Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334313a3a2f33322d3438203d3e203537363935.roa
File:                     326130623a343334313a3a2f33322d3438203d3e203537363935.roa (raw, json)
Hash identifier:          Vc+mWIwwDBiQ8hxYWyKSk83mnDRP2IoJ4N52YkMgKYA=
Subject key identifier:   81:FB:99:D3:5F:C0:DD:E8:29:EA:21:02:A9:EE:10:20:02:0E:4F:3C
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       516805EEC05C53C608EF7246E73BAD348D4C0FFB
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334313a3a2f33322d3438203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:19 +0000
ROA not before:           Sun 03 Dec 2023 21:33:19 +0000
ROA not after:            Sun 01 Dec 2024 21:38:19 +0000
asID:                     57695
IP address blocks:        2a0b:4341::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:05:ee:c0:5c:53:c6:08:ef:72:46:e7:3b:ad:34:8d:4c:0f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:19 2023 GMT
            Not After : Dec  1 21:38:19 2024 GMT
        Subject: CN=81FB99D35FC0DDE829EA2102A9EE1020020E4F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:31:57:5b:63:a3:b2:b3:07:dc:0b:c8:11:
                    2b:26:cf:24:e3:c5:f6:48:12:2c:2c:82:2e:42:23:
                    64:de:55:30:01:b1:51:ec:22:ca:de:fb:d7:3d:ba:
                    8a:db:82:47:57:7c:19:99:23:6d:bb:f2:b6:d9:96:
                    92:16:b0:ee:bb:6e:d2:be:4d:ad:26:7b:f3:23:b1:
                    4f:04:07:06:1a:e9:d4:ce:5c:94:7b:ed:57:53:3b:
                    82:9a:5f:73:05:e6:ca:64:6d:2c:0d:79:f9:cb:d0:
                    49:8c:e1:c4:b3:a8:8d:2b:42:96:07:57:0a:38:40:
                    ba:1f:ed:73:81:e4:fe:64:41:b1:df:86:4a:d1:81:
                    78:5e:af:80:99:28:49:4d:e5:fa:41:77:05:b9:cf:
                    c1:46:15:97:d7:60:ba:4e:c5:d0:9e:9e:e8:d8:ae:
                    17:18:c6:94:b0:36:97:4a:94:51:43:d9:4d:76:74:
                    be:c3:17:73:9c:e0:fa:ec:2a:93:c6:77:86:ab:77:
                    e7:01:e6:5c:8d:ad:73:e8:9f:12:3b:be:8d:99:c7:
                    59:65:24:98:0f:48:b8:c9:1f:7a:bf:47:8c:51:c2:
                    8f:f6:19:fd:e7:aa:31:ef:20:99:42:90:25:84:ef:
                    ce:7a:5c:37:1c:01:3c:1b:fd:60:aa:b5:21:f5:98:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FB:99:D3:5F:C0:DD:E8:29:EA:21:02:A9:EE:10:20:02:0E:4F:3C
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334313a3a2f33322d3438203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4341::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:eb:5f:7c:f9:cc:01:23:75:5c:f2:d2:56:32:99:3e:26:
         0c:16:e5:b2:1e:89:a9:34:17:0c:42:b6:a4:29:f1:1e:bd:e6:
         f8:e5:23:fa:ba:2c:cc:b6:57:69:b9:c1:1c:a0:f1:f5:32:2b:
         1c:c1:44:f0:79:43:1a:9c:3c:72:ee:38:37:45:79:dc:60:04:
         cc:77:ce:aa:70:b3:6d:fa:e1:dd:7e:e3:6a:87:d6:e2:0e:0b:
         9f:1a:51:32:f0:51:50:7b:ec:23:00:52:0d:90:7a:75:36:17:
         bb:73:59:d7:14:54:25:b6:66:32:0a:b0:32:24:f3:f2:26:d0:
         3e:f0:67:dd:40:84:bb:e1:b6:fd:ee:43:4b:4b:9c:3a:9c:63:
         ab:62:4f:d8:af:b0:42:fb:06:e8:88:34:0b:14:bc:25:37:58:
         f9:67:3c:91:58:65:73:bd:f5:87:e4:6a:bc:fa:e1:42:b6:b7:
         88:53:8b:41:c1:d8:0e:d8:ee:4b:4a:3a:ed:c1:fb:a8:a6:c4:
         61:e2:27:45:c5:53:b4:6d:52:65:e6:26:d0:e2:2e:a2:63:75:
         d1:40:14:25:71:c0:4a:7c:1f:3a:93:4e:2f:d2:06:e6:41:89:
         cd:a3:7f:f9:6b:b3:dc:36:17:2f:e6:cb:37:85:ef:c4:01:59:
         9a:ee:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----