Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130643a323930323a636166303a3a2f34342d3438203d3e20323034313835.roa
File:                     326130643a323930323a636166303a3a2f34342d3438203d3e20323034313835.roa (raw, json)
Hash identifier:          ADHXEzToPZXh2hADJk12QXM2IOfZKBte+/C61J46Vs0=
Subject key identifier:   A0:71:DE:BF:AB:F7:99:46:AB:2E:35:D3:44:FB:83:CB:EB:8C:B0:EE
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       692BACB8A6ED218EA004B8DF453040745A384738
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130643a323930323a636166303a3a2f34342d3438203d3e20323034313835.roa
Signing time:             Sun 03 Dec 2023 21:38:19 +0000
ROA not before:           Sun 03 Dec 2023 21:33:19 +0000
ROA not after:            Sun 01 Dec 2024 21:38:19 +0000
asID:                     204185
IP address blocks:        2a0d:2902:caf0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2b:ac:b8:a6:ed:21:8e:a0:04:b8:df:45:30:40:74:5a:38:47:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:19 2023 GMT
            Not After : Dec  1 21:38:19 2024 GMT
        Subject: CN=A071DEBFABF79946AB2E35D344FB83CBEB8CB0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ba:32:1a:83:79:e5:b0:0f:1a:76:d0:1d:6e:
                    03:b8:00:cf:e0:41:06:89:2b:41:21:68:b5:0a:05:
                    b8:f6:81:2c:b5:b3:e4:13:7b:14:06:e2:af:07:ec:
                    ad:54:dd:e0:39:85:e4:b1:78:59:ce:34:7e:f6:29:
                    43:3a:ab:1f:89:7c:b2:95:ca:06:60:c5:6a:8e:08:
                    c4:9f:e7:32:19:c5:d4:6a:30:99:90:63:96:89:9d:
                    ba:e5:30:78:8f:09:51:fc:92:ad:68:79:82:ce:cd:
                    44:0e:3b:ea:91:3d:f3:20:c1:1a:02:f8:af:c4:bf:
                    56:de:43:3d:d0:83:82:e9:cd:ea:44:c5:ca:08:f5:
                    0d:60:39:4a:69:ed:c1:de:b6:f0:fa:2f:54:f3:4b:
                    b7:f0:28:b2:70:2d:ab:8a:fa:9a:e4:e7:4a:ed:30:
                    71:8b:4a:c2:a6:f3:e2:13:9e:b1:99:cd:27:93:47:
                    0e:8d:83:9e:b9:cc:86:05:33:fe:43:45:3d:68:95:
                    fd:86:09:ef:c8:f7:1a:0a:4c:cc:99:be:05:d0:8d:
                    c1:ea:12:f3:0a:86:9b:81:2f:0c:63:15:06:70:22:
                    4c:25:8f:f1:45:25:06:58:37:b5:20:ea:ba:92:15:
                    90:3e:f1:c5:10:fa:f4:30:bb:89:d5:da:f9:6a:b5:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:71:DE:BF:AB:F7:99:46:AB:2E:35:D3:44:FB:83:CB:EB:8C:B0:EE
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130643a323930323a636166303a3a2f34342d3438203d3e20323034313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2902:caf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:a3:99:a7:dc:26:2a:b2:33:6a:28:eb:e3:d8:bf:30:16:35:
         92:2a:a6:b4:d2:c9:12:96:d8:42:de:03:55:27:5e:4a:7a:cd:
         9e:9f:40:e2:55:f6:5e:85:09:47:3e:b7:ac:0a:1b:4b:ca:25:
         d8:ed:b2:d7:39:50:24:c4:8c:1a:4e:aa:dd:f7:6d:d5:b0:87:
         05:a7:6d:90:b4:71:44:cf:00:32:25:ca:90:a5:4e:c1:8b:88:
         f9:d9:b2:c1:b6:69:03:89:04:3b:82:65:cb:9c:7d:06:1a:01:
         25:a7:87:d0:c2:22:ef:3f:a3:d3:9a:2a:00:07:aa:0e:78:5b:
         f2:b7:60:ef:d6:0c:2e:6f:e2:fb:f2:8c:d8:75:70:9c:c7:10:
         46:d6:e1:33:ba:7e:4b:81:b4:d1:92:d5:2c:7c:a6:c7:da:c0:
         9b:53:78:4d:f7:16:0b:dd:f2:82:9c:d8:67:b4:fd:9e:46:11:
         7e:d2:74:71:a0:cb:11:73:dd:7e:e3:17:2e:a2:7e:4f:cc:53:
         10:45:40:d4:2d:0f:d9:53:0d:3d:f4:f4:21:df:8a:97:a2:3d:
         6b:ac:7a:09:c1:07:2f:cf:13:c8:a5:e3:7d:5c:0f:b8:35:cd:
         0f:d2:f5:c4:4f:18:26:f2:86:1a:ae:3d:27:e8:5b:aa:28:17:
         4a:3a:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----