Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3134322e3234372e302f32342d3234203d3e203537363935.roa
File:                     34352e3134322e3234372e302f32342d3234203d3e203537363935.roa (raw, json)
Hash identifier:          O0nTMniBhf9f99SyxufyHrWDQuCk2p7PoLUmyTUbVhA=
Subject key identifier:   D8:E1:0C:EB:DC:0A:8C:05:24:07:1F:5E:9C:14:3C:03:E2:1B:CE:F7
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       1D10666C17EF0E2391C5257BABEC109C11B2EB62
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234372e302f32342d3234203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:18 +0000
ROA not before:           Sun 03 Dec 2023 21:33:18 +0000
ROA not after:            Sun 01 Dec 2024 21:38:18 +0000
asID:                     57695
IP address blocks:        45.142.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:10:66:6c:17:ef:0e:23:91:c5:25:7b:ab:ec:10:9c:11:b2:eb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:18 2023 GMT
            Not After : Dec  1 21:38:18 2024 GMT
        Subject: CN=D8E10CEBDC0A8C0524071F5E9C143C03E21BCEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:4b:81:68:e0:47:c7:21:c1:01:8b:8a:d0:
                    ed:50:d1:8c:b9:51:eb:93:2d:b7:12:48:9c:80:2b:
                    01:04:34:82:fb:76:da:fb:6e:6f:51:66:8b:a0:ef:
                    2e:03:92:1c:94:0d:b2:99:7f:5a:b4:e9:87:c7:83:
                    41:2c:78:c3:89:0b:56:85:8c:09:e4:23:bd:81:28:
                    9b:58:4a:f9:77:f5:9a:76:b2:df:94:dc:13:55:f7:
                    e6:65:e6:e8:98:62:30:38:b5:f9:f3:73:f8:4e:6a:
                    23:38:cb:6e:14:0b:c7:0b:48:86:39:d0:12:61:a5:
                    88:27:38:a2:3b:9c:b9:da:1b:dd:de:c5:60:19:dc:
                    78:10:30:58:96:11:cf:c9:b3:00:36:ab:89:95:5d:
                    c4:6a:71:c7:3d:9b:a0:98:49:23:02:84:d7:62:e7:
                    fc:e2:e7:7b:d1:87:fb:e4:74:37:d7:13:c1:72:aa:
                    6f:0a:52:2b:bc:18:f4:81:23:52:3a:b7:46:9d:22:
                    19:ba:12:38:20:4c:d0:14:f7:78:8b:8c:48:a3:e2:
                    c7:d3:48:35:70:18:12:05:fb:06:e8:86:c5:90:c0:
                    19:be:f1:42:53:25:4b:2e:e4:68:8b:70:57:37:f7:
                    49:fa:fe:ba:2a:89:34:f8:2e:3e:24:29:4b:9c:26:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E1:0C:EB:DC:0A:8C:05:24:07:1F:5E:9C:14:3C:03:E2:1B:CE:F7
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3134322e3234372e302f32342d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:f3:43:d8:50:75:76:6d:cf:f6:1b:1e:bb:c9:ef:9f:49:
         e3:30:a9:83:32:ab:f4:85:75:26:07:86:2f:1e:c3:24:c8:59:
         d0:26:f7:26:b1:24:25:96:ea:14:5d:7d:73:96:b6:49:66:fb:
         09:c7:7f:9f:8a:56:4e:4f:84:d5:cd:80:d0:c1:db:bd:53:9a:
         d9:d3:21:c0:af:aa:0b:e4:5c:1b:44:db:fb:7e:cc:cb:29:36:
         68:33:57:f1:e0:b7:0b:6f:7e:2d:20:7a:25:e8:46:d0:f6:9c:
         66:3e:20:29:d7:6b:a9:a7:4e:75:f5:60:bd:80:87:d7:f2:ec:
         d4:50:94:99:5f:d7:35:f4:19:fe:a3:0a:2a:32:11:37:93:2f:
         ed:33:d2:35:15:6c:86:2b:9c:d7:b0:34:0a:74:46:e8:70:06:
         b3:fa:5a:9b:2a:ed:49:8d:6e:32:fa:07:d7:fb:5f:6a:e3:e1:
         3a:09:46:5c:a9:a9:19:b6:b2:92:8a:ec:9b:8e:2f:74:9c:b0:
         f3:c6:40:23:4a:75:55:b4:f2:4b:5d:64:58:8f:e6:00:2e:f7:
         33:d6:6a:1e:53:6c:46:44:02:db:3b:78:14:cc:bf:c7:e7:ae:
         05:52:3c:dd:cf:18:2e:67:02:81:b6:d3:4c:83:3e:ee:9f:57:
         58:64:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----