Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334303a63303a3a2f34342d3438203d3e203434343231.roa
File:                     326130623a343334303a63303a3a2f34342d3438203d3e203434343231.roa (raw, json)
Hash identifier:          dNCp0VAIOKsPCQ40ISC7mXQb/PytyjnD79yBDFAIxeA=
Subject key identifier:   4D:D0:D7:CE:58:26:AD:1B:EF:7A:C4:1C:BA:BA:DD:3D:95:DC:6D:29
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       0215E4623A87A2E62D87228D8396EDB1685D2A80
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a63303a3a2f34342d3438203d3e203434343231.roa
Signing time:             Sun 03 Dec 2023 21:38:17 +0000
ROA not before:           Sun 03 Dec 2023 21:33:17 +0000
ROA not after:            Sun 01 Dec 2024 21:38:17 +0000
asID:                     44421
IP address blocks:        2a0b:4340:c0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:15:e4:62:3a:87:a2:e6:2d:87:22:8d:83:96:ed:b1:68:5d:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:17 2023 GMT
            Not After : Dec  1 21:38:17 2024 GMT
        Subject: CN=4DD0D7CE5826AD1BEF7AC41CBABADD3D95DC6D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:3b:e6:38:bd:98:3d:14:da:0d:94:1b:65:
                    36:d7:c3:40:f9:84:1f:05:f8:fa:57:ef:45:31:b6:
                    30:7c:79:84:45:a1:c6:61:01:3b:df:3d:ab:e3:5c:
                    1c:ba:ad:3d:be:48:f6:57:5c:dc:2e:d4:91:3b:16:
                    de:77:4b:92:83:1a:9f:02:f0:be:c6:41:d6:f9:8b:
                    14:ec:db:67:7d:20:44:03:d4:50:12:a6:5d:70:e6:
                    7a:ad:a8:ef:b5:1d:0d:72:84:bc:3c:16:19:e1:c6:
                    08:61:8d:ca:8e:e1:59:81:8c:8c:c4:9b:44:4c:cc:
                    23:38:de:08:09:26:78:b1:ac:11:20:1f:45:d7:59:
                    1e:5f:08:82:8f:d5:1c:50:57:d9:42:ab:41:2e:28:
                    51:84:e4:a4:e5:00:e9:b6:ae:8a:11:a7:03:ab:7b:
                    db:7f:b5:5c:3a:13:b1:62:6a:35:49:09:7a:69:64:
                    63:77:0f:ca:24:d0:56:d9:b9:ad:e0:07:07:ad:3b:
                    d3:b5:5b:1a:17:a9:9e:8b:0d:96:79:6c:ee:b7:bf:
                    c4:d5:98:ec:33:63:b5:6d:3c:c5:31:54:15:2e:35:
                    18:08:ac:17:71:ee:87:10:39:a3:17:92:26:01:2b:
                    1e:75:98:7e:62:26:37:e2:e2:0a:8c:5b:e1:49:a3:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:D7:CE:58:26:AD:1B:EF:7A:C4:1C:BA:BA:DD:3D:95:DC:6D:29
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334303a63303a3a2f34342d3438203d3e203434343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3c:92:e1:06:f8:89:26:69:6b:90:f3:83:25:10:41:71:04:4b:
         09:88:70:80:69:70:56:71:0c:f3:aa:94:70:61:e2:d0:53:94:
         50:a2:04:73:8f:98:aa:73:f3:17:50:36:49:03:53:78:4c:b3:
         07:9c:b6:0b:4b:d0:67:70:ec:e5:53:b5:bc:7c:d3:97:cc:47:
         bf:06:56:ee:bc:56:e2:79:7e:84:4e:f2:df:60:62:65:4f:56:
         77:a0:5a:f3:50:8c:a6:d1:5b:c6:39:83:d8:de:aa:b0:19:99:
         c5:ca:3c:01:72:0b:4f:b8:10:c0:4b:3a:56:8a:6e:ae:2f:5f:
         68:c6:a8:b4:3a:11:b1:71:c5:ac:d9:7e:66:9c:fc:56:11:d7:
         0a:cb:54:1a:cb:e7:d6:db:3b:62:dd:0b:be:5e:cc:d5:20:8a:
         a1:31:69:98:96:b8:d1:e8:67:c5:a2:a1:86:fc:74:42:d5:96:
         63:c2:d6:eb:b1:72:d8:c8:ce:4e:4e:01:eb:3c:40:9e:03:59:
         ed:02:9f:5b:6d:87:56:8d:bb:a5:d8:4b:15:7b:26:57:4f:f0:
         ab:08:d2:3e:84:8d:4f:88:22:04:e4:52:a7:8b:7d:79:d4:df:
         b5:3c:bd:77:2d:19:82:a2:82:4b:c9:f4:7c:8b:86:65:7a:fc:
         cb:58:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org