Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS137940.roa
File:                     AS137940.roa (raw, json)
Hash identifier:          IsmicgQwl0KHlFzZkUL42B1CdMVzCW7tQai73q6zeGs=
Subject key identifier:   63:EF:2F:7C:79:44:67:20:0F:F5:85:E7:23:DC:03:06:12:5D:0C:37
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       E92E951F45223BF901CF662785D1F63EEB8E12
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS137940.roa
Signing time:             Wed 20 Dec 2023 21:30:09 +0000
ROA not before:           Wed 20 Dec 2023 21:25:09 +0000
ROA not after:            Wed 18 Dec 2024 21:30:09 +0000
asID:                     137940
IP address blocks:        45.142.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e9:2e:95:1f:45:22:3b:f9:01:cf:66:27:85:d1:f6:3e:eb:8e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 20 21:25:09 2023 GMT
            Not After : Dec 18 21:30:09 2024 GMT
        Subject: CN=63EF2F7C794467200FF585E723DC0306125D0C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:d0:7b:8f:6b:6e:de:23:16:53:2f:76:3f:
                    c8:e8:5a:eb:34:75:44:cc:e2:0a:4a:82:3a:9e:1e:
                    37:f0:d0:ca:a3:df:cc:44:f7:4e:05:b4:f6:59:33:
                    3d:ff:60:64:00:a1:90:8a:63:2c:29:40:9b:f0:5c:
                    c8:3f:6c:15:80:cd:5a:cd:ed:60:07:88:22:6d:6a:
                    fb:1d:16:0d:82:95:0e:eb:2b:5f:97:8e:76:6d:cf:
                    35:52:7d:3e:64:8e:9a:f3:c1:29:72:a1:2d:4b:78:
                    35:21:a0:56:cf:1b:26:3e:f8:29:51:7c:45:e0:97:
                    e5:b6:91:62:47:d7:c8:02:c6:4f:a3:3a:7d:b2:a6:
                    ef:07:b7:06:75:8e:c3:08:fa:86:1e:f4:54:f2:31:
                    4b:68:ac:48:75:7d:af:d4:ce:5d:61:cd:b3:4a:42:
                    69:11:47:a2:0a:99:36:e9:a2:0c:38:ea:64:c9:94:
                    3f:0b:3a:e9:4a:89:1e:17:59:b4:99:b8:79:b8:8a:
                    f0:c4:5c:42:00:a6:2d:e3:78:b8:4c:10:31:65:0d:
                    0d:cb:b7:c2:87:ce:3e:a7:8c:86:fb:d8:f3:c1:4f:
                    e6:c3:b5:ab:35:df:5b:f3:f3:40:4b:03:85:cb:3d:
                    e9:e0:6a:06:c6:91:ae:c3:4f:6b:ba:1b:c1:6c:37:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EF:2F:7C:79:44:67:20:0F:F5:85:E7:23:DC:03:06:12:5D:0C:37
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS137940.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:9b:b8:75:6a:36:30:f3:8d:a4:b1:dc:d7:02:d0:16:e3:
         37:c5:4c:7c:10:16:72:65:f9:c8:ce:b2:e5:63:b5:ed:70:28:
         bd:62:23:26:23:fe:90:ee:6f:20:03:c9:5f:fb:aa:e3:a6:e7:
         46:04:77:85:d5:cd:e0:6f:51:e1:bf:2d:47:8c:b0:df:9e:de:
         98:f2:01:de:ad:3a:49:97:78:e7:03:6d:88:af:3c:09:9a:48:
         43:06:e6:1c:ac:bc:bf:4c:83:a4:db:45:aa:4d:ac:42:52:27:
         a5:20:b1:f5:fd:37:f1:ae:a9:19:91:a5:c7:bb:7b:6d:87:a4:
         e0:97:31:f7:57:62:fc:cf:bf:50:4c:fe:95:ea:6b:9a:25:f2:
         8a:3c:68:58:f3:2c:a3:58:d7:b5:a1:0a:81:2d:5d:c6:0a:6d:
         0d:6e:59:eb:b3:a6:70:b3:f6:a0:11:ee:96:d2:b7:23:4c:78:
         28:24:d7:a8:92:3b:a3:eb:28:37:47:35:82:67:db:62:ec:de:
         e1:9a:e5:c1:8a:fa:6d:60:6b:e7:2d:51:8d:09:3f:a4:92:7d:
         1e:46:8b:24:3a:34:71:18:d6:41:8c:8a:62:fd:17:be:fe:13:
         2b:f3:2c:8f:4e:1a:8a:fd:45:55:e8:bb:e5:51:3d:36:ad:e8:
         b5:9f:35:0c
-----BEGIN CERTIFICATE-----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