Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130653a356334303a3a2f32392d3430203d3e203537353738.roa
File:                     326130653a356334303a3a2f32392d3430203d3e203537353738.roa (raw, json)
Hash identifier:          XElwgQLcW1Wb/40KWNcSeItubwqOmozxHcAGQ7u5Ngk=
Subject key identifier:   EA:3A:67:22:2B:FE:F6:6E:8B:B0:B2:19:F8:24:73:6A:FC:42:8B:31
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       7AD518DEAD8FB1FA3DBBE1F39F2366F8593513AE
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130653a356334303a3a2f32392d3430203d3e203537353738.roa
Signing time:             Sun 03 Dec 2023 21:38:23 +0000
ROA not before:           Sun 03 Dec 2023 21:33:23 +0000
ROA not after:            Sun 01 Dec 2024 21:38:23 +0000
asID:                     57578
IP address blocks:        2a0e:5c40::/29 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d5:18:de:ad:8f:b1:fa:3d:bb:e1:f3:9f:23:66:f8:59:35:13:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:23 2023 GMT
            Not After : Dec  1 21:38:23 2024 GMT
        Subject: CN=EA3A67222BFEF66E8BB0B219F824736AFC428B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:31:fb:4f:14:01:b6:9a:d7:af:e1:db:b3:
                    81:c0:e2:68:0d:c3:a1:9f:a9:70:39:69:29:14:97:
                    79:b2:98:77:b5:21:d5:81:e9:77:b9:db:29:d6:f9:
                    aa:c9:9c:9b:78:10:5c:0f:fd:50:74:89:a7:2b:0e:
                    15:44:5b:73:b6:b3:70:4b:0b:2e:36:2b:48:17:00:
                    b1:f9:b0:25:49:6e:97:f5:53:cc:1a:e4:3b:fe:f4:
                    b3:ef:9a:73:16:c6:5e:d7:c4:3d:40:4c:c9:72:26:
                    72:90:d1:0d:8f:f9:ee:33:13:9b:d1:d2:54:54:6b:
                    df:b6:60:17:b9:a3:69:c8:40:cf:a4:6d:a5:d6:26:
                    5f:3a:21:41:db:f7:ac:2d:68:24:ba:86:19:af:53:
                    e2:37:f9:d1:af:b9:17:d4:fe:3b:23:eb:23:cb:5f:
                    37:47:8a:1d:d4:23:05:7e:ba:ba:75:d8:ef:ac:66:
                    e4:ad:a8:5b:02:8b:8c:b1:4e:e6:27:b1:30:d3:e2:
                    8d:5f:a3:35:fb:c2:16:d5:2f:90:d6:dc:d8:ac:75:
                    83:3d:86:ab:56:3e:fb:1d:80:3a:51:23:78:b4:02:
                    98:08:88:a6:49:8e:2d:1a:1c:9e:7c:4d:2a:f9:ea:
                    0c:db:0c:41:15:33:4b:1f:2e:63:1b:30:a1:4e:c2:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3A:67:22:2B:FE:F6:6E:8B:B0:B2:19:F8:24:73:6A:FC:42:8B:31
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130653a356334303a3a2f32392d3430203d3e203537353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:5c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:4a:62:6a:d5:d2:37:ed:2e:ca:2d:a7:06:61:f8:02:4f:
         c0:7e:99:b9:20:e3:85:b0:21:37:d2:fe:21:43:b0:36:0f:ee:
         f5:7a:41:80:d9:24:83:8f:c4:e7:f7:b3:ff:1c:7f:58:2c:e5:
         af:9c:d4:98:c4:ef:73:fc:81:54:5a:94:88:a6:ca:c2:d3:19:
         85:d0:e6:b4:80:70:da:02:45:96:78:86:0a:21:e7:d0:06:0d:
         7d:9e:bf:81:f1:dd:90:79:2b:b0:fa:d2:cf:b0:aa:3e:2f:90:
         31:43:9d:4c:ee:08:a2:43:bf:ed:c6:f2:bf:7c:f5:d0:f1:1c:
         b8:d4:e2:1a:87:98:4c:8a:51:78:c3:b0:bb:1e:b1:14:5d:df:
         ee:75:f6:32:a6:33:52:b4:55:ca:45:d5:da:1b:c5:c7:a2:72:
         e4:ce:32:01:a0:5b:46:5c:04:63:2d:1a:9f:1a:f8:e0:95:14:
         25:ee:0e:f0:51:8f:23:69:c8:ad:c3:7b:a0:05:92:d6:2f:21:
         65:a8:de:88:27:7c:1e:55:77:c5:55:45:aa:91:a7:e1:29:a3:
         09:fa:54:e2:8a:6a:7a:b2:05:ff:4f:8f:a0:86:6b:5c:cd:b4:
         f7:b6:11:93:4c:7e:47:30:0c:d8:21:70:a3:72:4c:0e:46:eb:
         89:99:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----