Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130643a323930313a3a2f33322d3438203d3e203632323330.roa
File:                     326130643a323930313a3a2f33322d3438203d3e203632323330.roa (raw, json)
Hash identifier:          s45WMRR2R+c9D30n+LLhwEmAWO1KP2CPpBxS7PUgj7g=
Subject key identifier:   9B:67:4E:E4:E7:EF:22:1D:59:C6:55:7C:BB:EA:14:DC:54:FA:D1:AF
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       715075557AA386830BE011BB308BF0598D60A89B
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130643a323930313a3a2f33322d3438203d3e203632323330.roa
Signing time:             Sun 03 Dec 2023 21:38:20 +0000
ROA not before:           Sun 03 Dec 2023 21:33:20 +0000
ROA not after:            Sun 01 Dec 2024 21:38:20 +0000
asID:                     62230
IP address blocks:        2a0d:2901::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:75:55:7a:a3:86:83:0b:e0:11:bb:30:8b:f0:59:8d:60:a8:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:20 2023 GMT
            Not After : Dec  1 21:38:20 2024 GMT
        Subject: CN=9B674EE4E7EF221D59C6557CBBEA14DC54FAD1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:05:3e:5e:3a:e9:52:66:71:0f:c1:d5:43:
                    97:a4:9e:b4:1b:09:c5:24:88:55:e2:74:d1:70:72:
                    9c:bd:2c:b7:bf:9e:20:bb:82:c5:ed:37:5e:81:7b:
                    0f:3b:2a:38:eb:81:49:ab:21:cf:f1:1a:42:b1:27:
                    97:e1:73:21:25:fb:03:e5:47:52:2e:75:5b:6c:4d:
                    82:55:b3:89:51:c0:b3:bf:12:28:be:cb:1b:ce:79:
                    f9:32:06:f2:ca:19:fa:24:92:c8:ba:c1:7b:e4:2b:
                    3e:95:fd:94:62:bb:4c:01:04:30:e3:a3:01:64:84:
                    65:50:60:a8:1b:2a:b5:c2:d3:a2:46:d4:22:b8:df:
                    30:77:d6:da:6e:8c:7a:0e:91:85:e9:f0:16:1b:75:
                    ad:f6:32:5a:a0:d2:f8:b0:0e:ef:61:38:f3:be:fd:
                    da:50:0a:82:e0:2a:45:56:c1:c8:7b:8d:29:9b:02:
                    67:4c:95:b8:af:5f:57:a9:1b:38:95:e9:68:20:80:
                    76:31:d5:f4:91:74:7a:fb:6d:63:52:2f:d6:72:61:
                    3b:8f:cb:f4:d6:21:b6:53:2d:ca:02:8a:f8:cc:47:
                    9a:2c:26:8b:a7:7a:50:ab:82:a0:2a:33:04:49:2b:
                    08:ec:01:0c:39:cc:6f:68:0c:d7:a5:cb:00:f9:97:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:67:4E:E4:E7:EF:22:1D:59:C6:55:7C:BB:EA:14:DC:54:FA:D1:AF
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130643a323930313a3a2f33322d3438203d3e203632323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2901::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:43:37:ca:1d:0a:25:c0:27:7b:41:9c:4f:d3:d2:00:4a:
         ab:e8:dd:6e:2d:f3:6a:27:19:b3:11:69:0f:82:a6:16:5f:da:
         3c:86:2d:58:a0:b0:0b:53:a0:c6:7f:20:f6:f4:7a:55:4d:f0:
         02:87:f7:0d:c5:39:99:cf:02:90:3b:f0:99:8d:ad:c3:47:99:
         1c:c5:7d:b1:4f:df:dc:9b:ca:f1:c2:f9:dd:bc:cc:f5:ae:ed:
         74:1d:17:99:ab:45:ff:81:8c:4b:6d:63:bf:47:5e:1d:7e:c8:
         42:ee:7b:b7:9b:5a:61:7d:b3:46:b7:09:16:e2:c8:de:f6:84:
         9e:16:4e:e4:31:9f:22:f4:b5:78:d7:06:cf:d9:21:b7:68:3e:
         5d:82:2b:64:eb:18:d1:4a:5e:1e:8e:d7:8c:a2:97:d7:fe:5f:
         c9:93:95:45:1e:f2:22:ce:34:65:48:3a:74:a0:ae:17:c0:aa:
         e9:47:ef:37:24:73:1d:32:73:06:43:3d:0f:64:6e:b6:bc:35:
         39:72:03:c5:a4:24:9a:66:3a:12:78:20:6c:80:89:7f:57:5b:
         95:4f:b4:bb:06:a2:c1:00:5d:28:4d:44:b3:5d:c7:c6:66:b1:
         a8:e0:bf:27:21:4b:57:1a:40:16:06:8b:3f:1a:c0:97:94:4c:
         b8:8e:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----