Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326131323a313730313a3a2f33322d3438203d3e203335343837.roa
File:                     326131323a313730313a3a2f33322d3438203d3e203335343837.roa (raw, json)
Hash identifier:          +5q/iGnnNl3ouW0n16rlK6NIN3stfDUPi39o28rp2do=
Subject key identifier:   B8:EB:91:2E:2F:6F:47:95:E3:22:B2:0C:4F:20:52:5B:C7:6F:B1:41
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       503EC423C067BCF611DC639BB74D93F1581A6E7A
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326131323a313730313a3a2f33322d3438203d3e203335343837.roa
Signing time:             Wed 13 Dec 2023 12:01:53 +0000
ROA not before:           Wed 13 Dec 2023 11:56:53 +0000
ROA not after:            Wed 11 Dec 2024 12:01:53 +0000
asID:                     35487
IP address blocks:        2a12:1701::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3e:c4:23:c0:67:bc:f6:11:dc:63:9b:b7:4d:93:f1:58:1a:6e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 13 11:56:53 2023 GMT
            Not After : Dec 11 12:01:53 2024 GMT
        Subject: CN=B8EB912E2F6F4795E322B20C4F20525BC76FB141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:dd:b9:2a:1c:e5:07:41:31:89:85:0c:6e:
                    92:37:13:42:96:69:e8:49:85:da:8a:3a:c6:a4:8f:
                    a1:a2:ec:7f:d5:fe:3c:9b:87:e6:a5:a9:3e:6d:79:
                    76:24:fb:62:f9:82:99:9f:64:f6:d4:62:ea:c0:9b:
                    b1:86:d3:3c:b3:a5:47:3b:04:27:50:30:63:19:48:
                    93:01:ed:70:6b:ca:33:a8:b1:06:41:88:6e:c6:35:
                    69:51:56:ef:97:8d:2a:e1:23:9a:96:c8:c3:6d:9c:
                    3d:93:aa:d4:ee:22:aa:a9:75:bb:f4:7c:42:d0:1a:
                    90:42:b0:62:0f:9b:b9:52:ba:40:fd:7a:95:c2:83:
                    04:8d:3d:a7:62:5c:92:51:9f:59:37:b2:2e:26:93:
                    b9:61:b9:68:e1:a4:ae:73:28:8d:f8:6e:56:df:07:
                    da:d8:e6:e9:cf:39:fa:b7:c1:84:00:15:c8:0f:61:
                    c0:46:c8:76:a8:5d:a4:6a:c9:6b:85:24:48:87:6e:
                    24:e5:03:33:dc:ee:b3:89:43:06:4b:11:5f:23:3e:
                    81:cb:5c:78:a4:d5:78:bb:7a:e2:e4:ed:83:57:80:
                    88:5c:ef:05:e7:06:70:d3:de:8b:ae:5e:3f:ae:55:
                    23:98:a5:f3:30:29:1e:02:0b:5c:c3:3e:56:57:93:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EB:91:2E:2F:6F:47:95:E3:22:B2:0C:4F:20:52:5B:C7:6F:B1:41
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326131323a313730313a3a2f33322d3438203d3e203335343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:1701::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:c5:d7:fd:7b:be:1e:43:45:fb:fc:a2:81:7f:31:e5:25:
         81:92:fe:11:fa:df:36:bd:8a:8b:ec:45:e3:2e:53:a1:75:b8:
         c7:5b:21:16:36:56:07:c9:af:ad:ff:99:39:00:e4:c3:4d:d4:
         88:4c:26:26:1e:41:0c:80:5f:37:8c:fd:ec:a3:f1:25:f4:d8:
         be:83:18:0e:68:f4:b2:0b:9f:c6:4f:28:aa:67:38:32:be:7e:
         ca:0d:38:6a:25:47:02:16:b8:87:53:dc:9b:c1:55:61:bd:43:
         61:11:ac:ad:9d:bd:d6:65:75:40:25:16:b1:49:cf:b8:fa:c7:
         17:6e:72:2e:f5:71:fd:31:3d:b5:14:78:fc:4f:53:b9:e0:08:
         fb:69:ba:68:d9:ce:2e:e2:a5:84:40:5d:a9:67:fc:48:5f:70:
         ae:14:44:46:3b:b5:bb:fd:dd:5e:b1:07:01:0f:fb:14:16:d7:
         e5:8e:76:d1:47:a5:f3:6e:a1:1f:81:77:25:6a:75:b6:21:46:
         40:16:64:90:10:a4:bc:7d:f8:46:24:f8:55:16:f2:e0:72:c1:
         dd:fd:5e:fd:cf:7d:bd:a2:e2:14:3b:72:16:47:a5:0c:45:db:
         3e:60:65:bb:3a:01:00:0b:bf:ac:b9:9d:2d:73:b2:7e:d6:ee:
         d6:46:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org