Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130653a363930313a3a2f33322d3438203d3e20393137.roa
File:                     326130653a363930313a3a2f33322d3438203d3e20393137.roa (raw, json)
Hash identifier:          knXV3MdbulSn9KlbbIJ3fSdAQjv7CbzmUEb7mkYuEe4=
Subject key identifier:   6E:B2:3D:78:BE:32:EC:03:12:7F:3A:DF:2D:83:FE:7F:BF:A9:7B:83
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       174C4A325CF8B2A7F5D66B1021A0551A257515E3
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930313a3a2f33322d3438203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:17 +0000
ROA not before:           Sun 03 Dec 2023 21:33:17 +0000
ROA not after:            Sun 01 Dec 2024 21:38:17 +0000
asID:                     917
IP address blocks:        2a0e:6901::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4c:4a:32:5c:f8:b2:a7:f5:d6:6b:10:21:a0:55:1a:25:75:15:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:17 2023 GMT
            Not After : Dec  1 21:38:17 2024 GMT
        Subject: CN=6EB23D78BE32EC03127F3ADF2D83FE7FBFA97B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:03:2d:08:bb:f1:57:6e:44:6a:77:bc:1b:
                    8f:67:5d:79:8b:10:f9:5a:26:a1:ec:90:ec:0e:7a:
                    e0:58:d4:61:62:fb:51:62:ae:07:1b:91:29:ce:dc:
                    c0:eb:99:45:95:4a:ca:d5:d5:35:7d:09:9e:ef:c9:
                    e0:4b:a4:0d:0e:d1:19:fc:86:20:f8:51:a7:61:7c:
                    d4:29:cc:d7:ef:14:07:af:a5:34:c3:64:8c:9f:4e:
                    e8:e0:23:0f:5e:b9:be:6b:33:f2:7c:3d:e6:af:be:
                    19:92:63:90:c0:71:5f:0e:86:5e:7c:75:3e:07:5a:
                    76:58:b1:c2:6e:35:ce:98:a6:91:fe:e5:bf:e4:13:
                    33:23:5d:fe:21:09:5e:b0:32:a1:b3:88:9c:70:e3:
                    2c:0f:89:1a:c3:7f:5c:7f:21:8c:18:52:83:f3:ed:
                    70:34:30:2a:c6:6e:9b:45:bc:63:c0:fb:61:6e:b3:
                    9d:d8:bf:8f:aa:a1:4f:0a:3f:d0:5b:82:6b:9e:d3:
                    6f:0e:79:54:0f:5f:67:33:c6:15:fb:81:2b:48:02:
                    b3:20:36:8d:0a:dd:35:ef:4e:0a:c8:d1:39:20:d0:
                    87:2b:6d:89:c4:6a:87:08:cf:c9:5a:fe:d8:a7:4e:
                    64:10:6f:3f:79:31:f1:13:23:85:f9:a1:58:bd:d3:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:3D:78:BE:32:EC:03:12:7F:3A:DF:2D:83:FE:7F:BF:A9:7B:83
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930313a3a2f33322d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6901::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:23:af:37:b2:ba:16:e1:4e:38:f3:47:f5:38:e1:11:1e:03:
         e3:dc:a1:06:39:96:60:13:35:12:a1:b7:49:c2:b3:2d:5e:a1:
         dd:d6:f3:81:eb:9e:82:71:4b:9e:10:6b:69:ac:06:ba:1b:a7:
         37:56:3f:08:54:ea:91:41:15:09:f8:25:02:04:07:b1:b2:76:
         92:06:37:9e:2b:50:da:58:29:81:b2:50:ef:1e:cb:69:b5:29:
         e9:b6:58:ff:cb:e4:a7:60:4a:e0:e2:de:6e:50:da:2a:99:44:
         1b:79:23:74:9b:df:bc:39:2b:72:fc:a8:d7:6b:0e:84:c4:f3:
         95:10:3a:4c:26:fa:7f:e3:d9:bc:1a:7a:d9:3d:95:86:f0:55:
         94:6a:f2:cf:5f:9f:5e:58:06:b9:29:82:16:2d:d8:af:05:4e:
         57:78:24:1b:15:b5:41:ba:8d:1a:d4:a2:b2:30:0d:da:38:7b:
         42:e6:9e:25:9d:5e:e7:a9:43:49:2f:91:70:18:ad:f3:72:9e:
         f4:0c:9a:69:5b:20:88:9b:d7:17:47:39:b3:f1:48:d1:dd:be:
         b6:29:70:99:99:dc:3e:8d:de:03:19:ce:7d:62:6b:97:61:6f:
         1c:92:0c:f6:89:3e:0c:ad:d8:1a:4c:f4:25:0f:7e:a2:e5:1e:
         eb:42:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----