Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a3533303a3a2f34342d3438203d3e20313331343737.roa
File:                     326130623a343334303a3533303a3a2f34342d3438203d3e20313331343737.roa (raw, json)
Hash identifier:          efMWmmcW1VoZUQwTylBkvBCCpgswImLmjdOFw8Zar7A=
Subject key identifier:   F4:C7:58:FC:C5:D1:E4:65:C9:8D:67:FA:89:4A:21:4C:E2:FC:26:53
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       3C2CA3071949BE693B999EAE2043FF10CA3C9EEE
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a3533303a3a2f34342d3438203d3e20313331343737.roa
Signing time:             Sun 03 Dec 2023 21:38:20 +0000
ROA not before:           Sun 03 Dec 2023 21:33:20 +0000
ROA not after:            Sun 01 Dec 2024 21:38:20 +0000
asID:                     131477
IP address blocks:        2a0b:4340:530::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2c:a3:07:19:49:be:69:3b:99:9e:ae:20:43:ff:10:ca:3c:9e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:20 2023 GMT
            Not After : Dec  1 21:38:20 2024 GMT
        Subject: CN=F4C758FCC5D1E465C98D67FA894A214CE2FC2653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:77:e8:35:8a:2b:5d:f5:35:df:98:64:db:
                    aa:37:89:9d:d5:c6:ff:7d:7f:a8:f1:ec:12:bb:2f:
                    86:04:b1:a9:31:82:35:2b:c7:b1:fb:50:39:35:0b:
                    10:3d:82:f5:fc:e9:fe:bc:ce:20:e3:9f:2f:91:db:
                    e7:75:ad:5d:d9:f7:bd:dc:f0:88:76:02:70:22:c4:
                    fe:c2:0a:a8:41:0d:74:1c:94:96:c3:20:f1:4d:36:
                    d5:b6:c4:47:a9:6d:6f:67:74:46:b4:67:5a:a3:cf:
                    85:bc:ec:01:42:5d:46:f6:ff:bd:e2:03:ad:b0:ca:
                    1f:ec:53:45:b3:1f:37:14:4e:e3:45:d0:ef:ca:6e:
                    46:fd:26:ad:d5:59:19:9d:36:31:c1:c2:8e:d5:cb:
                    ea:32:6b:b0:7e:8d:34:ef:37:8d:7d:4d:b7:0f:a6:
                    7f:1a:ec:9e:f3:6f:23:53:7a:05:88:e9:4a:19:e8:
                    4e:a3:29:ee:dd:d3:73:a1:71:de:65:fe:4d:b5:df:
                    1d:57:4c:06:02:ee:26:b1:79:72:0f:da:3c:8b:93:
                    f9:c9:44:e2:1e:47:dd:36:c7:45:0b:b9:bd:18:fe:
                    f9:e8:e3:d6:8e:81:b6:64:b5:4d:76:f3:bb:b2:0a:
                    75:46:74:67:87:7e:c5:d8:a5:c1:71:5c:10:14:c6:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C7:58:FC:C5:D1:E4:65:C9:8D:67:FA:89:4A:21:4C:E2:FC:26:53
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a3533303a3a2f34342d3438203d3e20313331343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:530::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:94:c3:37:d2:20:0d:54:03:45:2f:9f:6e:2f:86:18:9f:6d:
         50:3d:5d:43:70:07:90:6a:07:bc:6a:2e:e3:72:34:e5:44:cc:
         09:56:a8:82:37:50:09:ba:e3:95:78:56:d7:e9:67:3d:fe:23:
         2f:66:7b:16:86:77:24:72:94:b7:e7:5a:65:a8:70:5c:35:29:
         c1:36:1a:69:b6:b2:ca:35:06:2c:22:ff:44:99:77:c2:cb:44:
         87:ca:c2:fc:70:6b:3d:2c:8b:12:6b:15:ce:93:a6:22:3d:4b:
         8c:a9:83:3f:e9:9f:0a:d0:7f:70:2c:39:9e:ee:8a:d5:05:c9:
         80:8e:6c:b2:6a:e4:ac:04:5f:61:c3:d2:6d:05:e6:c8:c1:c8:
         39:1a:22:4d:dd:8b:12:07:60:e5:b8:2b:c7:3a:93:bf:c5:e0:
         8f:83:46:a4:6f:a8:91:e8:5d:35:c4:5c:49:4d:69:ef:29:45:
         a8:25:62:0f:24:26:33:e3:7c:35:16:24:4d:29:fc:4e:55:98:
         21:8f:99:dc:19:b8:2e:7d:53:41:af:d7:f5:3c:c1:4f:a9:cd:
         16:9a:42:48:12:20:4b:a5:33:41:e7:de:c5:c6:36:d6:6e:96:
         a0:ca:81:b9:a7:22:73:cc:ec:bc:81:f2:c0:dc:87:8f:c4:2c:
         ea:6f:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org