Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130653a363930363a3a2f33322d3438203d3e203438303234.roa
File:                     326130653a363930363a3a2f33322d3438203d3e203438303234.roa (raw, json)
Hash identifier:          yW+hFlv5G4rbAVRau8cQ5gq53k+nQLB8nwod8jWKb9w=
Subject key identifier:   92:D7:AF:1B:92:DA:BC:D5:6E:89:22:3F:55:80:6D:A7:6E:6A:90:8E
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       26C6517E859C3DBA5790F3C92EB47DB96129EC8C
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930363a3a2f33322d3438203d3e203438303234.roa
Signing time:             Sun 03 Dec 2023 21:38:23 +0000
ROA not before:           Sun 03 Dec 2023 21:33:23 +0000
ROA not after:            Sun 01 Dec 2024 21:38:23 +0000
asID:                     48024
IP address blocks:        2a0e:6906::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c6:51:7e:85:9c:3d:ba:57:90:f3:c9:2e:b4:7d:b9:61:29:ec:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:23 2023 GMT
            Not After : Dec  1 21:38:23 2024 GMT
        Subject: CN=92D7AF1B92DABCD56E89223F55806DA76E6A908E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:6b:1a:7a:68:62:c1:22:ea:64:34:a3:3c:
                    97:24:14:c7:4b:0c:93:32:ed:53:20:c2:c4:32:e1:
                    5e:9c:96:8e:83:52:00:21:3c:19:ed:46:a5:2e:8f:
                    22:03:1f:3b:03:b8:c4:a1:08:d8:fa:07:04:18:26:
                    ef:5a:8c:79:ad:1c:61:35:24:a3:f2:d8:2f:34:f7:
                    ac:b5:7f:a6:3d:5a:45:ce:76:d1:45:ca:c4:b6:06:
                    74:50:6c:83:9b:30:08:fb:7f:22:52:5e:6d:a7:dd:
                    e3:da:ee:25:af:65:99:ee:76:df:8d:1d:41:a7:1e:
                    1e:2f:3f:94:96:66:8a:73:e6:50:df:13:da:42:db:
                    aa:5a:cb:bb:9f:7a:17:7e:84:19:76:7c:24:20:34:
                    a5:cb:78:a1:4b:31:bf:9e:c0:54:99:a8:8d:31:49:
                    23:10:2d:d0:46:05:52:9a:b5:81:80:ed:a3:15:c5:
                    36:1f:fc:02:2f:29:a3:f7:77:fc:2a:f9:97:3f:96:
                    d6:84:24:e3:6c:6f:c8:b2:5f:ce:e7:4d:d4:c1:57:
                    23:83:76:23:b4:7a:49:e5:0d:41:81:2c:5b:30:42:
                    19:52:52:84:2b:8b:49:ee:f3:c3:22:a7:fc:33:a1:
                    d1:d4:4a:76:c2:34:36:80:fc:4e:11:97:51:e1:a7:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D7:AF:1B:92:DA:BC:D5:6E:89:22:3F:55:80:6D:A7:6E:6A:90:8E
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930363a3a2f33322d3438203d3e203438303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6906::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:93:1c:7e:a1:d2:1a:44:8e:fd:6a:0e:97:4b:32:09:3d:
         ff:62:23:e9:b4:1e:10:e9:c4:09:8d:38:58:23:a5:34:d7:ec:
         60:c0:39:17:64:d3:65:9f:71:99:07:4c:47:b0:98:1c:10:3c:
         ee:34:e2:b0:07:47:e5:61:29:91:23:00:91:09:cf:0c:11:69:
         2b:42:62:ae:2b:dc:2c:9c:97:aa:a2:17:e8:8f:8b:44:f5:0d:
         9a:de:eb:cc:a3:b2:d5:75:bf:c1:8a:ee:2c:99:92:e7:97:88:
         25:cc:6c:8a:fa:e3:d5:69:b8:14:ec:29:93:84:6a:bb:5d:fb:
         b4:f6:c0:3c:85:cd:f5:b7:eb:50:86:b8:dc:3e:39:f2:a6:bd:
         00:fc:e3:59:3f:bf:71:35:92:7f:0e:69:42:14:e7:86:ed:01:
         21:59:5b:b4:a3:35:95:91:aa:b4:5a:94:fa:81:7d:4a:e0:37:
         b4:e9:a9:30:76:46:e1:a9:f5:79:38:b4:af:8a:c5:07:1b:9c:
         34:04:fd:6e:7d:54:5e:14:1a:6f:fd:c4:ef:5b:8e:41:f0:2a:
         d6:5d:b1:54:11:e7:d2:0d:d1:61:27:d7:be:65:41:cc:1a:bc:
         c3:87:2d:da:eb:f4:d9:63:34:9b:3d:36:ec:06:4d:23:24:41:
         fd:12:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org