Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a3430303a3a2f34302d3438203d3e20323034313835.roa
File:                     326130623a343334303a3430303a3a2f34302d3438203d3e20323034313835.roa (raw, json)
Hash identifier:          O+SECEIMC10cNwkkM6kwzeBvoM2tLsVTJNR1J+IhVNI=
Subject key identifier:   FA:BF:D4:61:BF:90:59:11:95:FD:8A:A7:5A:27:42:4A:58:8D:76:19
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       3AECE4544AE74D6C135E5B1C17638136375BFA9F
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a3430303a3a2f34302d3438203d3e20323034313835.roa
Signing time:             Sun 03 Dec 2023 21:38:21 +0000
ROA not before:           Sun 03 Dec 2023 21:33:21 +0000
ROA not after:            Sun 01 Dec 2024 21:38:21 +0000
asID:                     204185
IP address blocks:        2a0b:4340:400::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ec:e4:54:4a:e7:4d:6c:13:5e:5b:1c:17:63:81:36:37:5b:fa:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:21 2023 GMT
            Not After : Dec  1 21:38:21 2024 GMT
        Subject: CN=FABFD461BF90591195FD8AA75A27424A588D7619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:47:ab:af:5e:b5:c3:3b:65:ce:53:f1:d5:
                    85:5a:1d:5b:c3:ab:32:ce:f7:94:74:00:1a:75:05:
                    0a:91:47:28:93:bf:f4:d9:86:8c:ac:70:73:89:d8:
                    26:d1:f4:48:86:53:b1:d9:ec:52:35:db:fe:f4:fb:
                    6f:f2:f3:cf:df:8f:ac:2a:b6:48:38:51:21:de:dc:
                    6d:1a:d5:63:6c:76:8e:96:33:36:54:6d:d6:2a:b7:
                    79:46:9c:2a:f6:e9:83:7b:66:e5:88:da:f4:30:fa:
                    55:af:88:16:5c:85:b2:78:81:ed:de:9f:3a:51:81:
                    cc:93:a8:b2:d9:a0:5c:e5:1b:c0:e5:05:e4:81:ed:
                    73:f3:de:e4:46:35:69:5d:74:6a:8a:1c:32:da:ff:
                    0c:5b:08:e7:ac:ed:9c:a8:90:bf:30:8f:0f:28:66:
                    65:30:ab:0c:92:24:8d:ee:f8:af:dd:c6:b6:b2:7d:
                    ce:98:2d:9d:a8:2c:de:44:3e:9c:b4:df:01:48:aa:
                    a0:3c:c4:96:83:4e:f2:50:e9:6e:cf:79:b8:81:8e:
                    d5:83:5e:5c:d4:d9:d3:b6:95:9b:00:3f:f5:c1:31:
                    78:7d:39:8b:12:29:dc:f8:40:ed:5b:97:29:5a:84:
                    25:0b:bb:e3:1a:75:23:71:24:93:26:b4:b0:63:f3:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BF:D4:61:BF:90:59:11:95:FD:8A:A7:5A:27:42:4A:58:8D:76:19
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a3430303a3a2f34302d3438203d3e20323034313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:ad:64:5f:a3:87:21:38:cc:71:12:d9:66:16:af:5e:ff:
         a7:c4:e5:d7:40:ca:26:fe:8a:ea:01:c4:94:18:89:f2:31:62:
         ac:35:89:6f:3d:db:e6:d8:64:77:34:9f:cd:95:cd:3a:b7:dc:
         fd:b2:ae:bb:55:0d:aa:c1:59:16:dc:99:d1:50:e0:70:cc:ba:
         8d:03:95:b4:cb:1d:3a:1c:48:1c:f1:e2:2f:bb:44:ff:e8:d6:
         e8:d9:f9:03:27:5b:51:17:c8:c7:f8:2b:c2:0e:4d:73:b6:d3:
         56:f9:c4:76:06:d7:a7:57:c8:4a:dd:e3:37:47:de:1a:8b:ad:
         bf:c6:da:bd:aa:d0:49:e6:a5:29:51:f6:79:ea:ef:b4:56:bd:
         b2:ed:16:98:5e:cf:5d:1b:84:7a:c1:11:43:29:6d:8a:7d:f3:
         8f:c6:44:a3:5b:38:78:5c:bc:9c:c9:73:c9:f6:48:90:a8:f7:
         ae:61:e6:59:36:29:9b:e1:c8:6f:be:42:a0:19:87:48:6a:7c:
         ca:c7:cc:ce:9b:81:86:68:06:ba:a8:70:a1:f5:04:48:3a:06:
         93:10:e9:92:c9:74:0b:8e:7c:5a:91:2a:aa:f6:63:fa:e1:32:
         f4:fe:27:cb:d4:70:d7:3f:1b:b9:07:49:02:4b:77:59:f1:b2:
         d8:94:61:a8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUOuzkVErnTWwTXlscF2OBNjdb+p8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjFaFw0yNDEyMDEyMTM4MjFaMDMxMTAvBgNV
BAMTKEZBQkZENDYxQkY5MDU5MTE5NUZEOEFBNzVBMjc0MjRBNTg4RDc2MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjskerr161wztlzlPx1YVaHVvD
qzLO95R0ABp1BQqRRyiTv/TZhoyscHOJ2CbR9EiGU7HZ7FI12/70+2/y88/fj6wq
tkg4USHe3G0a1WNsdo6WMzZUbdYqt3lGnCr26YN7ZuWI2vQw+lWviBZchbJ4ge3e
nzpRgcyTqLLZoFzlG8DlBeSB7XPz3uRGNWlddGqKHDLa/wxbCOes7ZyokL8wjw8o
ZmUwqwySJI3u+K/dxrayfc6YLZ2oLN5EPpy03wFIqqA8xJaDTvJQ6W7PebiBjtWD
XlzU2dO2lZsAP/XBMXh9OYsSKdz4QO1blylahCULu+MadSNxJJMmtLBj83KBAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQU+r/UYb+QWRGV/YqnWidCSliNdhkwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8yLzMyNjEzMDYyM2EzNDMzMzQzMDNhMzQzMDMw
M2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzMDM0MzEzODM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYA
KgtDQAQwDQYJKoZIhvcNAQELBQADggEBAI0ArWRfo4chOMxxEtlmFq9e/6fE5ddA
yib+iuoBxJQYifIxYqw1iW892+bYZHc0n82VzTq33P2yrrtVDarBWRbcmdFQ4HDM
uo0DlbTLHTocSBzx4i+7RP/o1ujZ+QMnW1EXyMf4K8IOTXO201b5xHYG16dXyErd
4zdH3hqLrb/G2r2q0EnmpSlR9nnq77RWvbLtFphez10bhHrBEUMpbYp984/GRKNb
OHhcvJzJc8n2SJCo965h5lk2KZvhyG++QqAZh0hqfMrHzM6bgYZoBrqocKH1BEg6
BpMQ6ZLJdAuOfFqRKqr2Y/rhMvT+J8vUcNc/G7kHSQJLd1nxstiUYag=
-----END CERTIFICATE-----