Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130643a353634323a3a2f33322d3438203d3e203335343837.roa
File:                     326130643a353634323a3a2f33322d3438203d3e203335343837.roa (raw, json)
Hash identifier:          aa0MsEe5ZzAbAnplSFoWDwJ4BdVrXINqNBBjh85OHgc=
Subject key identifier:   A4:5F:A6:BD:86:8E:C3:EF:61:0A:CF:61:B2:92:B5:E3:F4:2B:35:F7
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       03DDB29B38E6D0791C112462690BE7E3D0A82F39
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634323a3a2f33322d3438203d3e203335343837.roa
Signing time:             Sun 03 Dec 2023 21:38:23 +0000
ROA not before:           Sun 03 Dec 2023 21:33:23 +0000
ROA not after:            Sun 01 Dec 2024 21:38:23 +0000
asID:                     35487
IP address blocks:        2a0d:5642::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dd:b2:9b:38:e6:d0:79:1c:11:24:62:69:0b:e7:e3:d0:a8:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:23 2023 GMT
            Not After : Dec  1 21:38:23 2024 GMT
        Subject: CN=A45FA6BD868EC3EF610ACF61B292B5E3F42B35F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:71:8f:f3:db:f6:44:13:c2:fd:22:de:dc:
                    76:0d:73:8d:1b:00:29:f0:e6:88:46:16:23:db:7c:
                    31:b6:83:ed:5a:18:0e:b3:2a:3a:17:69:23:b2:e1:
                    e2:27:0e:2f:b2:a2:9f:ef:4c:aa:1d:f8:b9:4e:a3:
                    6c:fd:70:d9:6c:8d:e6:aa:8a:13:76:d7:f8:61:a4:
                    5c:4b:ea:0b:6b:00:c6:c2:80:e3:1e:28:f6:de:74:
                    dc:b6:92:c8:22:f1:6e:76:5b:d7:a2:84:27:76:82:
                    ae:08:09:af:61:84:8a:75:76:77:d5:d3:61:e9:9a:
                    a0:00:29:ab:ac:ea:67:11:13:73:aa:a4:6f:41:cb:
                    f2:09:78:03:3e:d4:e8:34:e6:73:37:ba:ab:82:a0:
                    55:b0:99:91:45:04:05:c3:7e:12:27:f0:2b:ed:58:
                    d6:ce:19:4a:31:d8:7b:2b:a3:a9:71:90:78:d5:82:
                    75:01:98:b8:58:95:f2:25:20:65:1e:d5:1a:9f:91:
                    14:52:d1:0c:d7:5a:78:30:63:e6:81:21:da:e8:bf:
                    a7:71:91:7b:4c:08:7b:26:1a:d1:ca:85:02:62:1f:
                    5a:9c:e9:24:91:06:e7:77:67:d7:85:1d:b1:c5:ca:
                    eb:83:8c:0b:05:d4:e7:f0:d1:e4:d6:6f:3d:06:7c:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:A6:BD:86:8E:C3:EF:61:0A:CF:61:B2:92:B5:E3:F4:2B:35:F7
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130643a353634323a3a2f33322d3438203d3e203335343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:5642::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:35:17:3f:6c:e3:1d:90:fb:a7:2e:b8:47:fe:55:d7:ce:20:
         c8:60:e2:b8:1d:a6:60:80:7b:4c:71:a7:59:ad:a8:56:7f:da:
         43:8d:f0:6d:8f:09:48:52:b6:c6:f9:e6:93:9f:b5:60:2a:e6:
         05:54:82:c5:87:10:dd:43:c8:a0:16:75:e7:b7:58:54:bf:70:
         12:5d:23:11:3a:06:5e:f1:4c:c4:97:f0:7f:50:04:6a:4f:96:
         5a:02:0d:a9:34:b6:2d:1e:4d:6c:ad:06:11:bb:2c:9f:39:ca:
         1f:34:c7:4f:e1:e1:db:38:ae:6e:01:97:e8:cb:5b:fb:e6:c3:
         2d:7e:da:df:85:b7:88:1f:f5:28:14:b4:46:af:6d:fa:cc:7a:
         3b:72:ec:0a:01:93:54:63:4d:b8:e2:fa:df:d9:1b:e6:7f:df:
         85:fe:2d:7f:1f:8a:25:30:46:ee:d4:1e:72:8c:e1:c2:48:09:
         1d:dd:bc:48:57:8f:3c:ba:49:46:f7:2b:77:f8:89:8e:4e:66:
         c6:4b:12:2e:f1:af:c6:42:e4:d4:16:db:66:fc:2d:05:77:16:
         d9:73:17:c9:1a:17:fd:ae:24:22:e5:90:c1:6f:24:1e:eb:73:
         04:be:b0:67:ee:ee:8d:f4:9b:75:a7:de:d3:b9:cf:f5:de:36:
         6d:d8:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org