Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3134322e3234362e302f32342d3234203d3e203537353738.roa
File:                     34352e3134322e3234362e302f32342d3234203d3e203537353738.roa (raw, json)
Hash identifier:          knhnnl6Utm1LMTuKqQ+M4VyMcN6owBPxPUDogWGeprA=
Subject key identifier:   69:17:05:13:63:EB:0E:F8:E2:82:46:E5:EA:25:B4:A4:B8:AF:3A:E0
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       64A1F6281A04C774F65D06F74C81EA20F87B8962
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234362e302f32342d3234203d3e203537353738.roa
Signing time:             Sun 03 Dec 2023 21:38:19 +0000
ROA not before:           Sun 03 Dec 2023 21:33:19 +0000
ROA not after:            Sun 01 Dec 2024 21:38:19 +0000
asID:                     57578
IP address blocks:        45.142.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:f6:28:1a:04:c7:74:f6:5d:06:f7:4c:81:ea:20:f8:7b:89:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:19 2023 GMT
            Not After : Dec  1 21:38:19 2024 GMT
        Subject: CN=6917051363EB0EF8E28246E5EA25B4A4B8AF3AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:8b:6e:6f:04:46:29:f4:50:7e:77:c9:ea:
                    70:df:b5:ab:81:43:13:c0:ab:37:12:c1:ea:52:52:
                    9c:f9:7b:59:7e:26:d7:e8:01:72:07:5e:b3:94:99:
                    b7:9a:bd:bb:50:5a:2b:e0:c3:bd:e4:91:83:47:ee:
                    66:c6:2b:bf:54:c0:e9:70:ea:26:53:cf:3c:ff:c9:
                    bb:56:9c:37:07:9a:09:98:f9:44:55:d3:d9:91:20:
                    f5:39:2d:89:31:04:6a:f8:54:2c:fd:f2:1d:78:f3:
                    85:61:42:49:e9:d3:18:d3:12:72:7c:d8:9a:0d:4f:
                    9b:00:ca:83:e7:42:e4:35:c5:fe:de:b6:13:91:90:
                    24:7b:a8:24:0d:f5:8d:f9:4d:3d:ab:f4:6d:b2:78:
                    ea:95:d5:f7:6e:cd:83:3c:3a:64:8e:74:d7:19:44:
                    9c:a3:1d:1b:3c:30:a2:60:52:1a:1b:58:fc:d4:89:
                    b5:91:19:33:d4:27:f1:0d:36:b2:89:f7:17:46:21:
                    1d:22:64:22:5b:9d:03:41:bd:61:3c:ca:86:17:6f:
                    2c:db:66:0d:a7:0d:cd:5b:b1:eb:70:ca:ef:da:45:
                    f8:1c:6e:bc:99:8f:c0:dc:d0:c9:aa:0f:dd:93:76:
                    fc:21:bb:41:f4:04:29:1e:13:b6:2c:cd:3c:a9:ef:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:17:05:13:63:EB:0E:F8:E2:82:46:E5:EA:25:B4:A4:B8:AF:3A:E0
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234362e302f32342d3234203d3e203537353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:22:86:6a:97:88:6c:7d:2d:d9:a5:b9:17:0b:18:53:89:0e:
         9b:ca:3b:08:c9:79:6c:0c:0d:ab:00:b1:ba:f5:be:5f:77:72:
         b1:49:eb:0f:5b:d3:5a:82:c6:7e:90:f0:e0:f1:71:de:ef:7e:
         fa:6d:2b:3e:7b:b4:d4:20:99:0d:ea:d5:d6:77:47:f3:d6:e0:
         51:75:8d:79:43:42:02:8d:a4:de:c5:4f:7a:13:21:5a:01:2e:
         d5:a1:ca:3d:a6:a9:53:42:ea:45:4d:83:d0:2d:95:48:7b:13:
         b0:28:74:ec:e0:f1:06:ad:6b:4a:2a:28:8d:c1:4f:59:a5:ce:
         be:61:f2:4b:11:d9:00:b0:b4:f5:05:4b:d3:44:48:2a:f3:0a:
         ac:8c:b5:c9:49:a2:31:23:d3:16:1b:fa:52:2f:8d:ce:f2:07:
         15:4a:b3:34:f6:28:95:f0:aa:eb:34:b5:6e:5d:db:ba:d6:03:
         89:51:dd:94:e6:80:a3:d5:74:c9:a5:ea:f1:0f:36:67:6e:fb:
         11:f7:1a:9d:8c:c7:b7:29:20:b5:42:84:54:c3:30:e3:63:7c:
         ed:98:80:91:81:00:93:68:2b:17:39:d5:73:be:1b:3f:73:ff:
         6b:4f:d0:34:51:a6:06:c5:46:8c:99:14:b8:5f:a4:12:ff:0a:
         4b:d5:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----