Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130643a323930303a3a2f33322d3438203d3e203530303639.roa
File:                     326130643a323930303a3a2f33322d3438203d3e203530303639.roa (raw, json)
Hash identifier:          XiFCUaBHpPmeGTZeE/P5sUU8CsJEgE4sPo3dmwU1Qws=
Subject key identifier:   38:C6:9E:D9:8D:4F:F5:4C:8C:37:84:37:F0:F2:B3:F6:55:11:4B:34
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       4C79D97AB160FD1BBE16FEA3F01DC369DA135260
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130643a323930303a3a2f33322d3438203d3e203530303639.roa
Signing time:             Sun 03 Dec 2023 21:38:21 +0000
ROA not before:           Sun 03 Dec 2023 21:33:21 +0000
ROA not after:            Sun 01 Dec 2024 21:38:21 +0000
asID:                     50069
IP address blocks:        2a0d:2900::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:79:d9:7a:b1:60:fd:1b:be:16:fe:a3:f0:1d:c3:69:da:13:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:21 2023 GMT
            Not After : Dec  1 21:38:21 2024 GMT
        Subject: CN=38C69ED98D4FF54C8C378437F0F2B3F655114B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:05:97:0a:a6:d6:79:c9:13:5f:4c:f3:aa:98:
                    f0:8c:36:b2:d5:33:e4:7b:df:d5:7a:d1:54:00:da:
                    57:08:a2:f9:79:80:6b:b9:ee:70:79:d4:11:d9:b9:
                    99:a9:5d:96:61:cd:7e:ff:79:0b:88:26:31:52:0a:
                    40:41:ef:0c:84:5e:6d:7b:36:10:87:ba:45:9f:31:
                    48:9a:1a:ff:6d:0c:48:9f:62:a2:07:7d:ec:c8:b4:
                    21:7e:09:f1:5b:e2:28:76:b2:c9:5c:3a:54:24:6c:
                    d3:7b:80:2b:a4:e4:8f:80:26:0c:b7:de:79:88:c4:
                    2a:9b:2e:82:f6:00:5d:9f:9c:62:06:fb:f9:f6:df:
                    40:b2:ec:fd:98:3f:df:81:f3:c0:a2:18:ed:4b:4b:
                    4a:67:fc:4c:1e:14:9b:17:95:4d:f9:27:26:d8:02:
                    be:b5:0b:c8:7d:bb:e8:05:53:4c:b6:84:cd:8c:00:
                    59:5a:2e:87:4d:7e:68:5c:ae:54:d8:10:62:c2:41:
                    a8:81:f2:55:35:3a:51:ee:0e:47:94:6d:0f:36:bd:
                    f5:c8:66:16:9b:b8:ac:13:a5:d8:7d:1a:3a:97:8a:
                    84:c1:0b:8c:23:2c:30:d5:c0:9f:2f:6a:b8:3a:40:
                    b4:0a:03:6d:25:40:ae:9d:b4:bf:36:36:b2:35:88:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C6:9E:D9:8D:4F:F5:4C:8C:37:84:37:F0:F2:B3:F6:55:11:4B:34
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130643a323930303a3a2f33322d3438203d3e203530303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2900::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:10:85:ad:01:4e:9c:9c:d4:a2:fd:b2:a8:e3:2a:bd:a7:
         78:bd:f8:90:3f:56:22:38:b0:0a:39:49:e7:9b:be:66:e6:09:
         1c:d5:20:6c:9b:a1:a6:63:fa:06:ff:6d:4c:d2:5e:59:6f:45:
         0a:11:61:e7:e7:62:5f:99:e8:b2:51:57:f0:d2:6e:2c:1c:d8:
         0d:3e:f7:4f:cf:40:a3:94:4c:91:1e:34:b7:44:b6:b8:cc:3f:
         08:c9:d7:2a:34:d6:c8:9b:92:ac:6b:93:c6:27:ca:9f:d0:38:
         5d:77:30:c5:62:19:cf:da:95:5e:d2:34:f7:f0:f4:45:9a:9a:
         dc:a4:8a:57:2e:25:bc:66:cf:19:18:a1:f8:1d:55:66:79:c1:
         29:38:3e:79:f6:7a:93:28:50:c4:8a:0f:5f:24:76:c3:fd:9a:
         c7:45:33:96:e9:19:71:ef:47:44:26:d8:e0:8e:05:ee:76:3f:
         5e:00:47:da:0b:b8:ee:5b:b1:7d:4c:9a:e0:b5:75:7b:ca:01:
         b9:6e:6d:0c:58:9f:da:39:5e:b1:de:8a:dc:4b:9e:1f:ad:12:
         24:e5:f7:5a:0f:71:27:9c:f6:a9:e0:31:f2:92:4f:8f:d1:62:
         48:05:11:b9:7e:6b:3b:8a:fb:1a:41:03:df:10:0b:b3:a6:00:
         84:c8:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----