Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130643a353634313a323130303a3a2f34342d3438203d3e203537363935.roa
File:                     326130643a353634313a323130303a3a2f34342d3438203d3e203537363935.roa (raw, json)
Hash identifier:          ee5YuwKCKG4Vk8pe/h5Xtk+jl9R/gK+h1BMBcMsJHuA=
Subject key identifier:   51:EE:F1:D4:76:E9:2A:71:0E:96:E7:3F:FB:B1:2E:90:7E:47:AF:E3
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       3D79CBB37837A678AB6E7C1A29226BF7C9177138
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634313a323130303a3a2f34342d3438203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:19 +0000
ROA not before:           Sun 03 Dec 2023 21:33:19 +0000
ROA not after:            Sun 01 Dec 2024 21:38:19 +0000
asID:                     57695
IP address blocks:        2a0d:5641:2100::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:79:cb:b3:78:37:a6:78:ab:6e:7c:1a:29:22:6b:f7:c9:17:71:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:19 2023 GMT
            Not After : Dec  1 21:38:19 2024 GMT
        Subject: CN=51EEF1D476E92A710E96E73FFBB12E907E47AFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:56:0c:49:5d:cc:f4:77:38:5e:a0:13:83:
                    e2:29:41:aa:d4:8a:ab:98:69:2b:9e:d3:12:8e:85:
                    b7:fb:d1:e7:1a:8e:98:b8:42:0d:a3:d9:50:79:9a:
                    c1:e6:83:8f:18:a8:8c:64:ed:fd:be:53:35:04:64:
                    dc:57:96:3f:f2:7d:a2:ae:fc:9f:76:d7:17:b6:65:
                    85:b0:bf:3f:f3:44:11:69:bc:a6:b2:06:8d:d5:b9:
                    c3:16:75:7e:63:eb:0a:bb:a7:1d:55:05:28:06:03:
                    c6:4b:c7:ff:05:e6:3b:c2:78:5a:f4:55:f8:96:07:
                    58:f2:35:d7:36:cb:2d:0c:82:8b:9b:55:f5:ed:f1:
                    49:14:f0:c4:b6:39:ef:68:4b:b5:3f:64:15:90:9a:
                    b6:ef:6b:8b:f5:80:60:64:70:fe:71:5d:88:23:6e:
                    71:79:61:45:3e:e8:d0:80:76:ea:d6:ea:30:7a:d9:
                    2e:69:31:04:86:5f:cb:70:19:3b:e3:60:74:4d:54:
                    19:6f:d3:5f:5c:1c:1b:d0:ca:32:4e:15:93:90:78:
                    08:62:33:4b:3b:f8:f0:28:83:89:0f:a5:b1:70:75:
                    22:c1:c8:26:f7:20:71:e4:36:62:24:34:a8:49:14:
                    04:ca:47:d8:32:02:36:37:68:41:65:84:13:ab:43:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EE:F1:D4:76:E9:2A:71:0E:96:E7:3F:FB:B1:2E:90:7E:47:AF:E3
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634313a323130303a3a2f34342d3438203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:5641:2100::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:98:a8:94:34:93:62:75:23:5b:b9:f2:ee:0c:8b:88:f1:53:
         5b:fe:46:4c:f2:7b:85:a2:47:f1:2e:ed:3a:cd:16:6c:f1:0e:
         36:82:0f:ca:c1:a3:26:e9:df:0a:03:12:53:4f:45:a0:d4:49:
         df:b6:57:4f:e1:6f:89:d5:8e:58:83:5a:09:23:f2:a0:38:3c:
         ef:fb:29:9e:22:06:2c:b3:4e:66:a4:5c:be:3d:22:ac:39:c8:
         1c:38:c9:af:06:76:79:5c:03:fa:fb:03:f2:6c:f8:5b:50:fd:
         4c:a0:ba:3a:0c:5c:11:3b:4c:97:5b:38:eb:94:7f:a0:19:c7:
         5c:0e:cf:53:35:9b:e9:1a:2c:97:3b:5c:64:45:c9:21:9d:e2:
         47:2e:ba:9c:2b:34:f1:97:40:37:ad:99:28:b0:b7:5c:01:39:
         d5:49:27:4d:c7:96:a4:7f:2a:2b:13:a3:54:4b:07:ec:d9:91:
         88:6b:1b:66:cb:7b:8b:ac:81:d3:40:a1:18:e6:a7:83:f4:15:
         da:72:82:c1:65:80:c6:65:75:28:97:c8:f5:cf:2b:69:46:ec:
         a7:0c:84:96:84:69:ea:d5:99:34:1d:fb:45:3d:c0:55:fd:04:
         00:a4:e0:49:8d:9a:c9:0d:01:7c:49:28:ac:4e:7b:0a:5f:33:
         d7:2e:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org