Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130653a363930343a3a2f33312d3438203d3e203531393238.roa
File:                     326130653a363930343a3a2f33312d3438203d3e203531393238.roa (raw, json)
Hash identifier:          jzInbamavcuDzKZUJiCBlkmT2WhpwnspHxe8stLCnrE=
Subject key identifier:   67:69:9B:2E:8A:AA:78:CC:77:08:7C:74:14:F6:8E:11:D9:82:74:DC
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       5755D230614822F5FB873F20DA6383FF39BACD7C
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930343a3a2f33312d3438203d3e203531393238.roa
Signing time:             Sun 03 Dec 2023 21:38:23 +0000
ROA not before:           Sun 03 Dec 2023 21:33:23 +0000
ROA not after:            Sun 01 Dec 2024 21:38:23 +0000
asID:                     51928
IP address blocks:        2a0e:6904::/31 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:55:d2:30:61:48:22:f5:fb:87:3f:20:da:63:83:ff:39:ba:cd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:23 2023 GMT
            Not After : Dec  1 21:38:23 2024 GMT
        Subject: CN=67699B2E8AAA78CC77087C7414F68E11D98274DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:09:d2:63:77:f8:e4:af:62:be:33:94:4a:
                    66:b1:de:21:a9:35:c6:13:49:f7:86:3f:26:81:f5:
                    49:8e:30:e4:17:99:d5:2f:00:32:c5:2d:1a:e5:30:
                    32:d5:43:bd:fe:52:37:d3:4c:09:d7:ca:b3:53:84:
                    a7:75:30:b9:31:4f:b4:8a:df:df:34:97:71:88:a3:
                    d0:0a:a5:15:d6:08:08:ed:3f:66:1e:e5:dd:ac:aa:
                    c9:32:a1:80:aa:2e:7e:fd:87:00:bd:b9:5f:dc:52:
                    45:04:11:9e:a1:73:e7:f2:af:c0:4d:9a:7f:81:10:
                    2a:07:84:2c:35:f5:5d:44:87:7d:a8:b4:e9:ee:b9:
                    be:53:32:a6:86:ea:14:12:98:ef:19:af:86:ce:1f:
                    dd:64:0b:36:65:09:dc:26:cd:c9:04:54:76:b3:69:
                    2f:a1:6f:a0:e3:9a:d9:6a:ec:3c:84:a9:32:5c:65:
                    b7:55:31:1b:8a:cf:d2:9c:2b:e1:11:c7:e4:ac:44:
                    b3:be:ff:54:32:ab:e6:66:5b:2b:36:32:a5:87:d3:
                    02:e7:eb:f1:ef:1c:a7:89:6c:1f:0e:92:3c:c0:d0:
                    5f:6a:16:b6:58:28:48:99:b2:e0:66:45:13:cf:c3:
                    93:ec:e3:bb:ce:88:1c:6e:5b:52:55:0f:ad:0a:ef:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:69:9B:2E:8A:AA:78:CC:77:08:7C:74:14:F6:8E:11:D9:82:74:DC
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930343a3a2f33312d3438203d3e203531393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6904::/31

    Signature Algorithm: sha256WithRSAEncryption
         5b:c3:a2:62:28:be:c5:6f:c4:56:ed:b7:00:bd:90:30:5e:c2:
         71:3a:1f:d9:fe:e6:38:08:37:a9:bc:76:8e:c5:a8:c6:9d:cd:
         b0:8b:f4:7e:16:e8:44:77:18:c5:89:f8:9a:8c:9a:65:2b:aa:
         f5:91:3c:13:31:54:3f:e0:a8:75:3d:7c:b5:62:45:35:7f:f5:
         33:5e:0b:29:09:d5:94:4b:44:c5:de:c0:ba:2e:10:a2:63:57:
         db:47:e6:fb:0e:5e:5c:3a:df:e5:08:4a:72:a3:0f:11:c1:b5:
         6e:b4:a8:d1:d5:be:82:48:1d:28:08:67:5d:6e:c7:c5:eb:0a:
         c8:42:d7:46:58:e7:5a:23:bd:30:23:fd:15:20:dc:3d:9c:2d:
         df:4c:a5:6a:62:f3:39:4c:bd:04:c2:48:47:0c:46:34:43:7b:
         80:80:e8:ab:1c:52:51:49:c4:4a:62:29:9a:45:61:fc:f8:67:
         0c:2c:03:e5:24:42:65:b1:9e:f3:13:59:f5:e4:4c:cb:0b:2d:
         24:dd:44:b3:6b:8b:66:cb:8d:8d:6f:a5:2c:ea:ad:53:12:9d:
         d5:69:b3:c6:ef:e2:a3:67:bd:e8:4b:72:10:72:c7:10:77:ea:
         a7:ca:a7:3b:0c:d0:84:23:9c:6c:6b:ec:7c:55:a8:68:f8:0c:
         02:81:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----