Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/34352e3135302e3234302e302f32322d3234203d3e203537363935.roa
File:                     34352e3135302e3234302e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          lZ6IZXLm4IBdSh8INILzWSzTCNszm5oImRv9CqjHnXY=
Subject key identifier:   A3:25:E2:D8:36:8C:7F:EA:E0:DD:3B:37:7A:3C:B3:CA:D7:C7:F8:53
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       55211B4C66740824F4518DCD5C556A0B2D6ECA82
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234302e302f32322d3234203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:26 +0000
ROA not before:           Sun 03 Dec 2023 21:33:26 +0000
ROA not after:            Sun 01 Dec 2024 21:38:26 +0000
asID:                     57695
IP address blocks:        45.150.240.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:21:1b:4c:66:74:08:24:f4:51:8d:cd:5c:55:6a:0b:2d:6e:ca:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec  3 21:33:26 2023 GMT
            Not After : Dec  1 21:38:26 2024 GMT
        Subject: CN=A325E2D8368C7FEAE0DD3B377A3CB3CAD7C7F853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:2b:87:0b:30:fd:b3:75:b7:40:ed:dd:9f:
                    e9:6d:f9:dd:c0:de:5a:4a:d8:50:84:31:2b:8f:21:
                    ea:5b:75:76:7c:14:0d:94:cf:47:e6:1c:d3:3d:f2:
                    17:3d:c6:a0:18:d0:ee:33:59:0f:65:8b:0c:04:3a:
                    75:23:f4:22:cf:c4:4f:0b:b1:51:29:40:ea:c8:51:
                    03:e3:56:c2:17:9c:f4:28:f9:85:f4:f2:73:1a:e2:
                    8f:8c:65:04:e3:aa:9b:71:c0:35:2d:a4:31:97:fb:
                    bd:df:ad:40:ed:a5:9c:c1:32:9e:78:bd:f1:59:e7:
                    91:be:1c:92:4b:12:4f:2b:37:69:b4:5c:9b:05:fd:
                    5b:41:18:fb:09:01:c0:fb:cb:d7:0e:39:c0:24:7d:
                    53:fd:00:55:3f:22:ee:a3:5b:c1:7b:7f:21:7f:5c:
                    2f:a8:57:f0:3b:b5:24:8b:a8:a5:7a:bf:40:91:e8:
                    cd:c3:f1:52:aa:41:45:14:eb:1d:e0:fe:07:b3:1c:
                    ac:77:83:67:8e:31:d4:0f:c0:56:7c:22:cd:05:b2:
                    22:36:80:62:05:b5:0b:e2:8b:07:86:cd:5f:17:8f:
                    ba:a0:19:72:c1:14:ff:3f:31:71:4c:57:8e:eb:8d:
                    00:06:39:40:45:10:80:7f:02:2b:fd:77:17:2e:66:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:E2:D8:36:8C:7F:EA:E0:DD:3B:37:7A:3C:B3:CA:D7:C7:F8:53
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/34352e3135302e3234302e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:67:b9:cf:a6:da:1e:6a:70:61:f1:cd:bd:31:e4:92:22:
         b2:88:d6:ab:a1:1e:a2:74:69:ab:c4:51:fb:a1:e2:e5:3b:2c:
         ca:dc:e6:e6:9e:26:65:8c:0f:05:3d:46:e2:36:d6:07:98:07:
         2c:00:ea:04:a6:dc:a4:ba:26:5c:4f:e6:a4:9c:94:33:d2:b3:
         78:c5:3e:d5:32:b7:8c:f0:5c:fb:43:9a:72:d7:52:45:3a:68:
         3b:94:34:a1:21:19:da:50:75:a3:33:9b:7c:ee:b6:25:81:0a:
         ad:e8:03:92:58:70:60:a9:37:c4:7d:c2:a7:95:2c:0c:5c:61:
         77:67:e6:6e:b2:3a:e1:77:9f:08:68:45:72:bf:5f:80:60:99:
         15:3b:0d:03:42:a8:4e:6e:45:7b:93:b3:cb:c3:5f:9b:e2:00:
         f7:68:47:8b:bb:4e:3c:17:01:49:43:8c:47:87:18:64:d4:e8:
         e6:70:76:7b:e2:46:19:7b:72:be:39:80:8e:50:be:d0:65:28:
         aa:07:0a:5a:27:12:0b:34:c1:9e:1d:e5:ab:65:38:2d:9b:76:
         c6:1c:23:c0:d4:0b:38:8f:de:54:dd:04:2f:b0:f6:90:06:45:
         e8:d6:37:ae:99:16:ce:e4:e8:7d:8c:43:34:a7:36:f4:ff:79:
         af:6c:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 21:55:10 2023 by rpki-client on console-ams.rpki-client.org