Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a313530303a3a2f34342d3438203d3e203438383833.roa
File:                     326130623a343334303a313530303a3a2f34342d3438203d3e203438383833.roa (raw, json)
Hash identifier:          BLK2sSoGctcc207a3Z+0Yb+bELSJxo7GpvTDm0XmnNg=
Subject key identifier:   D8:2A:73:2F:33:14:0C:18:0C:BB:C8:7D:53:38:F3:36:47:85:E5:16
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       738F390D410CB49FDE162F2BB363AD06EA8B1904
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a313530303a3a2f34342d3438203d3e203438383833.roa
Signing time:             Sun 03 Dec 2023 21:38:27 +0000
ROA not before:           Sun 03 Dec 2023 21:33:27 +0000
ROA not after:            Sun 01 Dec 2024 21:38:27 +0000
asID:                     48883
IP address blocks:        2a0b:4340:1500::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8f:39:0d:41:0c:b4:9f:de:16:2f:2b:b3:63:ad:06:ea:8b:19:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:27 2023 GMT
            Not After : Dec  1 21:38:27 2024 GMT
        Subject: CN=D82A732F33140C180CBBC87D5338F3364785E516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:3d:05:9a:bd:8e:fd:29:e3:e3:80:1a:ef:
                    f2:3a:0a:96:45:5d:18:a5:d4:3a:77:a9:3a:6a:1d:
                    c6:d1:b5:bf:6e:16:7d:51:ad:a7:25:87:4b:75:8c:
                    4d:a0:61:34:66:66:02:a1:b0:ed:68:d3:48:7c:5b:
                    94:a8:c2:26:66:e4:67:83:4a:70:3d:0c:44:da:d3:
                    8b:7b:ce:c4:67:ca:2a:98:0c:4b:61:96:1c:fc:e8:
                    fa:b0:7d:7b:ef:85:72:0e:24:3d:55:5f:e7:fd:6f:
                    ba:14:ea:6d:60:cc:69:a1:6a:c6:d7:b7:a3:10:e6:
                    36:8f:c1:b5:4a:e0:d3:f3:f1:d7:8f:2c:a2:b0:cb:
                    62:a1:d8:67:62:e8:4f:d0:0d:40:36:3e:53:ec:7e:
                    ef:ed:aa:92:87:28:63:cd:fd:49:7b:0a:5b:c4:55:
                    11:fe:91:41:2b:75:81:41:8f:b1:b6:b6:d4:cd:cf:
                    00:32:f2:03:7e:30:fa:16:ed:2a:71:0a:a8:dd:41:
                    c5:28:e0:a2:ac:0d:28:7b:2c:0e:e7:ef:a3:98:67:
                    92:4d:cf:12:a4:fc:f1:ed:d3:25:d1:24:06:47:1b:
                    6e:5f:4d:a4:d4:54:5d:f1:2b:db:44:62:b0:1f:c5:
                    d1:94:15:5c:7d:ce:26:d1:16:68:aa:6d:3a:1b:93:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2A:73:2F:33:14:0C:18:0C:BB:C8:7D:53:38:F3:36:47:85:E5:16
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a313530303a3a2f34342d3438203d3e203438383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:1500::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:78:58:24:1d:85:99:f7:b1:a7:85:97:b7:85:de:27:35:
         12:d3:b0:cc:12:61:90:9c:85:4d:66:c4:9a:04:1b:bb:29:57:
         c2:e3:3e:78:c6:d3:dd:88:a1:3a:de:f7:c2:eb:79:4b:fa:a1:
         62:b4:fe:74:c1:2b:81:75:4f:bc:fe:d0:89:05:d1:08:08:72:
         9f:e6:da:bf:09:58:fd:6f:18:cb:f4:bf:d7:26:54:40:87:e0:
         ba:39:60:16:d4:40:76:73:ed:90:ee:85:96:b9:3a:2b:2c:83:
         84:b8:b4:40:24:39:de:b3:36:96:66:03:69:c4:05:ae:55:c5:
         c9:ad:3d:46:d7:b0:47:e8:32:aa:72:e7:38:37:30:cb:96:09:
         35:10:3a:d4:5c:2f:45:d4:a1:aa:93:42:3f:e7:b1:48:63:3d:
         16:3b:8a:0e:6f:a6:68:ef:85:de:de:0c:90:93:49:a9:f9:d5:
         7b:6f:a6:d6:64:b7:10:49:0b:6e:0a:a7:53:51:cf:a7:94:7c:
         eb:ce:84:27:83:2f:09:f1:77:70:d9:42:b6:a1:6d:b1:1b:ca:
         bb:24:6a:ce:83:63:f8:4a:d2:f4:80:7b:35:44:11:6e:f9:3f:
         93:22:69:92:a6:98:83:81:23:7a:03:c5:95:d2:c4:c6:1c:68:
         69:84:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org