Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a33303a3a2f34342d3438203d3e203431393739.roa
File:                     326130623a343334303a33303a3a2f34342d3438203d3e203431393739.roa (raw, json)
Hash identifier:          u6ZgDm+KEBkeO20IXQhrr5Su3JYtWGs6FgFwD8/nMAA=
Subject key identifier:   60:2C:A5:B1:76:66:2F:AB:D0:4C:68:EB:D2:AE:5E:38:7B:F7:93:99
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       0D2CFF0FD6FFFE0657FF0D6637E5B4744126673A
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a33303a3a2f34342d3438203d3e203431393739.roa
Signing time:             Sun 03 Dec 2023 21:38:19 +0000
ROA not before:           Sun 03 Dec 2023 21:33:19 +0000
ROA not after:            Sun 01 Dec 2024 21:38:19 +0000
asID:                     41979
IP address blocks:        2a0b:4340:30::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2c:ff:0f:d6:ff:fe:06:57:ff:0d:66:37:e5:b4:74:41:26:67:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:19 2023 GMT
            Not After : Dec  1 21:38:19 2024 GMT
        Subject: CN=602CA5B176662FABD04C68EBD2AE5E387BF79399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:c0:10:76:f5:1c:34:58:5f:5f:8d:53:02:
                    d6:86:66:bc:78:26:89:fd:e1:c8:82:85:c6:7b:af:
                    34:86:75:9b:ee:65:ab:5b:a9:dd:2b:da:13:c9:c5:
                    f4:bb:4c:1c:43:ca:6d:26:65:02:6c:19:b4:55:41:
                    88:67:ab:ac:9e:e3:1e:66:d2:8f:61:c0:f1:cc:99:
                    95:a0:73:b7:62:00:4a:bf:3a:90:91:29:9a:94:c5:
                    29:70:f0:64:23:4b:28:1c:89:d8:ee:ad:9d:09:04:
                    12:32:ab:d5:70:48:fe:19:c8:09:44:13:b4:5d:dd:
                    7c:08:8e:44:fc:dc:6b:8f:23:cc:6b:c6:1b:66:75:
                    00:35:16:4a:b4:66:4f:d6:74:5e:62:ea:58:23:4b:
                    c4:2e:b5:01:b2:ea:4b:57:8e:9c:42:e6:8c:98:9d:
                    b8:2d:94:e6:bc:69:6e:c6:be:7d:8c:cc:ce:4d:06:
                    7c:26:b7:85:3c:e8:a2:97:0d:95:45:a7:11:60:ba:
                    75:f2:89:65:42:50:39:17:ef:78:8e:99:af:ac:16:
                    97:a7:f3:05:d5:ff:bd:24:a5:90:65:f8:78:49:8c:
                    7b:35:26:59:49:27:59:50:6d:80:ec:be:1e:76:45:
                    19:17:99:77:9f:74:f6:ab:b4:32:31:be:d2:05:35:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:A5:B1:76:66:2F:AB:D0:4C:68:EB:D2:AE:5E:38:7B:F7:93:99
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a33303a3a2f34342d3438203d3e203431393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:b9:1d:c3:a8:42:b0:d5:23:33:d6:61:3a:a0:15:47:27:
         77:f3:87:48:b1:61:79:98:81:64:ab:0b:ac:6d:47:0d:22:c8:
         a4:67:58:71:87:cb:c1:67:67:af:ae:b6:7d:2c:f5:86:63:f9:
         06:6a:ed:a3:25:d2:31:c4:be:f4:24:59:e1:6b:27:c5:d5:2b:
         7a:ec:38:8f:ba:3b:af:34:7e:d2:0e:69:da:2d:ef:93:23:4a:
         10:ec:ab:6c:4d:46:b4:a9:63:a3:b3:98:78:68:05:e5:de:58:
         15:6c:57:bf:85:fe:12:dd:ca:f6:b2:53:a3:01:be:39:5b:47:
         9b:ae:5c:a9:5c:db:da:52:63:f4:5a:d8:e9:c4:35:60:c5:08:
         63:5c:f0:34:98:5f:ba:dc:0f:c2:8a:46:56:e5:71:ea:d8:95:
         63:f1:3e:75:98:9f:c4:2e:76:63:fa:d1:da:66:63:ce:0a:f5:
         b5:2d:6b:17:9f:43:0d:f8:81:89:0c:ac:a6:ce:f0:85:06:14:
         9b:e4:69:d8:ac:42:a3:ed:20:b0:f9:39:60:cb:29:26:0b:01:
         21:8e:3c:43:93:60:f9:ab:e3:54:8a:4e:e7:39:6f:64:72:15:
         d9:c5:a3:a3:70:aa:2b:d9:3e:64:4f:ac:41:1c:45:47:63:6e:
         d3:0f:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org