Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a32303a3a2f34342d3438203d3e20323035363531.roa
File:                     326130623a343334303a32303a3a2f34342d3438203d3e20323035363531.roa (raw, json)
Hash identifier:          SNtMgQB+j/EVQ8544gFmXuBYDxovG9IJvX06lmkrp6c=
Subject key identifier:   28:1A:F7:F4:67:16:C7:1E:58:6C:32:8D:D0:EB:8B:4A:4C:36:78:42
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       06BE474A7AC572DC7370E12DB41AF6658271D980
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a32303a3a2f34342d3438203d3e20323035363531.roa
Signing time:             Sun 03 Dec 2023 21:38:21 +0000
ROA not before:           Sun 03 Dec 2023 21:33:21 +0000
ROA not after:            Sun 01 Dec 2024 21:38:21 +0000
asID:                     205651
IP address blocks:        2a0b:4340:20::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:be:47:4a:7a:c5:72:dc:73:70:e1:2d:b4:1a:f6:65:82:71:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:21 2023 GMT
            Not After : Dec  1 21:38:21 2024 GMT
        Subject: CN=281AF7F46716C71E586C328DD0EB8B4A4C367842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:39:51:a9:e4:45:73:75:12:16:8b:23:8a:
                    91:56:f5:f2:8e:d5:85:1d:c3:98:c1:80:69:ad:71:
                    72:ba:88:a1:dd:a4:32:4c:d2:ae:0f:a0:f3:56:e3:
                    42:82:b7:8c:5d:4a:19:df:69:6a:37:8e:45:82:8c:
                    4e:25:cc:7c:25:9d:fb:96:80:e4:1c:36:e0:8b:e4:
                    53:71:3d:34:21:6d:f6:98:e8:5d:b9:78:8b:22:99:
                    ad:10:5e:4e:5c:23:f0:30:b1:44:90:cd:8f:6c:a5:
                    d8:1e:22:bb:60:ab:2b:b0:69:ed:19:22:58:6b:ec:
                    d8:35:19:0c:f3:8f:2c:e2:d6:c2:e3:3a:12:48:54:
                    3d:73:ba:bb:60:9e:08:ab:ce:fa:78:36:76:8b:d9:
                    f7:03:f1:4d:cd:96:9f:ab:9c:ad:83:37:61:fb:5f:
                    61:14:ea:43:46:cd:ea:c7:60:66:7c:b6:b9:93:f4:
                    92:70:a2:95:cb:8e:d8:ac:ed:c4:82:cf:54:4c:39:
                    c1:de:d0:fd:de:be:fa:d3:69:c9:da:22:b0:38:dc:
                    68:7d:22:a3:98:47:b0:b3:40:fc:36:25:7d:6b:a4:
                    9a:a9:75:b1:49:e5:46:ec:a6:94:79:52:2d:df:54:
                    5a:dc:e9:fa:9d:8e:82:46:86:39:4f:37:8f:1e:8b:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1A:F7:F4:67:16:C7:1E:58:6C:32:8D:D0:EB:8B:4A:4C:36:78:42
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a32303a3a2f34342d3438203d3e20323035363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:22:7a:1f:31:77:b0:fb:d1:cc:21:0e:24:e9:ac:45:55:b9:
         b8:cb:a1:12:69:3a:9b:e7:ca:cc:ff:07:57:56:ab:71:39:b6:
         52:dd:d9:7d:f1:ac:c6:90:bd:d9:6d:60:48:b6:22:dd:89:ab:
         96:e6:46:59:90:43:03:00:30:c1:81:5c:0b:4c:3d:4c:8f:7b:
         44:ef:f1:8d:c0:47:44:c6:a4:6a:99:8b:6a:20:a7:57:ce:4f:
         6d:12:5a:ff:ae:2a:8a:36:c8:1e:b8:8d:d9:4c:5c:d5:49:a1:
         1e:49:6a:3c:c2:e5:a2:1d:17:a6:a5:cf:82:47:4d:ba:29:12:
         16:64:69:38:94:54:43:4f:3a:9a:61:86:ed:5f:bd:f8:14:8f:
         bf:a8:5a:63:69:c3:fc:2d:aa:99:80:f1:77:fa:2e:55:03:8b:
         72:dd:8d:31:f5:01:38:1a:bc:90:76:86:f4:4a:d1:d0:90:c9:
         c0:b5:20:72:19:61:27:26:ee:9f:ce:05:cf:03:bf:a1:67:db:
         83:b8:49:78:84:67:a4:ac:9d:b7:5c:2d:fd:ea:99:fc:79:b0:
         14:47:c8:19:76:2c:bc:50:77:5f:75:83:c0:59:55:11:95:88:
         9b:7a:19:90:86:4a:61:5d:d2:3c:0e:8f:f4:45:f4:b4:af:49:
         eb:ab:27:f3
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUBr5HSnrFctxzcOEttBr2ZYJx2YAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjFaFw0yNDEyMDEyMTM4MjFaMDMxMTAvBgNV
BAMTKDI4MUFGN0Y0NjcxNkM3MUU1ODZDMzI4REQwRUI4QjRBNEMzNjc4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncDlRqeRFc3USFosjipFW9fKO
1YUdw5jBgGmtcXK6iKHdpDJM0q4PoPNW40KCt4xdShnfaWo3jkWCjE4lzHwlnfuW
gOQcNuCL5FNxPTQhbfaY6F25eIsima0QXk5cI/AwsUSQzY9spdgeIrtgqyuwae0Z
Ilhr7Ng1GQzzjyzi1sLjOhJIVD1zurtgngirzvp4NnaL2fcD8U3Nlp+rnK2DN2H7
X2EU6kNGzerHYGZ8trmT9JJwopXLjtis7cSCz1RMOcHe0P3evvrTacnaIrA43Gh9
IqOYR7CzQPw2JX1rpJqpdbFJ5UbsppR5Ui3fVFrc6fqdjoJGhjlPN48eizYJAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUKBr39GcWxx5YbDKN0OuLSkw2eEIwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8yLzMyNjEzMDYyM2EzNDMzMzQzMDNhMzIzMDNh
M2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAzNTM2MzUzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoL
Q0AAIDANBgkqhkiG9w0BAQsFAAOCAQEAnCJ6HzF3sPvRzCEOJOmsRVW5uMuhEmk6
m+fKzP8HV1arcTm2Ut3ZffGsxpC92W1gSLYi3YmrluZGWZBDAwAwwYFcC0w9TI97
RO/xjcBHRMakapmLaiCnV85PbRJa/64qijbIHriN2Uxc1UmhHklqPMLloh0XpqXP
gkdNuikSFmRpOJRUQ086mmGG7V+9+BSPv6haY2nD/C2qmYDxd/ouVQOLct2NMfUB
OBq8kHaG9ErR0JDJwLUgchlhJybun84FzwO/oWfbg7hJeIRnpKydt1wt/eqZ/Hmw
FEfIGXYsvFB3X3WDwFlVEZWIm3oZkIZKYV3SPA6P9EX0tK9J66sn8w==
-----END CERTIFICATE-----
Generated at Wed Dec 20 21:55:09 2023 by rpki-client on console-ams.rpki-client.org