Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334323a316132303a3a2f34342d3438203d3e203537353738.roa
File:                     326130623a343334323a316132303a3a2f34342d3438203d3e203537353738.roa (raw, json)
Hash identifier:          2u/yvBiBy/YM2s5jILBCFip7wAsA0Jaer9DOz8tCuf4=
Subject key identifier:   1B:30:91:38:2B:C6:80:8A:6D:68:5B:B7:6E:F1:89:D2:83:14:31:BE
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       53D888BD262C5E0361778C9E366345AA9EE8915E
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334323a316132303a3a2f34342d3438203d3e203537353738.roa
Signing time:             Sun 03 Dec 2023 21:38:26 +0000
ROA not before:           Sun 03 Dec 2023 21:33:26 +0000
ROA not after:            Sun 01 Dec 2024 21:38:26 +0000
asID:                     57578
IP address blocks:        2a0b:4342:1a20::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d8:88:bd:26:2c:5e:03:61:77:8c:9e:36:63:45:aa:9e:e8:91:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:26 2023 GMT
            Not After : Dec  1 21:38:26 2024 GMT
        Subject: CN=1B3091382BC6808A6D685BB76EF189D2831431BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:e4:db:ee:c4:00:80:e3:e7:b7:b1:37:53:
                    c3:90:f3:31:46:bf:45:1e:4b:33:37:1d:6a:c7:1e:
                    70:fc:45:74:af:67:cc:37:5a:e8:7e:93:f4:de:c1:
                    65:bd:2c:70:5a:cd:ad:78:1d:20:5e:12:c9:8b:53:
                    13:21:61:ca:73:e8:f9:19:db:95:47:6a:36:62:a3:
                    52:20:98:dd:f2:d1:72:22:8f:18:f4:fc:f6:f6:6f:
                    54:a7:25:94:bc:c0:83:a2:60:7f:b3:29:7c:03:7e:
                    c6:b3:db:c9:b9:0d:ae:8a:48:d7:66:c4:36:18:9d:
                    c9:5a:8c:51:2e:dd:95:9f:f6:a5:91:6a:a8:97:14:
                    b6:04:d8:c3:9b:d4:80:9f:d1:48:d8:47:79:86:0f:
                    13:fd:1a:1b:d6:7c:6e:ef:8a:59:10:c9:9e:fd:79:
                    42:8c:ee:79:b0:80:04:04:27:9e:72:7e:0c:63:d9:
                    78:b7:98:21:c5:a8:38:2d:99:5c:73:53:7f:fc:e8:
                    f8:26:67:17:91:66:ae:3f:65:b5:5e:f0:9c:c8:e2:
                    aa:19:eb:a3:3c:ac:d0:4b:65:00:4e:54:09:44:1f:
                    95:d3:3b:76:3d:7f:c4:16:eb:d5:1e:ad:37:3f:46:
                    d4:86:42:9e:c9:b5:6d:1e:ec:5d:99:07:63:29:47:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:30:91:38:2B:C6:80:8A:6D:68:5B:B7:6E:F1:89:D2:83:14:31:BE
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334323a316132303a3a2f34342d3438203d3e203537353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4342:1a20::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:bb:eb:d6:f5:33:55:01:29:d3:45:a8:99:68:1a:59:93:
         18:0b:16:dd:09:66:99:20:9f:f3:ef:2d:34:f6:b1:21:d2:bb:
         55:b8:2c:3c:12:07:cf:fe:40:dc:d2:e1:1c:b1:f3:dd:3d:4e:
         3b:cc:65:78:f6:89:34:66:41:d7:7a:bd:7f:27:17:35:03:7e:
         aa:f0:62:52:35:a3:98:47:d7:ef:07:3a:2a:e5:49:03:88:03:
         db:8f:8d:82:cb:53:d4:ed:4b:bc:c7:14:ef:1f:d6:dd:74:6e:
         f6:4e:ae:ab:5c:af:f2:f5:c4:2a:0f:df:30:80:03:67:c5:7a:
         fa:cb:79:c5:56:22:ef:9e:8a:83:a7:6c:20:fa:e2:58:d6:02:
         ac:a4:d8:83:4d:a6:27:05:64:61:a7:32:12:46:4e:7a:84:90:
         51:5b:87:70:53:fa:6c:06:8b:97:8d:3d:1a:c8:ea:52:ad:ab:
         50:c1:95:80:1a:92:9b:a2:4d:ff:02:25:a6:8a:f3:cf:28:df:
         28:79:9f:dc:9c:a4:a9:1b:2b:23:70:c8:bb:22:d5:25:03:70:
         78:f6:7a:33:f8:5f:f9:58:06:c5:20:d5:d9:e4:a0:a5:2a:d4:
         26:7a:d6:c3:e8:04:27:55:e1:51:36:e1:0d:48:9e:b2:c0:a6:
         fb:d9:6f:5f
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIUU9iIvSYsXgNhd4yeNmNFqp7okV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMDMyMTMzMjZaFw0yNDEyMDEyMTM4MjZaMDMxMTAvBgNV
BAMTKDFCMzA5MTM4MkJDNjgwOEE2RDY4NUJCNzZFRjE4OUQyODMxNDMxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6reTb7sQAgOPnt7E3U8OQ8zFG
v0UeSzM3HWrHHnD8RXSvZ8w3Wuh+k/TewWW9LHBaza14HSBeEsmLUxMhYcpz6PkZ
25VHajZio1IgmN3y0XIijxj0/Pb2b1SnJZS8wIOiYH+zKXwDfsaz28m5Da6KSNdm
xDYYnclajFEu3ZWf9qWRaqiXFLYE2MOb1ICf0UjYR3mGDxP9GhvWfG7vilkQyZ79
eUKM7nmwgAQEJ55yfgxj2Xi3mCHFqDgtmVxzU3/86PgmZxeRZq4/ZbVe8JzI4qoZ
66M8rNBLZQBOVAlEH5XTO3Y9f8QW69UerTc/RtSGQp7JtW0e7F2ZB2MpR9KnAgMB
AAGjggHgMIIB3DAdBgNVHQ4EFgQUGzCROCvGgIptaFu3bvGJ0oMUMb4wHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8yLzMyNjEzMDYyM2EzNDMzMzQzMjNhMzE2MTMy
MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNTM3MzUzNzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcE
KgtDQhogMA0GCSqGSIb3DQEBCwUAA4IBAQACobvr1vUzVQEp00WomWgaWZMYCxbd
CWaZIJ/z7y009rEh0rtVuCw8EgfP/kDc0uEcsfPdPU47zGV49ok0ZkHXer1/Jxc1
A36q8GJSNaOYR9fvBzoq5UkDiAPbj42Cy1PU7Uu8xxTvH9bddG72Tq6rXK/y9cQq
D98wgANnxXr6y3nFViLvnoqDp2wg+uJY1gKspNiDTaYnBWRhpzISRk56hJBRW4dw
U/psBouXjT0ayOpSratQwZWAGpKbok3/AiWmivPPKN8oeZ/cnKSpGysjcMi7ItUl
A3B49noz+F/5WAbFINXZ5KClKtQmetbD6AQnVeFRNuENSJ6ywKb72W9f
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org