Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130623a343334323a323030303a3a2f33362d3438203d3e203537353738.roa
File:                     326130623a343334323a323030303a3a2f33362d3438203d3e203537353738.roa (raw, json)
Hash identifier:          EHnhE0R+JMDkUFfr/OlmGViW950f1mJGqgkT4tx418A=
Subject key identifier:   18:DC:66:C9:32:4B:C7:FC:48:AF:21:7D:E4:EA:91:FB:B6:D8:94:10
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       62CFE145CFD44509F3D83EBEDCE30A9D38B6877F
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334323a323030303a3a2f33362d3438203d3e203537353738.roa
Signing time:             Sun 03 Dec 2023 21:38:26 +0000
ROA not before:           Sun 03 Dec 2023 21:33:26 +0000
ROA not after:            Sun 01 Dec 2024 21:38:26 +0000
asID:                     57578
IP address blocks:        2a0b:4342:2000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cf:e1:45:cf:d4:45:09:f3:d8:3e:be:dc:e3:0a:9d:38:b6:87:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:26 2023 GMT
            Not After : Dec  1 21:38:26 2024 GMT
        Subject: CN=18DC66C9324BC7FC48AF217DE4EA91FBB6D89410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:4f:68:e9:10:0c:68:d2:33:ac:72:94:7a:
                    d7:dc:f0:77:25:bb:be:ba:70:5f:f3:da:b9:af:4c:
                    ae:9f:76:22:94:20:5e:73:2d:9a:c1:d9:7b:67:b9:
                    8e:cc:44:30:8b:fa:cd:75:83:af:bc:61:c5:c8:aa:
                    9b:fb:fd:af:1e:0b:a1:31:16:68:3a:56:a4:30:e5:
                    2c:05:a5:29:e3:4b:53:4d:ac:8f:26:66:02:df:db:
                    93:05:3f:8a:dc:c9:2a:31:86:45:f2:c6:b2:1c:14:
                    e5:f9:53:71:a2:6d:78:54:bf:e1:7e:03:68:5e:c1:
                    14:8e:12:34:16:8e:8a:2e:d4:c0:75:93:d6:d5:ba:
                    3d:e2:eb:20:51:ac:02:17:f2:d3:bb:3e:ce:59:38:
                    bf:20:ad:3e:56:a2:0e:2d:6c:a5:d0:ee:9c:ed:8b:
                    76:0f:1d:61:01:9f:ac:79:19:c6:b6:2f:53:a6:52:
                    8d:11:04:d1:2a:d4:ed:e6:4f:06:4a:4f:3c:ef:e3:
                    61:6a:2b:11:9e:da:a5:8f:15:62:8e:56:0f:03:d6:
                    94:c4:a1:73:a1:9c:7c:e5:8e:6e:23:85:f5:1f:3d:
                    2f:1d:6f:83:94:9f:d3:69:91:a2:46:d8:0e:74:c4:
                    ac:8c:66:bc:db:d5:67:d0:b6:f3:e2:4d:3e:ab:c3:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:66:C9:32:4B:C7:FC:48:AF:21:7D:E4:EA:91:FB:B6:D8:94:10
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130623a343334323a323030303a3a2f33362d3438203d3e203537353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4342:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:5d:3a:f3:fd:b1:c5:05:b2:09:18:d5:d9:78:97:e8:4d:49:
         9d:ad:1d:b7:e4:de:d4:b6:20:90:ed:cc:30:7f:e8:ea:5d:15:
         5e:8d:72:3e:91:54:96:b4:90:38:34:36:9b:ae:f3:ae:55:0c:
         bb:6d:d0:6c:10:53:90:0d:84:c9:8f:15:29:70:81:4e:51:f4:
         6e:b4:d9:49:4d:8b:15:19:37:0d:97:dc:9c:c1:24:6d:9b:8d:
         0a:ec:c7:b3:8d:67:df:d4:82:17:d7:a0:22:ff:dd:bd:82:37:
         3f:75:37:32:cb:9e:0f:75:1d:e0:0f:c0:33:0d:ff:37:bd:7e:
         66:1b:c1:40:23:07:e6:6f:48:de:21:b0:0f:40:f4:ab:8a:e9:
         41:65:8a:1f:fd:5e:20:d7:cb:b7:23:10:25:1c:6f:d3:52:9f:
         47:51:ef:bb:09:4e:3d:e0:90:fe:fa:6c:31:f8:e3:05:b6:e8:
         f9:16:12:c9:e3:50:65:53:1a:3b:7c:20:56:02:26:e4:41:aa:
         69:c0:4c:8c:14:6f:9f:07:ae:7a:c3:64:ff:16:e9:6a:f9:9c:
         31:8c:a2:1e:12:1d:15:b1:53:a3:e6:b7:48:cc:55:63:82:f8:
         29:20:56:1a:98:8f:2b:b7:a1:bf:78:20:f8:58:d8:15:d6:23:
         40:ad:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org