Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e31312e3130372e302f32342d3332203d3e20393639.roa
File:                     34352e31312e3130372e302f32342d3332203d3e20393639.roa (raw, json)
Hash identifier:          d7DpHtH4rQhI26ZxGRhtpRReBxYGn/tM40jMiNQEIVY=
Subject key identifier:   B3:B9:A8:9C:7B:A2:C2:B8:C2:54:1C:24:A7:27:7A:6E:5E:31:34:C7
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       4265BFE19DDEE5D7576E6262DFCBBDBC56A905E2
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e31312e3130372e302f32342d3332203d3e20393639.roa
Signing time:             Sun 03 Dec 2023 21:38:24 +0000
ROA not before:           Sun 03 Dec 2023 21:33:24 +0000
ROA not after:            Sun 01 Dec 2024 21:38:24 +0000
asID:                     969
IP address blocks:        45.11.107.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:65:bf:e1:9d:de:e5:d7:57:6e:62:62:df:cb:bd:bc:56:a9:05:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:24 2023 GMT
            Not After : Dec  1 21:38:24 2024 GMT
        Subject: CN=B3B9A89C7BA2C2B8C2541C24A7277A6E5E3134C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:38:02:65:0e:21:30:13:17:87:6a:33:4a:
                    b7:e7:5d:69:30:7b:b2:b1:63:e5:ae:0f:e2:04:4c:
                    fe:4d:95:96:f6:31:e6:f3:b9:30:5d:61:aa:b5:9b:
                    32:db:73:b6:94:e0:9a:0a:ce:f3:0e:1f:81:13:5a:
                    3d:9c:7b:4b:df:31:c7:62:e4:10:32:fc:7f:09:ae:
                    78:b8:bd:27:61:f1:13:5d:94:72:1d:12:7c:f3:ce:
                    be:fa:f4:ee:fa:36:1d:c8:b9:13:b2:ee:73:fa:35:
                    6e:f0:0f:78:68:6d:3d:de:f2:42:0f:80:95:be:2a:
                    4a:52:45:d8:9a:44:9e:eb:8f:be:6a:32:67:62:fe:
                    43:fc:85:97:4d:fb:b6:10:79:23:3e:2a:ca:04:a3:
                    12:2d:92:c2:8c:8a:a2:5d:8f:12:97:c3:0d:f0:e2:
                    26:8b:fc:64:c1:e3:db:be:82:10:03:d6:de:ef:44:
                    e3:20:b4:d9:80:9a:76:4e:c0:cf:84:49:ac:81:6d:
                    eb:6d:a9:6b:0e:8a:31:7c:9f:19:95:14:ef:26:4b:
                    16:de:7f:9b:8d:9a:db:81:d0:1a:ff:69:17:13:00:
                    fd:37:98:79:8f:22:4b:c0:28:7d:28:8d:c0:1f:6f:
                    8d:a4:f3:6c:c4:32:ee:0a:3e:18:c7:cb:ef:6b:9b:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B9:A8:9C:7B:A2:C2:B8:C2:54:1C:24:A7:27:7A:6E:5E:31:34:C7
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e31312e3130372e302f32342d3332203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:a6:0b:04:8e:f5:6d:ea:ae:d9:4d:6d:87:ca:76:51:23:
         67:02:3f:14:16:d1:ea:f8:10:21:51:d7:d0:87:b1:68:cc:e6:
         bf:0b:a0:c3:d7:c2:6f:d6:6f:15:8d:de:a7:c0:01:a5:34:78:
         83:18:0c:7e:78:ad:fb:0b:f4:7f:f0:3f:ba:66:f1:45:bb:24:
         11:cd:60:bf:4b:68:ac:99:48:7c:1e:57:5f:6f:45:e0:e8:04:
         5e:d9:14:90:88:90:34:1d:8c:d5:a7:33:89:a0:56:51:31:85:
         94:7b:96:62:17:40:98:3e:42:b0:b8:2c:1e:a6:d1:fe:69:e7:
         a0:87:79:35:c2:20:0c:f6:79:28:33:f5:a1:7f:15:49:ad:97:
         ed:e0:20:9e:35:ff:34:03:2b:85:93:b7:e1:b1:16:26:83:24:
         4f:73:42:df:4c:9c:2a:22:5b:29:6e:e2:1b:cb:35:30:d0:67:
         d1:26:4b:f4:84:a6:a5:50:15:b8:05:76:e6:4a:a8:22:fa:53:
         d4:88:de:8f:c5:61:59:f5:5a:a3:c3:a9:7c:21:38:66:b4:9d:
         7c:f1:b8:6f:fb:a1:11:b5:a7:fc:31:74:4d:2e:37:3c:78:a8:
         d8:44:97:aa:de:be:bb:57:62:09:09:e3:07:df:b9:d4:9a:ef:
         28:6f:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----