Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a62303a3a2f34342d3438203d3e20323035303538.roa
File:                     326130623a343334303a62303a3a2f34342d3438203d3e20323035303538.roa (raw, json)
Hash identifier:          PzJq7EhjOtrmF3qbL7ESHI8myk5I30t3h7EgPD8GDPY=
Subject key identifier:   41:98:90:8E:4D:0F:DF:FE:E9:CB:4B:0A:BA:D5:70:DF:1E:D1:73:70
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       5FE8C2D5C0AB10DE9CC2490894C334A66C7DA006
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a62303a3a2f34342d3438203d3e20323035303538.roa
Signing time:             Sun 03 Dec 2023 21:38:17 +0000
ROA not before:           Sun 03 Dec 2023 21:33:17 +0000
ROA not after:            Sun 01 Dec 2024 21:38:17 +0000
asID:                     205058
IP address blocks:        2a0b:4340:b0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e8:c2:d5:c0:ab:10:de:9c:c2:49:08:94:c3:34:a6:6c:7d:a0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:17 2023 GMT
            Not After : Dec  1 21:38:17 2024 GMT
        Subject: CN=4198908E4D0FDFFEE9CB4B0ABAD570DF1ED17370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:bd:fd:3d:01:72:db:e3:9f:1f:db:5e:8e:
                    de:4a:31:19:d3:00:35:35:19:3c:0b:c3:7d:4c:96:
                    28:ec:e3:c6:51:12:1a:33:44:e4:b7:f3:cd:a1:6c:
                    41:21:3d:46:37:e9:5e:60:a7:b6:71:ca:f3:df:15:
                    4c:d4:77:95:b1:bb:9f:8a:cb:ad:4b:ad:7b:22:8f:
                    8d:09:cc:e1:b4:66:7b:30:3e:33:e3:13:2b:6c:9e:
                    a3:15:84:5c:13:85:45:a4:d0:d7:83:37:a1:46:c6:
                    e4:7b:52:10:68:b8:a2:6c:2a:02:35:ba:da:b2:15:
                    db:9a:44:54:6f:76:73:0b:4e:07:be:bf:d0:62:19:
                    f9:23:8b:b6:f5:58:4a:29:a7:ae:f0:48:fa:67:2a:
                    f0:a4:1c:b6:f3:75:c0:70:83:56:85:9c:0c:8e:08:
                    be:95:32:96:8f:f0:19:fc:b6:b2:3f:9e:7c:7f:9d:
                    f5:79:0e:c0:28:20:7b:77:1e:18:fd:60:58:b9:30:
                    83:c4:e2:60:6b:6f:8e:30:1b:ae:fd:35:62:db:84:
                    d3:d8:6a:06:1d:2a:99:52:a4:68:76:47:1c:24:e9:
                    47:cc:65:00:98:82:67:c1:92:cf:8f:9c:b1:17:4c:
                    f7:d4:a7:65:75:b0:b3:2f:ad:0f:9d:c2:67:16:92:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:98:90:8E:4D:0F:DF:FE:E9:CB:4B:0A:BA:D5:70:DF:1E:D1:73:70
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a62303a3a2f34342d3438203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:92:26:83:a9:eb:80:b3:f8:ee:a8:1e:04:17:a9:b4:de:5d:
         bc:e1:b1:87:71:ae:ef:d3:02:a0:9c:af:eb:f0:f8:31:c0:64:
         6b:f1:ab:07:65:76:5a:86:dd:29:94:ae:f0:ab:c0:b1:a2:d0:
         75:3d:6c:cf:9c:ec:c9:06:35:68:56:95:c6:f3:75:7f:ed:88:
         5b:64:8d:75:08:1a:aa:75:7b:95:69:c6:52:4c:3a:a0:2b:8b:
         e2:16:c6:64:bd:42:1d:0f:52:ed:5d:ef:33:9b:87:cd:33:86:
         af:4a:4f:2a:41:c0:ed:2a:7e:b7:f5:6f:c7:ed:8c:da:7d:a9:
         2c:18:3b:f5:99:bd:8d:29:0b:97:fa:a1:e6:4b:dd:bc:b4:ff:
         eb:cb:b7:c7:0f:88:7f:e3:b5:ea:66:a2:2d:1a:c2:e9:df:c0:
         fa:51:55:39:46:74:db:7a:6f:3e:34:6e:91:09:59:c5:5a:d8:
         36:3d:35:71:d9:13:39:44:db:10:4e:e9:d9:bc:f9:d0:1b:b7:
         69:f5:eb:b8:22:cc:30:18:26:a1:94:d6:16:5e:c4:d4:ac:6b:
         6b:64:71:be:05:f6:4a:2e:8d:21:15:7d:ea:12:f5:ee:46:c7:
         e8:b7:53:bd:5d:3b:86:60:79:49:a7:6a:69:bd:52:03:c3:64:
         90:e1:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----