Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e31312e3130372e302f32342d3234203d3e203335343837.roa
File:                     34352e31312e3130372e302f32342d3234203d3e203335343837.roa (raw, json)
Hash identifier:          WpQsOuRsJlRS39CfCZJcY6tmJyDuASNY8/6gHccj1+g=
Subject key identifier:   24:19:5E:87:C8:5B:95:3B:5B:18:91:82:CA:41:1E:DA:BC:52:EE:60
Certificate issuer:       /CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Certificate serial:       6EF7729F8042D5C4C8A5EDA5049C33A084B46472
Authority key identifier: E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e31312e3130372e302f32342d3234203d3e203335343837.roa
Signing time:             Mon 15 Aug 2022 16:32:19 +0000
ROA not before:           Mon 15 Aug 2022 16:27:19 +0000
ROA not after:            Mon 14 Aug 2023 16:32:19 +0000
asID:                     35487
IP address blocks:        45.11.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:72:9f:80:42:d5:c4:c8:a5:ed:a5:04:9c:33:a0:84:b4:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
        Validity
            Not Before: Aug 15 16:27:19 2022 GMT
            Not After : Aug 14 16:32:19 2023 GMT
        Subject: CN=24195E87C85B953B5B189182CA411EDABC52EE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:82:f4:c3:38:b3:8e:38:9f:9f:9a:fc:97:
                    4b:7b:01:ad:5b:3e:3d:82:f2:6b:a5:02:d2:53:b1:
                    57:f8:16:8c:97:1f:c8:40:40:63:25:0d:da:04:af:
                    e5:79:7f:ec:29:ec:c0:12:6a:96:be:51:f4:62:e0:
                    83:e3:c9:a7:cd:fe:3c:8b:b7:f4:5c:a0:45:4e:69:
                    63:15:20:de:bc:d5:21:1d:52:63:01:60:04:3e:82:
                    f0:40:76:c7:9e:0d:42:8e:a2:1b:72:1e:8e:43:f5:
                    cb:d3:cf:8a:9c:50:7a:4a:2b:4e:4d:75:f3:26:47:
                    e8:54:c8:a4:44:18:47:18:4a:a3:1e:02:c1:70:74:
                    35:eb:af:c2:0f:60:9f:87:dd:dd:ad:3f:99:ee:4b:
                    72:bb:5e:40:18:9e:ed:25:3e:05:40:8c:df:19:4f:
                    66:10:80:b1:2a:8d:f6:93:e6:22:93:d1:6e:b2:12:
                    69:40:9d:38:18:e7:31:38:76:12:3f:b6:8a:15:2f:
                    90:94:b7:6f:6a:36:14:21:ef:04:fb:d5:3f:99:54:
                    5d:45:4b:b9:82:18:7d:d6:de:52:ed:50:48:e3:fb:
                    fe:44:bb:17:41:08:8f:9e:43:69:1e:e3:4e:b1:57:
                    2c:8e:ea:6b:f1:70:33:7a:59:28:ad:38:6c:bb:b1:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:19:5E:87:C8:5B:95:3B:5B:18:91:82:CA:41:1E:DA:BC:52:EE:60
            X509v3 Authority Key Identifier:
                keyid:E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/E36A3CBCB6635D140F694B0CD99D1CD62456DE2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e31312e3130372e302f32342d3234203d3e203335343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:30:b4:f6:eb:3d:f0:c9:7b:e0:d4:3b:02:84:e7:08:83:2a:
         1b:fd:4e:bf:39:65:c9:d2:03:4a:b8:50:f0:7c:d2:09:7e:91:
         eb:52:42:83:22:af:66:46:f6:79:3f:5b:d6:b9:57:23:bd:21:
         97:16:31:b7:fb:74:6b:79:80:0f:5b:45:d9:c2:ad:d9:e2:7d:
         27:06:05:75:d6:99:52:fa:16:7e:0b:5f:f4:c8:d1:fb:b4:5f:
         70:fa:65:cc:c3:6b:7b:1c:24:95:cd:a1:e0:5c:c5:78:d5:17:
         21:d9:dd:27:68:56:6e:a6:0a:a0:24:76:34:f6:68:50:35:a2:
         df:bc:0e:22:01:d1:69:03:fd:bf:c4:2b:2b:2a:4d:d7:0a:fc:
         b1:f3:82:6b:cb:61:98:37:c9:98:7c:5c:c0:9d:00:25:6e:b7:
         73:4f:d7:fa:8d:65:be:a4:18:e0:21:d2:ad:27:36:54:88:16:
         5c:83:a7:7b:74:0b:a0:8f:ba:93:67:a9:e3:f8:6a:6b:31:df:
         45:d4:4a:14:a8:85:63:50:bb:d2:82:cb:89:db:e5:f9:b2:90:
         0a:e4:57:69:32:4e:38:88:c3:91:96:63:fe:c1:8c:61:29:f5:
         74:97:9c:d6:d8:ce:0e:61:2a:74:3e:7c:ee:d9:b8:6e:5b:bc:
         04:0c:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:04 2023 by rpki-client on console-fra.rpki-client.org