Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/H1rBTtg5NSHxLnSFXGRwf0iqhIk.roa
File:                     H1rBTtg5NSHxLnSFXGRwf0iqhIk.roa (raw, json)
Hash identifier:          Cwx3XPacbhF5LMOZonfM1NbKJ7FN9/Rk+zMnQvEihJ8=
Subject key identifier:   1F:5A:C1:4E:D8:39:35:21:F1:2E:74:85:5C:64:70:7F:48:AA:84:89
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       018705E2443E4933CC47CC6E8F21EAB106F3
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/H1rBTtg5NSHxLnSFXGRwf0iqhIk.roa
Signing time:             Tue 21 Mar 2023 20:35:27 +0000
ROA not before:           Tue 21 Mar 2023 20:35:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        2a0e:9846::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 21:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:05:e2:44:3e:49:33:cc:47:cc:6e:8f:21:ea:b1:06:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Mar 21 20:35:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f5ac14ed8393521f12e74855c64707f48aa8489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:93:cf:26:29:f6:cd:80:a4:74:17:ef:a1:
                    91:15:a0:38:45:1e:5b:2f:b9:4e:8d:b1:73:fe:0f:
                    b8:9f:2c:c6:93:ae:b9:71:80:72:ff:cc:dc:91:29:
                    40:07:e9:6a:b8:4d:21:c9:8e:f4:51:6a:87:c3:88:
                    f5:d9:30:34:43:38:a2:a8:68:58:83:22:88:0c:85:
                    cc:34:ef:db:03:1a:a7:bf:ac:5e:e8:f3:11:86:25:
                    e2:1f:4c:c6:ce:ad:27:50:29:5d:54:6a:b7:79:10:
                    fa:9c:59:cc:4a:d5:85:c5:fe:07:53:a8:e3:11:5e:
                    8c:eb:fd:8b:33:33:e2:ab:87:67:4e:c3:4d:1c:4d:
                    e0:fd:2c:05:94:81:f6:b1:31:dc:a1:91:29:e0:49:
                    f1:f4:98:3c:ab:ac:00:4a:14:70:06:40:34:3c:80:
                    63:a9:67:8f:4f:f5:e2:e9:7c:f7:23:1d:31:37:28:
                    56:13:46:6c:05:11:9c:7a:a8:4f:8f:e3:c5:69:40:
                    76:ca:af:9b:4d:66:7c:a4:ae:e3:65:28:eb:f1:43:
                    26:54:ec:6b:a4:81:bb:eb:c8:69:84:31:87:99:1f:
                    08:c1:02:c2:4b:7c:fc:2b:92:2a:3f:e4:aa:fe:4c:
                    fd:72:c7:21:2c:6d:63:1a:51:f9:ab:40:6e:74:67:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5A:C1:4E:D8:39:35:21:F1:2E:74:85:5C:64:70:7F:48:AA:84:89
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/H1rBTtg5NSHxLnSFXGRwf0iqhIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:9846::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:f6:e3:47:88:5a:0c:04:64:9e:15:ff:09:ec:86:ac:b5:
         7b:5d:9a:42:a8:d1:c6:8a:d6:4e:6c:f1:f3:7a:c0:06:ad:fc:
         fa:a6:cb:2d:4d:60:17:18:dc:ce:38:ee:f3:be:06:d1:2b:9a:
         d3:ef:b6:75:2a:96:30:8b:fd:8c:81:67:fc:2e:55:02:b0:ce:
         55:22:0b:d7:13:11:3a:e6:41:4f:56:6e:ad:97:3d:e4:e3:1d:
         2c:b3:ac:cf:13:83:6e:35:a6:f6:f7:03:10:6a:b8:a5:3d:f6:
         9c:c6:98:e9:ac:4f:5a:ec:c7:81:0f:06:75:53:ae:fd:54:99:
         05:60:25:fe:c7:5a:dd:78:d9:f7:37:21:3c:24:87:28:b1:d0:
         08:c9:dd:7a:10:0a:1d:fc:3c:79:7e:b3:59:10:bf:d2:3f:fd:
         20:c4:92:80:36:5e:87:c2:52:a1:c3:6a:c3:8b:09:c2:b3:d5:
         a3:a0:aa:ac:66:a6:0b:4d:d0:ae:7c:14:2c:49:4e:59:38:90:
         90:95:c7:64:9c:62:de:95:44:d4:b6:2c:be:de:cd:c8:e0:d9:
         06:22:4c:5d:7d:55:be:dd:96:76:46:f1:49:3a:0e:f2:18:51:
         0c:13:a2:86:be:cb:09:28:d4:e7:53:c4:90:c1:43:60:91:cc:
         5f:61:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org