Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e31312e3130342e302f32322d3234203d3e20393137.roa
File:                     34352e31312e3130342e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          UuveoSi2F6/wEtdX9Hhd+5Nz9WBfPbEdLY/zw+HDAaE=
Subject key identifier:   FF:30:61:72:CB:9C:C3:C6:DC:25:4F:08:98:A5:A2:9A:F3:B5:27:C3
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       47580E473CC7371E375CFF13ED2AB148E4C4D2FC
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e31312e3130342e302f32322d3234203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:20 +0000
ROA not before:           Sun 03 Dec 2023 21:33:20 +0000
ROA not after:            Sun 01 Dec 2024 21:38:20 +0000
asID:                     917
IP address blocks:        45.11.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:58:0e:47:3c:c7:37:1e:37:5c:ff:13:ed:2a:b1:48:e4:c4:d2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:20 2023 GMT
            Not After : Dec  1 21:38:20 2024 GMT
        Subject: CN=FF306172CB9CC3C6DC254F0898A5A29AF3B527C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:7a:6b:4a:f6:ac:04:e2:04:93:4f:00:72:
                    8e:ba:eb:40:20:9c:b1:ec:dc:3a:1f:7a:7e:c8:97:
                    5d:64:26:0c:ff:3f:f0:5e:0a:ae:50:da:6d:d7:f8:
                    fa:1a:9a:93:69:95:e7:1b:65:61:b5:28:0d:a3:b1:
                    d6:7c:c0:ba:52:d4:95:56:14:da:cc:9b:23:65:82:
                    a2:63:48:8b:97:79:b9:aa:e4:d5:30:86:76:c8:58:
                    2f:37:c9:7f:62:8c:95:13:60:88:38:83:5d:3b:f1:
                    73:b5:bd:77:6f:09:b0:d5:1b:6b:9a:cd:ba:cd:13:
                    0e:98:6e:f0:b5:80:ca:6e:71:d9:bf:cb:01:2a:39:
                    4a:62:77:f7:bf:f1:a5:2b:f1:b0:6d:66:0a:6f:a2:
                    9c:d5:1a:2b:03:39:36:14:91:41:4a:49:c3:48:3a:
                    aa:15:b2:cb:f9:64:0b:c9:04:1c:a9:cc:66:9f:ab:
                    83:42:b0:44:12:b4:b9:b0:bd:c2:89:43:28:ab:b3:
                    6d:e8:16:7a:95:cb:42:cf:58:85:32:67:17:ed:20:
                    5e:31:3c:41:3d:e7:50:97:7b:ff:d2:b5:2a:0e:23:
                    dc:9e:53:c2:37:08:3d:8a:97:69:48:5e:c4:58:87:
                    62:b8:a2:61:c0:66:df:df:c4:5c:66:f5:41:0a:cd:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:30:61:72:CB:9C:C3:C6:DC:25:4F:08:98:A5:A2:9A:F3:B5:27:C3
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e31312e3130342e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:84:91:cd:f8:1b:50:19:b7:72:7c:04:c2:34:11:16:09:
         33:c7:6f:ac:99:71:6e:18:db:d1:74:28:4e:e9:47:56:f7:47:
         91:03:47:3a:bf:fd:12:c8:5e:59:ed:89:4b:92:e5:08:af:a8:
         ba:88:97:28:15:f2:b7:ec:88:8c:71:57:22:e7:ec:bc:08:f8:
         c9:0c:4e:f3:c1:3c:03:9b:70:9e:58:18:02:83:3f:af:b8:f5:
         0a:b6:d3:ae:50:93:43:7c:61:9b:26:9f:fe:23:ec:2d:56:dd:
         e3:68:2b:64:a1:e3:fe:8f:98:72:19:3a:57:64:f9:93:cc:46:
         4d:4b:b5:42:f7:64:78:ea:29:da:67:50:94:fb:e8:8b:b6:e7:
         6f:6a:81:b5:d0:16:e9:bf:f3:cb:40:72:ec:ef:4a:07:aa:c5:
         5a:e8:7d:3b:f4:22:e1:bd:ac:e5:54:f6:32:87:a5:4a:71:e3:
         db:c7:19:73:35:51:c1:06:a8:e2:b8:30:8a:6c:ad:61:ad:c7:
         de:07:6a:5c:31:ca:52:29:bc:8f:50:ed:c7:95:c2:b1:cc:e0:
         13:1e:ee:74:1b:9f:ca:85:13:5d:c7:96:06:b5:d2:16:ee:c3:
         73:e7:8f:94:53:68:76:74:8f:59:a0:65:d9:f5:68:8e:1b:eb:
         3c:f2:3e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----