Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326131313a366530313a3a2f33322d3438203d3e20393137.roa
File:                     326131313a366530313a3a2f33322d3438203d3e20393137.roa (raw, json)
Hash identifier:          r6iqN+vialsq79ItH8iG1oUXaqLBWmNerexXNsyjkXY=
Subject key identifier:   D6:D8:3F:D7:BF:DA:1C:D4:33:46:D0:52:51:8D:99:E9:3F:62:27:53
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       721FBAED91E51715B2814E44BCE5272A8AA434C0
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326131313a366530313a3a2f33322d3438203d3e20393137.roa
Signing time:             Wed 13 Dec 2023 12:01:29 +0000
ROA not before:           Wed 13 Dec 2023 11:56:29 +0000
ROA not after:            Wed 11 Dec 2024 12:01:29 +0000
asID:                     917
IP address blocks:        2a11:6e01::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1f:ba:ed:91:e5:17:15:b2:81:4e:44:bc:e5:27:2a:8a:a4:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 13 11:56:29 2023 GMT
            Not After : Dec 11 12:01:29 2024 GMT
        Subject: CN=D6D83FD7BFDA1CD43346D052518D99E93F622753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:ad:a6:f5:9e:e6:1a:28:3e:4c:15:70:76:
                    74:db:9d:f0:0b:c7:07:93:d8:73:fc:45:2b:01:11:
                    50:b1:96:2a:e2:40:6b:b3:9c:82:ea:3a:4f:07:b9:
                    ef:7d:92:d0:60:f1:61:68:97:ec:a9:ac:b6:2f:97:
                    e7:95:39:31:61:e5:64:38:f9:65:1f:1c:a2:2f:61:
                    a1:44:a2:4e:41:fb:f0:59:bb:f1:59:22:60:88:18:
                    2b:dc:25:f5:80:f1:f5:0d:d6:79:6d:02:b2:af:35:
                    66:00:8c:d5:04:d1:29:25:7c:09:81:b9:12:ca:14:
                    9d:e7:63:d9:32:3e:a6:f5:34:9b:61:bb:55:f9:4d:
                    9e:77:8c:e9:79:fd:f8:f5:eb:b9:20:e9:a5:63:3c:
                    eb:49:8c:91:8b:ba:e7:05:8a:78:e9:d8:75:c1:11:
                    51:66:70:e3:45:88:99:9b:77:f8:f4:3d:b3:34:3c:
                    c4:d1:8d:98:87:d3:84:43:94:88:cb:28:f0:8f:4d:
                    35:44:aa:4d:06:7b:83:a3:59:c0:e7:9d:45:33:ee:
                    fc:fa:d5:7e:12:c4:9d:b9:4a:41:c5:8e:cd:19:2e:
                    11:19:5a:28:e4:f5:8d:e3:2c:64:0b:22:23:0f:c4:
                    cc:15:8a:0c:4d:4a:a1:15:cc:bf:b6:63:d2:eb:c4:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:3F:D7:BF:DA:1C:D4:33:46:D0:52:51:8D:99:E9:3F:62:27:53
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326131313a366530313a3a2f33322d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:6e01::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:c8:1d:be:4f:86:2b:c0:3d:be:3e:d8:36:47:54:e6:92:
         69:75:0c:7c:b5:85:f0:ff:c5:14:e6:7d:93:0f:ed:c0:0c:4c:
         20:8c:db:5c:b0:ec:70:eb:ae:a2:d3:42:c5:f5:8b:34:0d:60:
         70:77:36:1b:a8:04:c8:80:9c:ba:3b:a5:ac:ca:c3:6f:28:15:
         82:de:35:d8:ec:9e:6c:8b:5e:50:09:c8:5e:e7:9d:6c:d4:04:
         86:dc:b8:fb:48:16:1a:64:7e:78:77:d6:1a:63:86:28:25:2d:
         a0:57:b9:54:bb:a3:80:07:20:1c:b3:0b:49:3d:c5:ff:d2:30:
         a4:df:d2:82:70:28:1e:30:66:2e:4f:4b:9b:9c:f5:ce:91:f5:
         0d:8e:9f:91:41:40:32:18:5c:14:eb:27:a7:7c:e6:9e:1c:96:
         20:53:17:91:14:c4:35:57:26:85:6e:53:cd:ef:2e:9a:11:35:
         b9:0c:2d:40:3c:f4:08:09:dd:b0:18:29:13:a3:a8:0a:ca:1a:
         8f:f9:3c:0c:f9:6c:57:21:e6:a2:30:c8:75:8b:e0:f2:b4:a9:
         7a:b7:10:42:26:d6:fe:a5:85:5a:df:8f:29:99:62:e5:ab:58:
         be:1c:54:72:47:d4:e7:63:9c:66:3f:4c:ce:d5:bd:af:40:52:
         dc:a8:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----