Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/3139342e34352e3130312e302f32342d3234203d3e203537363935.roa
File:                     3139342e34352e3130312e302f32342d3234203d3e203537363935.roa (raw, json)
Hash identifier:          CKOfwJUcMyTwMRaz0Yspnx6lDSWBLmSxfA1KbRyGWbU=
Subject key identifier:   8C:9B:93:92:F0:CA:61:A3:86:62:1F:00:8A:0A:79:82:BB:91:AA:52
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       7DB75CA328FB57D8C6A10FA4FC3F7EC70E1C31B0
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/3139342e34352e3130312e302f32342d3234203d3e203537363935.roa
Signing time:             Thu 14 Dec 2023 19:58:19 +0000
ROA not before:           Thu 14 Dec 2023 19:53:19 +0000
ROA not after:            Thu 12 Dec 2024 19:58:19 +0000
asID:                     57695
IP address blocks:        194.45.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b7:5c:a3:28:fb:57:d8:c6:a1:0f:a4:fc:3f:7e:c7:0e:1c:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 14 19:53:19 2023 GMT
            Not After : Dec 12 19:58:19 2024 GMT
        Subject: CN=8C9B9392F0CA61A386621F008A0A7982BB91AA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:6a:c9:52:cf:69:53:cc:b3:9b:c7:96:0e:
                    30:1e:b4:25:0e:b2:fd:f7:eb:ac:10:c4:17:81:7d:
                    1f:09:13:46:42:89:a7:ad:37:b2:50:dc:7b:4b:bc:
                    7e:6e:77:22:3a:f4:38:2a:66:22:3d:78:19:d9:b6:
                    50:64:3d:9b:36:8b:85:50:10:1e:5c:f3:0d:f0:e4:
                    81:6b:70:ae:f7:ba:2d:db:b4:ea:70:43:09:ec:91:
                    73:89:79:e3:5f:38:94:9b:1d:2a:ef:93:7f:ff:9e:
                    cc:54:4f:89:77:6e:0a:e3:ac:fc:42:f3:14:1d:3a:
                    5b:c8:ba:8d:b6:5c:6a:78:77:20:a0:fa:2b:72:1b:
                    ff:d6:86:4c:c6:69:9e:fa:da:4f:c1:ad:87:3a:83:
                    c2:15:bc:c9:75:3e:37:23:b0:38:81:75:45:8c:08:
                    38:76:d3:8a:e7:25:c5:84:55:e3:e4:9a:89:d8:93:
                    81:23:9a:27:88:ef:24:88:e5:11:86:d1:2e:2e:70:
                    55:c1:b2:9e:e9:28:57:04:c4:2a:47:48:09:c2:4f:
                    89:26:4e:86:52:9d:63:a0:d4:44:75:a5:65:a0:d0:
                    e9:17:34:1e:a9:22:56:f1:a4:c3:31:bd:3f:8f:40:
                    38:eb:dd:90:11:a4:16:27:3c:6c:f8:cb:53:5d:56:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:93:92:F0:CA:61:A3:86:62:1F:00:8A:0A:79:82:BB:91:AA:52
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/3139342e34352e3130312e302f32342d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.45.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:bf:5a:f7:b4:00:a3:0f:5b:fb:d5:bd:58:17:42:b5:9d:72:
         dd:f4:9f:7b:a3:c0:9d:b0:c4:2d:13:9a:5d:2e:ea:b5:d4:49:
         0c:e3:c1:0d:39:b2:42:0d:66:0a:5f:34:01:7e:b2:c2:ae:cf:
         3c:b9:9b:bb:fa:52:9c:0d:bf:50:7c:96:a7:fa:96:fd:57:00:
         28:89:45:82:36:db:90:ea:6a:ed:f1:fb:ba:40:6a:1d:36:27:
         7d:74:92:af:64:2f:35:68:1d:f9:3d:b9:b0:3c:40:eb:65:87:
         68:da:7d:24:b7:bc:8d:c5:64:00:32:f4:8f:07:48:dc:4e:79:
         1a:db:f6:00:eb:72:6c:70:a3:63:11:fe:43:6b:bb:16:4a:e8:
         fb:36:3c:7d:f9:d4:98:17:2c:80:dc:48:a3:c7:15:06:b7:69:
         d9:e4:e6:7d:7b:5e:8f:04:68:57:47:1a:76:91:ec:bf:84:fd:
         fd:02:cf:88:27:e9:c4:72:88:2b:e8:b8:f3:d6:5e:0c:2e:96:
         37:c4:f0:c7:07:1d:67:40:2b:ac:ad:2d:af:5d:fa:03:d5:c8:
         7f:6b:f9:5a:5a:b6:a3:14:f2:fb:16:0c:b5:63:3f:38:9f:87:
         b5:e2:77:d1:4f:3a:74:f8:0d:f2:25:92:25:24:fb:3b:0e:76:
         14:ce:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org