Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334313a3a2f33322d3438203d3e20393137.roa
File:                     326130623a343334313a3a2f33322d3438203d3e20393137.roa (raw, json)
Hash identifier:          ECgqinoy0LUT3OyWMlSLn1gBrx6C8BMW0ozumoAYn2g=
Subject key identifier:   7F:05:A1:F9:DE:F9:CD:57:82:2E:79:50:52:B6:37:A1:A8:79:05:C0
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       25AC55ADBE3B4BB3E8CA2116A1CE1C06C79D1D68
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334313a3a2f33322d3438203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:20 +0000
ROA not before:           Sun 03 Dec 2023 21:33:20 +0000
ROA not after:            Sun 01 Dec 2024 21:38:20 +0000
asID:                     917
IP address blocks:        2a0b:4341::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ac:55:ad:be:3b:4b:b3:e8:ca:21:16:a1:ce:1c:06:c7:9d:1d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:20 2023 GMT
            Not After : Dec  1 21:38:20 2024 GMT
        Subject: CN=7F05A1F9DEF9CD57822E795052B637A1A87905C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9f:42:50:39:a3:a7:6b:b9:de:4a:a3:ba:3d:
                    75:bc:90:6e:46:b0:f2:d2:0d:ff:30:f6:18:de:94:
                    97:5f:df:ba:88:59:be:cf:17:d1:15:31:ba:79:8e:
                    83:5f:25:87:7c:4b:4e:6f:3c:90:92:91:1f:07:02:
                    4d:db:28:ce:96:50:d3:e0:20:c4:60:6b:85:06:b5:
                    f3:19:6f:13:9d:6e:b9:ae:6f:e5:ee:2c:45:59:47:
                    93:ba:5b:00:16:07:fb:6a:08:d3:19:45:15:e6:b0:
                    43:9b:ea:f1:a1:37:a8:ac:91:25:a1:14:72:e3:70:
                    45:af:d0:0a:60:c4:17:61:3e:b9:45:49:fe:00:a2:
                    a2:25:25:b2:7d:6f:b1:73:bc:d8:32:3c:73:3a:f8:
                    1c:3b:c2:84:97:64:d7:b2:01:96:06:8a:59:1a:4c:
                    d7:21:5a:7d:94:6f:36:a2:bd:44:ac:08:a5:6c:cf:
                    7e:23:12:77:cd:c0:9c:3d:60:47:10:e8:53:c7:9c:
                    29:a3:08:07:5c:03:84:be:86:be:d0:35:d4:a4:e9:
                    9d:9c:05:87:d4:12:be:8b:41:67:bb:ab:f7:c7:a2:
                    59:cd:fa:03:a5:10:76:49:56:d7:65:f5:45:02:14:
                    dd:fa:2a:d0:2a:0f:0e:3c:98:57:d3:e1:52:22:9c:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:A1:F9:DE:F9:CD:57:82:2E:79:50:52:B6:37:A1:A8:79:05:C0
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334313a3a2f33322d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4341::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:50:c0:b4:fa:9b:36:05:09:4d:29:79:9c:ad:70:03:e6:a7:
         ca:33:9f:8f:d2:6d:fe:bb:e8:2c:6d:ad:0e:31:aa:aa:81:0b:
         e2:21:aa:a5:78:78:d1:60:cd:06:b6:c5:e6:21:86:ea:2f:f3:
         64:46:bb:b1:76:ae:47:63:bc:aa:65:5e:97:82:b7:ae:0a:60:
         78:53:b0:dc:ae:de:26:e4:c5:9d:24:58:d4:c8:0e:15:6e:48:
         e7:69:04:e2:52:6e:fc:1c:ac:f5:7a:ff:52:b1:38:05:46:cf:
         81:6c:93:de:d6:77:b6:fc:61:10:10:e1:33:b3:34:4d:aa:52:
         c6:d1:70:ef:2a:aa:35:d7:9a:6e:ce:8a:56:db:10:2f:79:32:
         34:8d:ff:c7:24:27:64:19:d5:b4:ae:3e:24:b1:b4:cf:1b:6f:
         ff:88:4d:f0:58:d3:a8:11:80:9b:3e:ef:b2:7a:71:8f:c6:13:
         12:71:ad:f0:5e:18:cc:49:9a:c5:2c:d2:07:69:a9:1c:39:31:
         82:ba:9f:15:59:40:68:7f:15:51:ab:d4:c2:e6:a6:d0:e5:66:
         6f:0b:d6:b8:cf:d6:8d:4d:8a:b3:32:23:a1:75:c0:b6:ff:34:
         4d:de:c1:c9:e2:24:2f:6c:2b:f0:04:bf:9a:06:75:62:11:73:
         c6:22:2b:f8
-----BEGIN CERTIFICATE-----
MIIExTCCA62gAwIBAgIUJaxVrb47S7PoyiEWoc4cBsedHWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjBaFw0yNDEyMDEyMTM4MjBaMDMxMTAvBgNV
BAMTKDdGMDVBMUY5REVGOUNENTc4MjJFNzk1MDUyQjYzN0ExQTg3OTA1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsn0JQOaOna7neSqO6PXW8kG5G
sPLSDf8w9hjelJdf37qIWb7PF9EVMbp5joNfJYd8S05vPJCSkR8HAk3bKM6WUNPg
IMRga4UGtfMZbxOdbrmub+XuLEVZR5O6WwAWB/tqCNMZRRXmsEOb6vGhN6iskSWh
FHLjcEWv0ApgxBdhPrlFSf4AoqIlJbJ9b7FzvNgyPHM6+Bw7woSXZNeyAZYGilka
TNchWn2UbzaivUSsCKVsz34jEnfNwJw9YEcQ6FPHnCmjCAdcA4S+hr7QNdSk6Z2c
BYfUEr6LQWe7q/fHolnN+gOlEHZJVtdl9UUCFN36KtAqDw48mFfT4VIinDDXAgMB
AAGjggHPMIIByzAdBgNVHQ4EFgQUfwWh+d75zVeCLnlQUrY3oah5BcAwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzI2MTMwNjIzYTM0MzMzNDMxM2EzYTJmMzMz
MjJkMzQzODIwM2QzZTIwMzkzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgtDQTANBgkqhkiG9w0B
AQsFAAOCAQEAuVDAtPqbNgUJTSl5nK1wA+anyjOfj9Jt/rvoLG2tDjGqqoEL4iGq
pXh40WDNBrbF5iGG6i/zZEa7sXauR2O8qmVel4K3rgpgeFOw3K7eJuTFnSRY1MgO
FW5I52kE4lJu/Bys9Xr/UrE4BUbPgWyT3tZ3tvxhEBDhM7M0TapSxtFw7yqqNdea
bs6KVtsQL3kyNI3/xyQnZBnVtK4+JLG0zxtv/4hN8FjTqBGAmz7vsnpxj8YTEnGt
8F4YzEmaxSzSB2mpHDkxgrqfFVlAaH8VUavUwuam0OVmbwvWuM/WjU2KszIjoXXA
tv80Td7ByeIkL2wr8AS/mgZ1YhFzxiIr+A==
-----END CERTIFICATE-----
Generated at Wed Dec 20 21:59:22 2023 by rpki-client on console-fra.rpki-client.org