Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a34303a3a2f34342d3438203d3e203431373830.roa
File:                     326130623a343334303a34303a3a2f34342d3438203d3e203431373830.roa (raw, json)
Hash identifier:          8YhsI3fVSm2N2IhQNw1g+lsn1NTsys7vn/KwTFYKPZc=
Subject key identifier:   0E:1C:AE:61:AC:1A:68:F1:96:30:B4:5D:C6:82:A9:BD:35:C1:96:0A
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       5006F754D2535C4D2346AD891326584DCA1D6106
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a34303a3a2f34342d3438203d3e203431373830.roa
Signing time:             Sun 03 Dec 2023 21:38:18 +0000
ROA not before:           Sun 03 Dec 2023 21:33:18 +0000
ROA not after:            Sun 01 Dec 2024 21:38:18 +0000
asID:                     41780
IP address blocks:        2a0b:4340:40::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:06:f7:54:d2:53:5c:4d:23:46:ad:89:13:26:58:4d:ca:1d:61:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:18 2023 GMT
            Not After : Dec  1 21:38:18 2024 GMT
        Subject: CN=0E1CAE61AC1A68F19630B45DC682A9BD35C1960A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:a4:55:59:5c:ec:13:90:29:e4:ac:d3:f1:
                    e2:3d:f2:50:50:c1:d0:f2:f5:a8:33:36:2b:17:8b:
                    c6:87:8b:3f:ef:fe:ac:cb:8a:13:c4:ed:44:03:58:
                    fa:8a:d8:4e:8a:ae:4b:d3:2c:55:cd:1b:46:25:42:
                    2f:0e:88:d1:40:ea:1d:79:9f:5b:ca:ca:f2:26:cf:
                    5a:85:07:d1:c7:4c:47:50:42:01:4a:12:75:f4:92:
                    3c:b3:1c:30:d9:78:3d:ac:c0:74:f9:08:14:77:2f:
                    53:fa:83:3f:d1:9f:08:bf:fc:d1:35:93:ff:d1:77:
                    2b:13:c0:db:17:d4:ee:1b:53:c6:bc:16:dd:9c:2e:
                    d9:f2:86:ae:79:7e:cb:ac:7d:05:1d:79:3c:6e:fe:
                    43:eb:9f:60:db:70:be:7b:fd:92:ee:36:4f:4c:6b:
                    91:7b:67:83:ab:82:81:bc:5b:9e:06:6b:93:89:23:
                    30:c5:0e:25:e5:20:d6:fe:26:75:6d:12:05:45:21:
                    7a:4d:64:e2:ab:dc:17:4b:f0:99:56:b9:c5:d8:7f:
                    81:a8:56:7e:dd:e4:55:31:2a:ac:a9:8b:54:0c:c8:
                    d6:c6:c7:72:9b:79:c7:41:23:bb:40:a7:6f:eb:2b:
                    e9:f9:9a:5a:9f:d3:d3:ab:8f:e5:17:ab:8c:fd:dd:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:AE:61:AC:1A:68:F1:96:30:B4:5D:C6:82:A9:BD:35:C1:96:0A
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a34303a3a2f34342d3438203d3e203431373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:df:dc:04:92:87:1d:a1:cb:c8:79:92:89:46:b5:f2:1c:
         b4:b5:cb:de:e9:14:86:f5:2b:0b:6e:29:93:c0:08:c7:c8:f5:
         19:cf:2b:ce:fc:cc:e0:97:bb:3b:a7:2b:0e:cb:bf:5a:46:48:
         cf:e0:ed:0d:a0:82:f3:7b:84:92:db:ea:c2:0e:11:2d:78:e7:
         eb:32:74:0a:b9:d7:ab:54:28:7a:48:71:cf:01:61:84:f7:4c:
         68:86:5e:9e:85:68:04:36:53:ba:1e:83:f8:82:7f:51:e2:80:
         f2:d6:fe:46:57:95:c9:16:7f:6a:24:ec:47:bc:81:62:10:ab:
         55:1d:67:70:9a:ec:2a:fd:90:81:21:ca:69:28:4a:b9:20:cc:
         dd:d5:6a:57:11:a2:4a:8b:f0:0b:e3:1b:b5:5e:82:af:f4:a9:
         51:77:3e:41:ee:da:0b:19:00:d9:36:d5:56:33:97:06:35:86:
         79:52:20:2c:c2:40:37:14:f5:03:29:49:de:d1:7a:a6:e6:0a:
         92:45:ea:cc:29:ab:09:71:9c:3b:81:17:5e:a0:ae:e7:3a:8b:
         05:57:bf:cb:fb:88:2d:72:31:93:2e:60:c7:02:ee:62:49:e7:
         9c:64:d8:fa:1c:89:a2:56:40:ca:c2:34:83:da:e0:1b:b0:5e:
         76:c9:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org