Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a37303a3a2f34342d3438203d3e20323035363138.roa
File:                     326130623a343334303a37303a3a2f34342d3438203d3e20323035363138.roa (raw, json)
Hash identifier:          oIy2o1SlCzcGPnPaUEaUHr0kbaGp2svMv5/MIsu4lJI=
Subject key identifier:   D3:1B:2E:F6:BE:E0:D8:16:B1:AF:08:DD:02:CF:30:7F:37:03:C6:5E
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       7CF529B4137472D79867EBDDFEF7A313299388E4
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a37303a3a2f34342d3438203d3e20323035363138.roa
Signing time:             Sun 03 Dec 2023 21:38:26 +0000
ROA not before:           Sun 03 Dec 2023 21:33:26 +0000
ROA not after:            Sun 01 Dec 2024 21:38:26 +0000
asID:                     205618
IP address blocks:        2a0b:4340:70::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f5:29:b4:13:74:72:d7:98:67:eb:dd:fe:f7:a3:13:29:93:88:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:26 2023 GMT
            Not After : Dec  1 21:38:26 2024 GMT
        Subject: CN=D31B2EF6BEE0D816B1AF08DD02CF307F3703C65E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:2d:5a:75:07:59:f6:03:42:59:12:45:09:
                    d4:e5:f2:49:27:14:1d:ad:2b:c6:b3:c5:e1:fe:90:
                    57:d0:fd:b4:16:93:ab:77:0a:f9:4f:fc:dc:a7:d8:
                    05:bc:54:71:95:89:11:e2:7f:4f:78:7f:99:c9:8e:
                    31:15:72:a9:af:30:ad:ff:6f:79:f3:b7:3d:74:35:
                    ff:21:fc:45:6c:0a:cf:a8:a1:b8:bb:87:a3:f8:0c:
                    c8:45:86:73:ee:cc:2f:8e:35:4c:84:56:db:da:08:
                    e9:f1:64:fa:ef:38:73:d4:77:2f:be:1f:79:07:ce:
                    8a:14:e5:bc:93:3f:2a:9a:c7:03:34:33:65:e0:f6:
                    fe:40:38:aa:20:74:4d:be:7d:3b:21:e9:29:a1:c7:
                    b5:f6:66:d8:25:47:fc:7a:09:12:e5:cb:49:74:35:
                    2e:96:03:de:01:f5:52:d3:4d:d8:71:38:59:7e:f3:
                    bf:63:c0:31:61:e2:a0:0f:a2:f4:d7:80:73:7d:81:
                    d0:fa:c7:6c:cd:97:ea:47:61:93:15:15:ca:75:6d:
                    05:09:36:99:13:13:0c:78:57:e8:72:2f:79:0e:8f:
                    1e:84:70:19:d2:32:b8:2e:65:51:88:6e:4e:3a:c0:
                    df:0a:e4:6a:b7:e3:74:cf:56:07:38:61:a6:bb:61:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1B:2E:F6:BE:E0:D8:16:B1:AF:08:DD:02:CF:30:7F:37:03:C6:5E
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a37303a3a2f34342d3438203d3e20323035363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         c2:13:76:ca:08:fb:9f:03:f6:8a:72:65:70:a5:2c:36:91:04:
         80:23:e9:d3:8f:cd:8b:19:6a:ad:a0:33:59:b3:56:04:93:96:
         24:81:fa:e6:18:62:cd:ac:6d:a5:06:f1:e5:99:f4:55:71:85:
         c9:16:a2:61:d8:25:85:bb:75:97:c6:ae:b0:e4:e0:67:a2:40:
         18:7d:6f:cb:f3:31:30:fc:9e:1e:59:ba:80:39:b8:30:46:40:
         21:80:21:ca:9e:2f:5a:d9:23:b6:53:d3:22:94:46:ce:b3:c8:
         61:a7:59:be:dd:13:48:6e:f5:1f:05:71:d8:55:20:88:e9:8e:
         05:a7:3d:1e:1e:d5:e5:f2:3a:34:66:06:0e:0c:b3:94:06:63:
         f7:67:fe:5b:47:7b:e8:0c:f7:ce:55:c6:b9:76:b6:e6:70:45:
         bb:ad:eb:0d:32:86:c0:94:b4:46:b1:50:d0:d3:24:17:10:7e:
         71:54:2c:e5:ac:e5:49:5d:30:55:b9:88:89:ee:54:90:31:7e:
         1a:97:2c:60:01:47:f1:77:ee:8e:32:30:11:ec:e6:1d:0e:a4:
         48:16:5c:cb:d2:95:84:7c:47:4f:0a:4e:36:59:bf:5d:20:9b:
         11:e8:50:ca:d4:86:d9:b5:dd:7d:85:6d:f6:43:69:1b:64:cb:
         89:51:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----