Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3134322e3234362e302f32342d3234203d3e20393137.roa
File:                     34352e3134322e3234362e302f32342d3234203d3e20393137.roa (raw, json)
Hash identifier:          fplpEuPzl2cmNiAigmCtDKVUHTQv08z/77Z9aO4Hh0E=
Subject key identifier:   ED:D5:33:C0:3B:86:64:FE:5F:BB:31:A5:5F:1A:45:36:5B:E9:14:89
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       151500D9A00535AA92AAEFC0470C26468A94E89C
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234362e302f32342d3234203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:24 +0000
ROA not before:           Sun 03 Dec 2023 21:33:24 +0000
ROA not after:            Sun 01 Dec 2024 21:38:24 +0000
asID:                     917
IP address blocks:        45.142.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:15:00:d9:a0:05:35:aa:92:aa:ef:c0:47:0c:26:46:8a:94:e8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:24 2023 GMT
            Not After : Dec  1 21:38:24 2024 GMT
        Subject: CN=EDD533C03B8664FE5FBB31A55F1A45365BE91489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:0f:75:ef:04:42:0d:ca:63:61:a9:b1:0e:
                    55:06:5f:ad:54:64:84:87:57:78:22:fc:09:24:dd:
                    e8:12:45:ec:3e:47:30:81:e6:47:d2:9e:24:5e:e2:
                    9f:71:c8:37:84:93:50:0f:9f:91:b4:5d:94:56:76:
                    34:cb:4e:c5:b6:8d:97:f2:47:6f:c5:dc:31:f4:1b:
                    d1:83:5a:82:ce:ec:ef:67:b2:22:cb:b4:04:6a:d6:
                    d1:34:be:18:68:60:6b:55:f7:18:78:3f:89:b6:a5:
                    47:81:ac:32:37:16:b0:7a:b4:aa:40:08:37:7d:e9:
                    3b:f4:35:bb:26:95:a3:f7:f4:c5:c0:3a:c3:43:26:
                    aa:e4:22:ae:3d:46:2e:7b:31:3f:63:6a:b9:62:25:
                    4b:76:be:08:72:7c:c5:08:37:b6:f3:1f:55:d4:c1:
                    09:2c:45:19:10:d0:ac:5b:8c:57:74:c0:9a:66:c9:
                    2f:8e:77:46:3c:b5:9f:87:5d:1f:75:07:1e:f5:b0:
                    ea:4a:b3:a9:72:2c:45:8e:f5:48:59:82:ac:00:da:
                    c8:61:6a:a5:6a:56:f0:fd:ad:51:0f:25:0b:ce:33:
                    91:81:d2:8e:34:75:44:db:4b:0b:2f:5f:db:9c:56:
                    fe:85:b6:17:82:62:5e:56:6a:5c:4c:75:19:ac:a8:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:33:C0:3B:86:64:FE:5F:BB:31:A5:5F:1A:45:36:5B:E9:14:89
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234362e302f32342d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:6a:70:d6:01:f6:5f:86:d7:35:fe:ff:4f:d3:73:24:89:
         0b:fb:91:3b:a9:a0:54:3d:12:fd:33:3a:fb:05:d7:9f:a3:31:
         65:17:f2:cc:3c:fa:d2:92:95:5a:19:09:ea:6d:66:f1:3a:bb:
         01:a2:6b:2b:41:b6:07:70:b2:98:3b:4a:8f:39:42:3c:28:ec:
         4c:75:9e:5a:3a:0a:65:89:13:0d:19:52:3c:a3:d0:80:5b:d9:
         cb:f9:d9:85:b9:11:4d:f3:75:ea:7e:06:4f:61:9d:f3:6f:61:
         ed:e6:96:5f:16:7b:58:ce:b6:58:49:56:ea:2c:28:0b:3d:89:
         f5:3b:53:29:ac:c5:a1:4a:22:1d:78:c5:d9:65:ee:34:a7:e8:
         76:39:07:1a:53:9b:37:ae:f9:27:20:81:96:7c:4a:b9:f7:81:
         f6:2d:3b:f8:92:f1:16:a6:51:a2:1d:6f:62:80:0f:d4:07:a1:
         dd:9f:d6:6a:b5:1c:3b:18:a5:5d:b0:de:e0:5c:1d:ab:da:d5:
         d2:cb:e7:3a:8d:5e:5d:66:6e:88:be:7a:ae:f5:51:83:78:64:
         65:6f:a6:f4:54:60:c2:70:8c:a2:29:5d:b2:96:9a:e6:29:b1:
         b7:ee:ac:50:31:59:a1:3f:f9:c1:00:4c:fe:ea:1b:22:55:bf:
         f5:91:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 21:55:10 2023 by rpki-client on console-ams.rpki-client.org