Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a3532303a3a2f34342d3438203d3e20313334303938.roa
File:                     326130623a343334303a3532303a3a2f34342d3438203d3e20313334303938.roa (raw, json)
Hash identifier:          TnnvRFocils+lIsEGfx7OY90E3l2TxkEPylBpFGF9io=
Subject key identifier:   F0:B4:8B:EC:27:F8:E4:05:E5:4D:31:5C:07:31:3C:AE:BA:B8:1C:87
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       5AF268F35D0593A505F381179BB08137717D8287
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a3532303a3a2f34342d3438203d3e20313334303938.roa
Signing time:             Sun 03 Dec 2023 21:38:18 +0000
ROA not before:           Sun 03 Dec 2023 21:33:18 +0000
ROA not after:            Sun 01 Dec 2024 21:38:18 +0000
asID:                     134098
IP address blocks:        2a0b:4340:520::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f2:68:f3:5d:05:93:a5:05:f3:81:17:9b:b0:81:37:71:7d:82:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:18 2023 GMT
            Not After : Dec  1 21:38:18 2024 GMT
        Subject: CN=F0B48BEC27F8E405E54D315C07313CAEBAB81C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:27:e2:d8:ad:c9:b8:5f:8e:fb:80:3b:de:
                    1b:cd:81:01:fc:1d:84:f6:a2:65:73:a6:d9:cb:eb:
                    74:02:f9:d8:c6:81:e9:1d:ba:83:d7:5b:e0:36:83:
                    f8:e4:ff:7a:e0:b5:ce:06:cf:73:df:61:7f:ba:13:
                    3c:da:b8:0a:bd:2f:89:77:48:05:cb:9b:ef:b9:a7:
                    79:54:8a:88:42:ab:a4:2a:0a:56:5e:cd:b0:d4:2b:
                    33:b2:a0:3c:d9:72:09:c8:40:94:16:78:60:e9:26:
                    fe:0d:f6:40:dd:9b:bf:a9:31:43:0e:10:fa:c3:ae:
                    3b:52:cd:f5:8c:62:66:3b:dd:b6:aa:0e:cc:54:ca:
                    33:22:45:e0:9e:b6:e9:43:11:b5:90:87:14:b9:39:
                    34:5a:a9:40:9f:e7:37:7b:b8:c2:26:33:b9:9b:1f:
                    b3:85:d5:30:f6:f3:e9:4b:f4:2c:6b:b9:5a:7e:e6:
                    03:c7:82:c6:cc:87:7b:ed:c8:ed:a9:e7:d4:94:1f:
                    2d:c3:3d:4e:7b:d2:04:70:32:55:39:97:53:50:a9:
                    f7:b9:5b:c1:28:e7:b3:f1:96:9b:47:e5:a9:39:e8:
                    95:a2:e9:75:3b:33:04:2e:bf:4d:d0:e7:25:2b:2f:
                    ff:67:62:f5:4d:86:5c:c8:f4:9d:c6:3b:8f:d4:2f:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:8B:EC:27:F8:E4:05:E5:4D:31:5C:07:31:3C:AE:BA:B8:1C:87
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a3532303a3a2f34342d3438203d3e20313334303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:520::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:c7:43:08:37:7d:a4:66:be:56:71:ce:c9:f4:96:9c:c6:
         53:c4:9f:2d:22:8c:2b:e8:67:38:6b:de:0d:ee:97:a1:94:8b:
         d2:cd:93:b7:88:1a:c6:7b:ca:d6:82:1a:41:bb:f3:c3:35:a4:
         36:82:bf:a2:bc:03:5a:89:2a:0a:5a:88:5e:b8:b4:9c:d5:1a:
         4d:12:46:05:51:de:3d:4c:cf:db:67:22:cc:0f:32:0b:38:87:
         c0:00:9c:a7:d9:f8:16:53:0e:b4:c0:d2:d8:d1:1d:f6:19:c4:
         9f:56:a0:2a:4e:fc:ac:09:33:6b:a4:ea:84:5e:8f:b4:d1:f5:
         f4:09:ba:e7:8c:e0:ce:70:9c:35:35:0a:df:93:f8:c4:6c:d6:
         0b:01:cf:9c:08:b7:2d:fb:ca:62:95:0d:41:23:25:eb:b1:8d:
         20:8d:1d:2c:c6:d3:d2:e4:bf:80:db:bf:6b:9d:f2:ff:a6:8a:
         3b:21:01:fa:e4:8b:8d:5f:e8:53:6f:52:d2:b2:1e:e0:07:b4:
         dc:ba:3e:1b:b7:a6:43:37:71:d6:37:d5:2f:2d:08:ed:b2:e2:
         52:91:23:99:bb:58:75:2e:8b:14:97:f8:34:d5:6b:e3:c5:eb:
         38:fb:91:05:5c:03:6e:8f:1e:e2:d8:09:57:df:67:44:a1:0f:
         36:dc:61:50
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIUWvJo810Fk6UF84EXm7CBN3F9gocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMThaFw0yNDEyMDEyMTM4MThaMDMxMTAvBgNV
BAMTKEYwQjQ4QkVDMjdGOEU0MDVFNTREMzE1QzA3MzEzQ0FFQkFCODFDODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsSfi2K3JuF+O+4A73hvNgQH8
HYT2omVzptnL63QC+djGgekduoPXW+A2g/jk/3rgtc4Gz3PfYX+6EzzauAq9L4l3
SAXLm++5p3lUiohCq6QqClZezbDUKzOyoDzZcgnIQJQWeGDpJv4N9kDdm7+pMUMO
EPrDrjtSzfWMYmY73baqDsxUyjMiReCetulDEbWQhxS5OTRaqUCf5zd7uMImM7mb
H7OF1TD28+lL9CxruVp+5gPHgsbMh3vtyO2p59SUHy3DPU570gRwMlU5l1NQqfe5
W8Eo57PxlptH5ak56JWi6XU7MwQuv03Q5yUrL/9nYvVNhlzI9J3GO4/UL9+rAgMB
AAGjggHgMIIB3DAdBgNVHQ4EFgQU8LSL7Cf45AXlTTFcBzE8rrq4HIcwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8yLzMyNjEzMDYyM2EzNDMzMzQzMDNhMzUzMjMw
M2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzM0MzAzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcE
KgtDQAUgMA0GCSqGSIb3DQEBCwUAA4IBAQBG5cdDCDd9pGa+VnHOyfSWnMZTxJ8t
Iowr6Gc4a94N7pehlIvSzZO3iBrGe8rWghpBu/PDNaQ2gr+ivANaiSoKWoheuLSc
1RpNEkYFUd49TM/bZyLMDzILOIfAAJyn2fgWUw60wNLY0R32GcSfVqAqTvysCTNr
pOqEXo+00fX0CbrnjODOcJw1NQrfk/jEbNYLAc+cCLct+8pilQ1BIyXrsY0gjR0s
xtPS5L+A279rnfL/poo7IQH65IuNX+hTb1LSsh7gB7Tcuj4bt6ZDN3HWN9UvLQjt
suJSkSOZu1h1LosUl/g01Wvjxes4+5EFXANujx7i2AlX32dEoQ823GFQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org