Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3138382e3234342e39362e302f32342d3234203d3e20323037313933.roa
File:                     3138382e3234342e39362e302f32342d3234203d3e20323037313933.roa (raw, json)
Hash identifier:          9UStZzJfyMYoxYcCzOFQ7Uh2MQ63OKy4pMfELm03gzs=
Subject key identifier:   06:E9:1B:61:F9:28:68:A4:42:69:E2:4B:D9:7F:9F:BB:24:75:68:E2
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       7AB1F14FE8B519C19D4C97340DA51F366EFCFCE6
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/3138382e3234342e39362e302f32342d3234203d3e20323037313933.roa
Signing time:             Sun 03 Dec 2023 21:38:25 +0000
ROA not before:           Sun 03 Dec 2023 21:33:25 +0000
ROA not after:            Sun 01 Dec 2024 21:38:25 +0000
asID:                     207193
IP address blocks:        188.244.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b1:f1:4f:e8:b5:19:c1:9d:4c:97:34:0d:a5:1f:36:6e:fc:fc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:25 2023 GMT
            Not After : Dec  1 21:38:25 2024 GMT
        Subject: CN=06E91B61F92868A44269E24BD97F9FBB247568E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:fa:b8:ae:a5:cc:bd:98:82:72:f2:cc:46:
                    83:f8:20:28:8e:ae:04:f8:5c:f8:91:b2:c6:77:0a:
                    78:00:a3:ef:32:cc:86:02:61:bf:b8:0b:bc:9b:49:
                    c2:da:5d:00:74:97:7e:ed:1e:3c:b9:b6:37:cf:ff:
                    ad:e6:59:19:93:55:a2:f8:49:1d:47:6a:8e:a8:42:
                    fa:2f:72:a5:5c:04:a1:3c:be:a7:2d:36:87:2f:be:
                    b6:47:fb:f6:d4:68:9c:6d:68:c6:1c:0d:4c:9a:17:
                    22:f0:9e:e6:12:94:37:45:4f:60:7a:14:0c:15:38:
                    e8:41:8d:1a:4b:67:55:54:f8:94:b8:0b:b7:c1:97:
                    23:7f:2f:03:43:3f:c6:71:59:82:69:c1:20:43:b7:
                    34:5a:64:e5:f8:4e:a0:f1:da:f5:c8:13:2a:32:c6:
                    e5:25:67:dc:7f:e6:d1:13:69:6d:2d:03:c1:7d:e2:
                    e1:cf:07:eb:39:92:0b:4e:97:6d:75:aa:0c:a9:d0:
                    20:43:b4:c0:6e:da:54:47:1c:ac:ec:d6:cb:2a:48:
                    0b:5d:bc:41:1b:16:73:73:35:77:d5:63:4c:ad:94:
                    3e:f0:93:48:54:44:5f:24:3a:43:93:f2:61:8b:58:
                    6f:e8:e8:f0:02:c4:88:f4:50:67:59:cd:4c:fb:a5:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E9:1B:61:F9:28:68:A4:42:69:E2:4B:D9:7F:9F:BB:24:75:68:E2
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3138382e3234342e39362e302f32342d3234203d3e20323037313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:81:d6:db:68:79:f4:2e:52:92:64:f0:7b:ee:2e:ff:44:
         74:a6:0d:da:3f:e1:18:d5:c5:90:15:2c:fc:56:19:53:85:29:
         9f:21:21:6e:f0:c0:95:8f:e5:76:4e:c3:33:64:fa:6a:95:b4:
         35:89:fa:c0:5b:eb:d8:57:5a:b3:7f:45:06:2b:32:89:c1:6d:
         45:94:8c:90:7c:ee:a7:6c:e7:04:64:02:0c:48:1c:1e:20:ca:
         67:56:78:83:df:a0:96:35:e6:3e:4d:36:47:d7:58:ac:5f:8b:
         76:3d:da:75:80:04:bc:ae:3d:cd:5a:08:9b:8d:17:ea:e9:e7:
         0c:66:ec:51:e4:be:80:4e:95:17:47:69:43:15:05:c6:09:6f:
         db:bc:71:62:68:18:ba:9c:fe:44:3e:97:cf:c3:2f:1b:5d:58:
         f9:93:c5:75:d0:b0:72:ee:db:3e:aa:b8:e8:15:e7:cd:39:c3:
         45:9b:c9:2a:85:0e:c1:5b:87:31:46:82:31:c3:1f:c2:40:c1:
         cc:d2:0b:03:b6:d4:ac:21:8e:52:43:be:3e:57:51:38:1a:a2:
         92:1f:b0:ea:db:f3:1f:59:a3:80:fc:5f:87:fc:dc:48:3e:40:
         4c:0b:6c:2a:6b:c5:e6:3b:69:94:a8:7f:16:70:56:48:73:c4:
         a8:65:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 21:59:22 2023 by rpki-client on console-fra.rpki-client.org