Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130653a363930323a3a2f33322d3438203d3e203537363935.roa
File:                     326130653a363930323a3a2f33322d3438203d3e203537363935.roa (raw, json)
Hash identifier:          itB5uqJMMZyosEEXDgEMys3XDjqCcsdPqxJJqHvkd7w=
Subject key identifier:   A3:E2:0F:E9:86:A9:24:B5:4F:7D:AB:27:F2:12:05:4F:DB:A7:22:02
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       41479B351ADB4E24A9EDF46D01DB99DAC4BF36E0
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930323a3a2f33322d3438203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:18 +0000
ROA not before:           Sun 03 Dec 2023 21:33:18 +0000
ROA not after:            Sun 01 Dec 2024 21:38:18 +0000
asID:                     57695
IP address blocks:        2a0e:6902::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:47:9b:35:1a:db:4e:24:a9:ed:f4:6d:01:db:99:da:c4:bf:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:18 2023 GMT
            Not After : Dec  1 21:38:18 2024 GMT
        Subject: CN=A3E20FE986A924B54F7DAB27F212054FDBA72202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:66:9b:99:5e:98:1a:d4:77:c1:66:45:6f:
                    fb:2b:d5:51:b6:3d:04:b4:2f:22:3e:0c:b7:fc:4c:
                    5b:cf:f3:fa:b0:4f:76:b9:cd:ec:d5:81:27:88:86:
                    0e:8f:50:b5:08:98:fe:0e:72:c4:5e:bc:66:66:1a:
                    5b:ec:8a:e7:5e:b8:26:25:ab:4c:e6:88:fe:96:d7:
                    cd:83:69:5a:76:0c:19:01:84:86:82:14:7a:7e:3b:
                    76:ec:11:25:30:34:c5:29:84:b0:e4:89:78:2a:19:
                    b4:7f:13:06:32:fa:69:c7:62:81:44:09:13:89:de:
                    59:cd:41:23:71:21:dd:b0:c6:a6:78:6c:80:f2:0e:
                    d3:a8:ad:8b:d0:31:6b:cb:c3:34:f8:35:97:ba:f9:
                    7c:2b:f8:eb:d0:9a:68:c9:ad:20:ab:a1:af:e3:42:
                    73:cd:5c:04:ee:7a:27:23:1c:2a:f8:05:2b:0f:ea:
                    d1:0a:71:bd:3b:4a:24:e3:46:3b:24:ae:0d:f3:e2:
                    ce:91:c8:c6:94:cc:f5:28:d9:e5:85:8c:aa:1f:2b:
                    e8:20:a1:a6:a4:c9:6d:ed:b7:02:5b:69:57:24:82:
                    5b:27:95:c8:0c:6d:d4:8c:c8:8d:a4:00:50:23:4c:
                    14:f4:59:48:a3:4f:d4:4c:7e:65:55:74:d9:b1:77:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:0F:E9:86:A9:24:B5:4F:7D:AB:27:F2:12:05:4F:DB:A7:22:02
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930323a3a2f33322d3438203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6902::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:fe:6f:bd:e1:05:59:64:86:27:1e:d4:2e:6b:5c:13:4a:7a:
         78:26:97:15:07:79:82:67:eb:78:20:5d:41:37:21:c6:97:8b:
         c8:50:cf:ee:bd:17:49:56:ff:67:ed:c1:35:65:ef:71:5a:f6:
         66:04:c7:51:68:2a:66:22:a7:c2:8a:65:1c:80:18:58:b3:b9:
         50:eb:85:96:36:a7:14:7f:bb:10:b5:e4:25:65:b1:5a:d5:bd:
         42:c9:24:6f:9b:00:c2:67:dd:5c:82:22:65:80:44:d5:71:74:
         18:20:a2:4d:f6:10:8b:95:ba:14:07:58:36:fa:b4:47:95:65:
         31:7c:e0:58:7a:a4:b4:6a:2d:99:bf:c5:3e:91:c7:e2:25:d8:
         d5:f4:e1:89:c3:76:8d:bc:07:8f:fa:37:e6:f8:ef:9a:cb:12:
         b1:67:a4:2a:ed:dc:63:aa:48:10:12:84:77:de:92:81:f0:49:
         be:f4:72:c9:32:63:81:e9:0b:34:57:df:67:04:95:68:7f:a8:
         0a:fd:98:88:31:bc:80:fd:67:00:98:0a:99:3d:6c:9e:07:ea:
         db:da:84:b2:49:65:99:4a:f9:d7:58:72:dd:ae:99:40:38:ba:
         b7:75:5e:81:b2:5d:49:80:49:88:71:60:b7:1f:e4:bf:fa:26:
         29:13:f8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----