1:28:5a:67:
         a4:9b:21:47:83:fc:c7:0e:b3:3a:60:a3:83:1c:6e:10:ce:9f:
         a1:78:be:e1:9b:03:1f:9d:ca:c8:1a:48:22:b4:70:80:33:bf:
         31:f6:24:7f:db:0e:4d:90:cf:75:ce:da:cf:a7:a0:15:d8:dd:
         e7:ef:db:9e:85:34:2f:78:a7:5f:d7:d0:aa:d7:5a:33:18:e5:
         ec:93:f5:49:9a:34:8b:1e:14:f5:48:73:00:5c:4e:4e:35:ad:
         65:5b:f5:a0
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgIUO1nO5f90vJqV6r38JhibV2qHllkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjdaFw0yNDEyMDEyMTM4MjdaMDMxMTAvBgNV
BAMTKDMwMzZEMzVBODdDMDU0QkVCNEZCN0RFRDIxREYwMjNCM0VENTg3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKA8Yjj3ujvgIFXPQDan47tkDq
/zSidgs3RL3W540ZNneVAd7SOO/tvSkjjfGoo85G5282FQqA1dupKLVfIc62hgYy
x3NuK6r/q5Z1z/OOHAFtSl9H+71cq12aRIttUb+MrQhTH3TEa33rFOgBZgFkw60v
JjhZn56koO6Q1gMyiU/J3HH/+UELTo+6EocZIAFHFyqsBVMzF4WAxejhCqq2kHA6
Qg9GL5NcHLgThpI3WKp9r7plt2BKLEhx1wxSNG1AmkseaPgDUGenNkAUzHjUFqRA
xOta8KdcO2RWFS+VH5lhOcilFSTur1GdCQ/IWxgn9b5/L/jpbUX+pD6EYwphAgMB
AAGjggHWMIIB0jAdBgNVHQ4EFgQUMDbTWofAVL60+33tId8COz7Vh50wHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4ZgcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzEzODM1MmUzMjMzMzQyZTMyMzEzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzQzNDMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC56tYwDQYJ
KoZIhvcNAQELBQADggEBAJESlMyRrqQ6y/nDVK3MZSwRR8uFL3YvA1Xg8emj3zuH
nUPugn470oedPFfdHzFszqlPSvn/kkKI0DDSYBb0A3WiBEhrt51Rn37TgVhjg0yH
puvGQxJ/nv5oXxnKqUJk0JuKKcpDFxFF6JmoLJRhU9z34D//owrnzHRk09YnfXE5
iA9409LVMWcoQHMBUsBi+ppehILBwTT7N4sOlHdd0ShaZ6SbIUeD/McOszpgo4Mc
bhDOn6F4vuGbAx+dysgaSCK0cIAzvzH2JH/bDk2Qz3XO2s+noBXY3efv256FNC94
p1/X0KrXWjMY5eyT9UmaNIseFPVIcwBcTk41rWVb9aA=
-----END CERTIFICATE-----
Generated at Wed Dec 20 21:59:22 2023 by rpki-client on console-fra.rpki-client.org