Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326131323a386430303a3a2f32392d3438203d3e203537363935.roa
File:                     326131323a386430303a3a2f32392d3438203d3e203537363935.roa (raw, json)
Hash identifier:          j8e8+7zgOIY4r6bqdnhqe3sbfRy7lHR4cU5KYnYIkdU=
Subject key identifier:   07:A7:89:92:DE:56:5A:08:D4:5A:11:A9:96:5E:57:FB:FD:D2:E9:1A
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       5EE525CA0CF1BEF3AA67B079312852FF5B6189A4
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326131323a386430303a3a2f32392d3438203d3e203537363935.roa
Signing time:             Thu 14 Dec 2023 19:58:18 +0000
ROA not before:           Thu 14 Dec 2023 19:53:18 +0000
ROA not after:            Thu 12 Dec 2024 19:58:18 +0000
asID:                     57695
IP address blocks:        2a12:8d00::/29 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 21:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e5:25:ca:0c:f1:be:f3:aa:67:b0:79:31:28:52:ff:5b:61:89:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 14 19:53:18 2023 GMT
            Not After : Dec 12 19:58:18 2024 GMT
        Subject: CN=07A78992DE565A08D45A11A9965E57FBFDD2E91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:77:93:6d:0b:0f:fa:23:25:ec:31:20:44:
                    e2:74:79:9e:ee:09:8d:17:4c:b6:fc:d1:3c:cc:4b:
                    11:fa:f7:c9:00:06:50:b1:f6:48:21:1e:8a:36:46:
                    a2:d5:68:df:bc:20:59:0d:fe:81:18:7d:d1:f0:0b:
                    83:62:d7:ed:05:83:b5:b3:fd:d9:dd:6f:e5:ad:5f:
                    d7:54:7f:30:81:a6:cb:27:b7:51:2c:38:d2:91:ac:
                    07:fe:a0:c3:70:4f:00:60:f4:4d:a4:a0:56:45:e8:
                    a2:72:7f:25:32:3a:5c:98:b7:d5:6a:e9:b5:57:f3:
                    dd:b4:6c:bc:d2:22:54:10:a6:77:03:b4:34:3a:e4:
                    ed:b7:ef:a8:3d:ef:1b:62:4f:0c:4c:c6:1c:1b:c9:
                    5d:82:88:b4:64:cd:6f:a7:79:01:59:eb:c3:f2:3f:
                    63:cb:2a:7f:e4:af:ce:f1:46:6e:e6:e5:72:d5:9d:
                    21:eb:75:c8:92:27:d2:f7:87:6d:1a:30:fe:fd:92:
                    76:b0:db:ea:34:b3:85:86:7e:6c:96:10:47:85:d3:
                    b7:1f:e8:15:68:56:a5:a4:22:e3:50:fe:a3:cb:02:
                    5a:f7:d5:b4:99:a8:78:ca:13:44:18:73:6e:48:8a:
                    00:f9:a7:ae:82:76:1c:f5:21:e9:8d:ed:74:0b:76:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A7:89:92:DE:56:5A:08:D4:5A:11:A9:96:5E:57:FB:FD:D2:E9:1A
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326131323a386430303a3a2f32392d3438203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:e3:f4:fc:28:80:9b:23:56:48:fd:31:7d:af:81:1c:a1:
         85:6c:8b:77:fc:0c:0a:8d:dd:66:15:fd:a7:01:03:d0:12:78:
         02:4b:c6:da:b6:25:f3:33:4a:c2:ca:f5:f6:b6:84:3d:66:0f:
         32:f5:9a:8d:33:2b:8c:a6:f1:a2:fe:11:72:d4:dd:82:68:2f:
         a1:35:1e:44:44:75:e3:30:3d:34:35:02:82:7e:a2:f3:05:8c:
         09:90:78:42:5b:17:7f:c2:18:ba:a0:c6:d2:fd:60:4b:0e:88:
         81:75:a9:3d:4b:3b:86:7b:88:87:5d:c2:7f:01:60:6a:29:d0:
         61:4a:8b:73:e0:a0:60:7d:b7:f9:95:45:d0:78:83:90:fb:60:
         93:0d:6f:52:ef:7f:6d:fe:d2:d0:d7:df:56:43:d9:cd:c2:0a:
         c0:ec:b6:06:df:5c:37:48:47:98:99:1e:e6:95:db:9e:81:72:
         be:89:4c:fd:27:b8:2c:6b:a0:10:2f:db:e8:27:cd:94:ec:7f:
         f4:25:83:1f:57:2e:bc:45:13:65:be:ce:7a:9d:44:3e:e9:88:
         8e:37:f2:dd:f6:51:b7:b3:ff:fe:20:75:47:0b:7b:70:ec:8c:
         62:06:f2:97:00:59:9a:c5:11:a2:f8:21:e3:78:ea:5a:3e:b9:
         c4:d1:05:bc
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUXuUlygzxvvOqZ7B5MShS/1thiaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMTQxOTUzMThaFw0yNDEyMTIxOTU4MThaMDMxMTAvBgNV
BAMTKDA3QTc4OTkyREU1NjVBMDhENDVBMTFBOTk2NUU1N0ZCRkREMkU5MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqneTbQsP+iMl7DEgROJ0eZ7u
CY0XTLb80TzMSxH698kABlCx9kghHoo2RqLVaN+8IFkN/oEYfdHwC4Ni1+0Fg7Wz
/dndb+WtX9dUfzCBpssnt1EsONKRrAf+oMNwTwBg9E2koFZF6KJyfyUyOlyYt9Vq
6bVX8920bLzSIlQQpncDtDQ65O2376g97xtiTwxMxhwbyV2CiLRkzW+neQFZ68Py
P2PLKn/kr87xRm7m5XLVnSHrdciSJ9L3h20aMP79knaw2+o0s4WGfmyWEEeF07cf
6BVoVqWkIuNQ/qPLAlr31bSZqHjKE0QYc25IigD5p66Cdhz1IemN7XQLdmDfAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUB6eJkt5WWgjUWhGpll5X+/3S6RowHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMHgGCCsGAQUFBwELBGwwajBoBggrBgEFBQcwC4ZccnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvMzI2MTMxMzIzYTM4NjQzMDMwM2EzYTJmMzIz
OTJkMzQzODIwM2QzZTIwMzUzNzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoSjQAwDQYJKoZI
hvcNAQELBQADggEBAHNO4/T8KICbI1ZI/TF9r4EcoYVsi3f8DAqN3WYV/acBA9AS
eAJLxtq2JfMzSsLK9fa2hD1mDzL1mo0zK4ym8aL+EXLU3YJoL6E1HkREdeMwPTQ1
AoJ+ovMFjAmQeEJbF3/CGLqgxtL9YEsOiIF1qT1LO4Z7iIddwn8BYGop0GFKi3Pg
oGB9t/mVRdB4g5D7YJMNb1Lvf23+0tDX31ZD2c3CCsDstgbfXDdIR5iZHuaV256B
cr6JTP0nuCxroBAv2+gnzZTsf/Qlgx9XLrxFE2W+znqdRD7piI438t32Ubez//4g
dUcLe3DsjGIG8pcAWZrFEaL4IeN46lo+ucTRBbw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org