Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa
File:                     326131343a3763343a3a2f33322d3438203d3e20313937343737.roa (raw, json)
Hash identifier:          ALF5mHgWDI4tZ+7585UeAMDyAhXqbUq6F1kSdkpPlYM=
Subject key identifier:   4D:5A:90:D1:BD:02:18:0F:F6:CD:B4:E0:D9:B3:B2:2C:72:83:AB:C2
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       65E9FC65990E015E697520DC56B9CD7E91E047A3
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa
Signing time:             Tue 28 May 2024 14:59:09 +0000
ROA not before:           Tue 28 May 2024 14:54:09 +0000
ROA not after:            Tue 27 May 2025 14:59:09 +0000
asID:                     197477
IP address blocks:        2a14:7c4::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 13:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e9:fc:65:99:0e:01:5e:69:75:20:dc:56:b9:cd:7e:91:e0:47:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 28 14:54:09 2024 GMT
            Not After : May 27 14:59:09 2025 GMT
        Subject: CN=4D5A90D1BD02180FF6CDB4E0D9B3B22C7283ABC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:d9:a0:36:b0:bb:56:1d:e0:f0:d5:19:72:
                    9f:d2:41:59:4e:a6:69:77:c7:35:31:6c:c8:e6:ca:
                    85:a8:74:b2:4c:87:21:02:ec:64:c4:6a:f8:4c:99:
                    75:61:56:4f:56:0d:6f:3a:ed:85:e2:be:0a:51:4e:
                    55:c6:64:a5:ac:a6:52:00:8a:b3:5a:9a:60:4f:70:
                    33:79:9a:d5:7c:5e:2d:94:eb:db:67:88:d1:6e:9c:
                    41:42:53:76:b3:a2:ee:9f:78:19:da:fc:e7:64:af:
                    a3:8f:42:9b:75:40:2d:db:33:5d:e8:98:a1:dd:0b:
                    4f:61:e0:b4:51:1e:70:11:b9:c1:46:b3:41:46:20:
                    e8:3e:15:bf:9f:28:d5:77:a0:4c:1c:98:7a:10:99:
                    74:fd:49:bf:01:09:72:ee:b0:e9:c3:5d:06:85:7d:
                    b7:be:42:d4:0b:59:c1:23:07:bb:cc:7e:04:48:e3:
                    60:3e:c2:9d:0d:96:81:a1:6b:f7:e0:d1:57:1b:9f:
                    2a:dd:23:98:a8:13:57:be:32:7e:29:0e:41:15:cb:
                    ea:c5:e8:d2:b6:d7:de:78:f0:b7:9b:9f:f4:fa:80:
                    bb:dc:0f:73:9b:e0:88:ef:bf:be:82:bf:12:ad:cd:
                    cd:0b:3b:a3:cf:fd:24:a4:03:67:de:6e:6d:49:33:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:90:D1:BD:02:18:0F:F6:CD:B4:E0:D9:B3:B2:2C:72:83:AB:C2
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763343a3a2f33322d3438203d3e20313937343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:d8:99:c4:8c:f1:76:46:51:4c:72:fe:50:65:67:92:42:
         76:32:12:69:83:f8:ec:1e:1d:6b:6d:c3:a7:bd:8a:91:af:5f:
         1c:55:15:3d:a0:22:d6:5c:b3:6f:71:d5:66:f1:5f:c1:cb:44:
         0f:16:a5:2a:d6:07:81:3a:f6:75:bf:5e:4d:ce:00:2e:cb:51:
         90:fc:b2:5c:7e:45:d9:76:8d:e4:0f:5e:e7:9e:5c:d9:fe:60:
         ab:5c:1a:de:8b:b0:9f:0d:a9:6c:45:81:a6:29:d9:6f:c0:85:
         30:0c:61:e6:62:0d:db:47:e4:2d:c4:f2:c4:4f:bc:28:67:3f:
         85:3a:e9:98:45:19:17:b9:7a:63:62:66:26:83:b0:4b:48:bd:
         95:3b:d7:bc:f6:de:0f:fd:08:2c:22:16:9d:b8:8d:42:75:31:
         9e:fe:c4:dc:e6:aa:ec:9c:01:f2:52:49:67:5e:61:52:23:45:
         6e:ed:d3:c1:e1:e9:3e:c3:e5:c4:51:da:47:77:a1:dd:6a:21:
         fa:00:32:ae:e9:86:90:77:c6:d5:88:52:a3:c0:3e:a1:d6:fe:
         ba:d3:31:2e:44:96:62:b0:e6:11:6d:6a:4a:d2:66:fe:f2:80:
         06:15:00:16:43:fe:53:5e:1a:80:be:d0:46:6c:c0:b1:7b:0b:
         dd:46:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:54:43 2024 by rpki-client on console-ams.rpki-client.org