Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326131323a386430303a3a2f32392d3438203d3e20393137.roa
File:                     326131323a386430303a3a2f32392d3438203d3e20393137.roa (raw, json)
Hash identifier:          LCB9PzZ9wdSr1PwGJT6L0hgpgUuH8uYUubugluQrIJk=
Subject key identifier:   DC:5B:0A:9E:4F:EE:42:54:19:B5:6A:1E:37:D5:70:1E:8F:99:03:38
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       645322B44A283D0E7C84AE3B25DD62D60352BF46
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326131323a386430303a3a2f32392d3438203d3e20393137.roa
Signing time:             Thu 14 Dec 2023 19:58:18 +0000
ROA not before:           Thu 14 Dec 2023 19:53:18 +0000
ROA not after:            Thu 12 Dec 2024 19:58:18 +0000
asID:                     917
IP address blocks:        2a12:8d00::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:53:22:b4:4a:28:3d:0e:7c:84:ae:3b:25:dd:62:d6:03:52:bf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 14 19:53:18 2023 GMT
            Not After : Dec 12 19:58:18 2024 GMT
        Subject: CN=DC5B0A9E4FEE425419B56A1E37D5701E8F990338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:47:47:c8:ed:d2:fc:75:ed:8c:fc:90:3e:
                    a0:7d:9f:04:39:f2:a7:83:a7:ce:70:46:de:04:2f:
                    e3:b3:64:69:14:dc:72:cf:30:b8:04:fd:c5:2f:e4:
                    1a:26:a3:0b:64:7b:cc:b3:56:5d:7f:3e:ff:e9:8a:
                    5f:1c:9f:13:e8:a2:c8:65:ec:d2:ca:4f:aa:e1:0b:
                    c4:9f:ff:75:bd:22:f7:83:02:40:61:61:66:09:e0:
                    53:8e:32:33:56:05:82:22:0f:64:54:c9:49:28:60:
                    1d:a0:61:2f:49:65:5e:4c:52:85:8f:e2:6b:31:a9:
                    70:66:11:a8:dc:42:e7:4d:4f:73:ee:34:d1:1b:a2:
                    24:9c:d6:9f:ae:38:3a:c8:5c:ca:f8:ca:54:e8:8f:
                    6b:e3:7b:38:4e:8e:0f:5e:50:ef:b2:c5:6c:40:33:
                    cb:93:38:82:69:c3:b5:b3:7a:f9:e2:11:49:9b:59:
                    f0:4a:42:53:6f:fa:fa:53:31:34:2d:e8:9a:22:b2:
                    71:bd:39:2b:7c:d4:c0:65:67:21:a1:2f:1e:50:3f:
                    66:0a:f1:a0:6d:6f:34:12:17:c2:df:fc:a0:12:bd:
                    b0:cd:81:4f:ed:d9:b2:5f:53:5a:54:34:35:6e:c0:
                    9c:a2:72:cd:2e:6a:ee:64:a9:2e:8d:8f:18:24:95:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5B:0A:9E:4F:EE:42:54:19:B5:6A:1E:37:D5:70:1E:8F:99:03:38
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326131323a386430303a3a2f32392d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:dd:b5:b9:cd:82:3d:a2:2c:a6:26:81:99:30:d3:28:09:40:
         29:29:86:06:bf:5e:38:ff:24:6d:85:2d:a8:a1:0e:72:ac:97:
         75:20:37:f4:a1:c5:bf:eb:e9:fc:ac:65:06:57:79:01:8a:e6:
         5c:db:3d:0d:8f:70:b5:54:6d:b4:17:8f:49:4e:3b:60:3d:20:
         cc:e2:87:2d:1b:0a:6c:64:03:98:8b:ee:25:14:23:23:19:4a:
         5e:b2:03:04:24:6b:a9:3d:8a:ce:b7:eb:cf:7c:36:43:4e:2f:
         e0:1c:25:74:38:24:7d:9c:c3:f4:d1:75:86:32:bd:ba:21:9a:
         cc:34:90:11:72:59:6c:38:de:45:dc:61:b7:fe:f5:29:dc:61:
         c2:28:10:e0:36:b0:6f:9f:ab:ff:8e:21:c4:75:aa:7c:5c:6a:
         1a:da:d9:d1:04:cc:43:9e:45:9e:3d:42:43:3f:e6:cf:38:f2:
         d5:86:73:9a:02:62:87:78:1f:f6:f1:28:78:6c:6c:9e:48:3d:
         83:c6:8b:98:e4:c8:c0:21:6e:3c:67:5c:51:fe:92:cb:0e:73:
         75:3e:00:6a:ec:1f:b6:05:bf:1e:65:9e:85:21:77:20:51:a6:
         fd:48:bc:b3:2a:94:24:aa:01:a6:a8:19:04:4e:43:3c:df:c3:
         03:5f:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----