Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130643a353634313a323130303a3a2f34342d3438203d3e20393137.roa
File:                     326130643a353634313a323130303a3a2f34342d3438203d3e20393137.roa (raw, json)
Hash identifier:          weatciRMY+KorkF8+eBWFlBhHbxTeH91AGMhrBG3soo=
Subject key identifier:   6A:75:D1:33:B9:32:EC:26:87:47:94:78:89:EF:88:CC:36:82:D4:38
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       42CB2D70F2795D48DD00FF5D053C2154BF60148F
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634313a323130303a3a2f34342d3438203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:25 +0000
ROA not before:           Sun 03 Dec 2023 21:33:25 +0000
ROA not after:            Sun 01 Dec 2024 21:38:25 +0000
asID:                     917
IP address blocks:        2a0d:5641:2100::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:2d:70:f2:79:5d:48:dd:00:ff:5d:05:3c:21:54:bf:60:14:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:25 2023 GMT
            Not After : Dec  1 21:38:25 2024 GMT
        Subject: CN=6A75D133B932EC268747947889EF88CC3682D438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:a6:a8:b5:80:46:8d:ea:d5:c3:24:fa:3e:
                    18:ad:ab:0f:41:ff:2f:09:40:74:bc:07:78:1e:e0:
                    71:6a:4b:60:c7:cd:de:b6:a1:db:af:3b:79:2b:3d:
                    bd:a3:59:ac:ee:42:3e:04:e1:c0:a1:ea:c5:9a:55:
                    25:d4:f1:81:b1:d2:69:19:02:4b:a2:61:b8:a6:67:
                    ef:72:a7:88:f6:2e:5e:98:0d:55:49:4d:5b:3f:25:
                    92:25:35:4f:b5:ad:23:93:e7:ff:26:ee:30:96:56:
                    be:3c:fb:23:ee:30:7f:2d:07:e7:45:a7:41:52:ad:
                    e4:55:d6:64:17:57:a8:c5:7e:79:cf:40:6f:1a:df:
                    d9:3d:16:3e:50:0f:5d:e6:61:af:05:1b:32:7e:b6:
                    8f:e5:c7:3a:96:8f:f9:53:2b:4e:5d:77:7f:a8:8e:
                    3d:8e:78:fd:dc:5e:3c:40:38:9f:13:d6:d5:7d:a9:
                    8d:6f:cf:83:e9:76:b6:7f:ad:9f:94:ce:bc:f2:da:
                    22:f2:18:76:f5:9c:ea:1a:bc:79:eb:67:10:d6:23:
                    79:c8:7d:16:5f:36:03:3e:2f:03:fe:96:29:19:cc:
                    31:d5:cd:8d:39:ae:e0:57:21:af:92:28:63:f9:0a:
                    99:bb:87:85:3a:2b:a8:d1:c7:66:90:e1:d2:8a:b1:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:75:D1:33:B9:32:EC:26:87:47:94:78:89:EF:88:CC:36:82:D4:38
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634313a323130303a3a2f34342d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:5641:2100::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:e9:1e:1f:60:d8:68:02:52:78:36:3f:2e:3f:09:35:6f:d9:
         20:1c:cb:14:7c:50:ff:71:d4:c5:d6:58:9a:7e:d5:12:ef:07:
         08:31:b9:3f:59:5a:a6:bb:9d:8a:72:34:49:7a:a2:c7:44:08:
         f6:d1:ce:b5:48:98:18:4c:e4:62:49:bd:33:38:b2:2a:4b:98:
         ce:f6:01:f7:fe:b9:1d:02:80:d4:84:ec:ab:74:b0:bf:2b:ee:
         59:78:42:03:91:56:a2:2d:8a:31:36:dc:09:f7:7e:32:21:0f:
         a1:a5:dc:a7:fb:5c:18:e2:73:01:4a:3f:b5:d9:15:48:e8:3e:
         73:81:cb:a1:e2:4c:d2:5b:bf:e2:8a:37:9a:60:8e:bd:18:14:
         73:d2:3a:6d:bd:d5:25:71:db:49:e3:13:f0:cb:1e:97:b8:03:
         57:5e:43:d0:d0:08:cb:bf:a6:f9:ea:2b:f9:05:b3:6e:59:7e:
         36:4f:92:d7:d0:a1:31:36:1c:7d:a5:60:6b:8b:8a:a2:33:3e:
         19:0e:45:dd:f2:28:95:42:29:7b:b9:47:0e:40:71:19:b6:96:
         f0:c2:48:b4:73:3b:5c:25:94:a1:c1:ff:99:e2:39:02:40:a4:
         a0:4a:80:b4:11:7b:a5:93:cd:37:c4:d1:b7:50:27:4a:f0:a4:
         5d:d7:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----