Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a313330303a3a2f34302d3438203d3e20323035313532.roa
File:                     326130623a343334303a313330303a3a2f34302d3438203d3e20323035313532.roa (raw, json)
Hash identifier:          aFQa90XVSW/e0bHBWgYl7Ts8fkrfosKtst3bf9aujEw=
Subject key identifier:   88:2D:49:35:D6:E6:A0:59:23:CC:A2:6D:CF:D7:9C:AA:24:7E:41:A4
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       7D10B61B2C111E6E2F52BABCC3C71F2EF647806F
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a313330303a3a2f34302d3438203d3e20323035313532.roa
Signing time:             Sun 03 Dec 2023 21:38:21 +0000
ROA not before:           Sun 03 Dec 2023 21:33:21 +0000
ROA not after:            Sun 01 Dec 2024 21:38:21 +0000
asID:                     205152
IP address blocks:        2a0b:4340:1300::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:10:b6:1b:2c:11:1e:6e:2f:52:ba:bc:c3:c7:1f:2e:f6:47:80:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:21 2023 GMT
            Not After : Dec  1 21:38:21 2024 GMT
        Subject: CN=882D4935D6E6A05923CCA26DCFD79CAA247E41A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3f:01:fd:14:a3:b7:d2:bc:8c:00:27:a8:25:
                    89:4d:f4:4d:b0:50:cc:ca:da:80:b0:18:9c:ed:cd:
                    5c:a8:18:2b:98:b0:2f:32:bd:1c:4a:60:b6:60:ea:
                    ef:9b:8a:13:45:7b:0a:c1:d8:3b:26:60:b1:54:7b:
                    39:15:19:30:8d:98:47:0d:4b:c5:0d:9a:cf:8e:d0:
                    2f:4b:23:6f:fa:6d:f3:3e:35:d7:17:92:fc:6b:e9:
                    08:32:8d:06:a6:57:40:21:be:ad:04:c6:8a:c3:43:
                    51:d0:60:1d:4f:30:05:50:08:1f:60:b4:c7:6a:24:
                    54:86:66:83:0f:82:56:dc:12:17:7e:f8:0e:71:86:
                    5b:41:07:29:26:8b:e5:91:75:92:b9:52:10:1d:fc:
                    9a:4e:58:8a:17:c6:e4:fe:f9:08:c0:d3:87:b5:3a:
                    65:f4:c7:26:0f:a8:d2:14:41:1a:9c:54:6f:6c:bd:
                    ae:37:76:78:d9:dd:4f:72:1d:6e:38:b1:86:56:66:
                    28:7c:39:77:10:02:a5:6a:ea:d3:17:a3:0f:b2:36:
                    e9:3a:63:38:39:77:a1:7c:f6:65:07:36:17:6d:9b:
                    9f:4c:a4:0b:4e:6e:5c:c2:0b:5b:e0:42:ef:b6:ab:
                    de:2a:ef:d5:87:7d:0a:47:3d:5c:a7:53:51:44:0d:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2D:49:35:D6:E6:A0:59:23:CC:A2:6D:CF:D7:9C:AA:24:7E:41:A4
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a313330303a3a2f34302d3438203d3e20323035313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:05:cc:3a:2d:39:8e:95:c6:3e:da:2f:4d:13:55:de:bf:f4:
         b4:a1:a4:64:cd:52:57:ee:d4:c7:9e:0b:9a:dd:1d:97:0c:b0:
         97:7f:b4:55:a6:1a:74:ed:3b:35:43:18:ff:04:d3:a5:29:34:
         99:30:2d:68:fd:e3:4c:40:25:f3:e7:56:42:3b:16:7f:1c:63:
         4a:51:05:c7:64:f5:9d:35:48:5b:27:51:a0:0a:15:0f:84:9d:
         4c:f0:7d:ee:2c:85:aa:2c:fc:ac:3f:3c:a2:db:f0:c1:23:4a:
         a1:79:39:a9:47:6d:2a:c8:99:ec:d1:2c:82:87:ad:93:db:d4:
         9d:cd:6f:b4:ec:59:c6:b9:af:b9:5b:f0:12:63:84:74:35:66:
         96:e1:da:b8:ec:b3:f3:69:71:bf:f8:7c:a9:23:0e:c9:5a:01:
         8d:9c:47:1b:6e:08:5b:e7:63:eb:ff:a7:0b:d2:42:06:ea:bd:
         b4:9a:5e:a1:66:12:e2:11:c5:12:14:49:78:b2:77:6a:fa:f1:
         75:6c:2e:01:e0:24:22:93:c1:c0:63:1f:da:9c:86:f4:92:17:
         b5:b4:a9:8b:b4:07:ae:3b:33:fe:fe:3d:54:43:27:0e:70:12:
         97:04:6f:14:ed:c1:f3:eb:19:b2:cb:17:e7:9f:d4:33:aa:c0:
         87:c8:7e:1f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUfRC2GywRHm4vUrq8w8cfLvZHgG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjFaFw0yNDEyMDEyMTM4MjFaMDMxMTAvBgNV
BAMTKDg4MkQ0OTM1RDZFNkEwNTkyM0NDQTI2RENGRDc5Q0FBMjQ3RTQxQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrPwH9FKO30ryMACeoJYlN9E2w
UMzK2oCwGJztzVyoGCuYsC8yvRxKYLZg6u+bihNFewrB2DsmYLFUezkVGTCNmEcN
S8UNms+O0C9LI2/6bfM+NdcXkvxr6QgyjQamV0Ahvq0ExorDQ1HQYB1PMAVQCB9g
tMdqJFSGZoMPglbcEhd++A5xhltBBykmi+WRdZK5UhAd/JpOWIoXxuT++QjA04e1
OmX0xyYPqNIUQRqcVG9sva43dnjZ3U9yHW44sYZWZih8OXcQAqVq6tMXow+yNuk6
Yzg5d6F89mUHNhdtm59MpAtOblzCC1vgQu+2q94q79WHfQpHPVynU1FEDetzAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUiC1JNdbmoFkjzKJtz9ecqiR+QaQwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8yLzMyNjEzMDYyM2EzNDMzMzQzMDNhMzEzMzMw
MzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzUzMTM1MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgAqC0NAEzANBgkqhkiG9w0BAQsFAAOCAQEAZwXMOi05jpXGPtovTRNV3r/0tKGk
ZM1SV+7Ux54Lmt0dlwywl3+0VaYadO07NUMY/wTTpSk0mTAtaP3jTEAl8+dWQjsW
fxxjSlEFx2T1nTVIWydRoAoVD4SdTPB97iyFqiz8rD88otvwwSNKoXk5qUdtKsiZ
7NEsgoetk9vUnc1vtOxZxrmvuVvwEmOEdDVmluHauOyz82lxv/h8qSMOyVoBjZxH
G24IW+dj6/+nC9JCBuq9tJpeoWYS4hHFEhRJeLJ3avrxdWwuAeAkIpPBwGMf2pyG
9JIXtbSpi7QHrjsz/v49VEMnDnASlwRvFO3B8+sZsssX55/UM6rAh8h+Hw==
-----END CERTIFICATE-----