Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130663a363238303a3a2f32392d3239203d3e20323136313536.roa
File:                     326130663a363238303a3a2f32392d3239203d3e20323136313536.roa (raw, json)
Hash identifier:          bET0yFgZVjEQdMUXRLiSdvChxtrgcW+4LP1n47fnAKs=
Subject key identifier:   A3:76:C9:7F:13:35:38:CA:2C:D5:A6:90:87:B7:00:F4:39:EC:EF:6E
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       456C61C800BAB2DF24994DD3FE3F890739B00B4E
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130663a363238303a3a2f32392d3239203d3e20323136313536.roa
Signing time:             Tue 28 May 2024 09:23:47 +0000
ROA not before:           Tue 28 May 2024 09:18:47 +0000
ROA not after:            Tue 27 May 2025 09:23:47 +0000
asID:                     216156
IP address blocks:        2a0f:6280::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 28 May 2024 13:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6c:61:c8:00:ba:b2:df:24:99:4d:d3:fe:3f:89:07:39:b0:0b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: May 28 09:18:47 2024 GMT
            Not After : May 27 09:23:47 2025 GMT
        Subject: CN=A376C97F133538CA2CD5A69087B700F439ECEF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:87:d0:27:8d:de:dc:71:52:cd:69:bf:e8:
                    16:0c:27:04:b7:7e:e3:90:2c:b6:28:47:c6:77:d2:
                    2d:ae:1d:bb:9b:97:ff:ba:7f:6e:f3:fa:1a:a4:7e:
                    bc:75:b7:50:ef:dc:df:74:2a:e9:e6:6b:6a:19:6b:
                    c4:5d:44:da:73:ed:c6:0e:aa:4e:7c:17:63:02:ab:
                    e6:ea:dd:8e:8d:c8:d7:56:ba:c0:2b:c7:b9:dd:63:
                    80:50:a2:d2:ac:56:8a:eb:b4:18:eb:bb:54:23:21:
                    78:66:c8:4c:8a:13:65:34:8e:3c:b2:a0:3d:5e:c2:
                    c5:60:01:62:c5:e4:00:c1:b8:b5:a7:e9:ab:af:6c:
                    fb:1f:83:af:f2:86:25:2a:63:02:64:00:e7:1d:74:
                    cd:ab:97:97:fe:07:05:d0:3d:34:7e:20:5f:a6:b9:
                    8a:b1:55:fe:4a:c6:e6:26:f6:49:0b:b7:ae:65:b6:
                    f8:3f:90:21:36:f5:07:31:36:a1:b7:d3:3f:ff:1c:
                    30:9c:25:93:0c:cf:fc:77:13:80:59:43:ab:4c:08:
                    96:00:0c:3c:55:d1:57:03:b5:f4:e5:c7:08:a0:fa:
                    33:cc:37:9f:1e:8b:cc:5a:61:42:e0:df:2b:bf:76:
                    63:a2:28:0d:0f:58:4c:3f:97:be:b8:b1:4a:9c:aa:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:76:C9:7F:13:35:38:CA:2C:D5:A6:90:87:B7:00:F4:39:EC:EF:6E
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130663a363238303a3a2f32392d3239203d3e20323136313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:2b:c0:4b:53:f9:88:de:15:32:5f:f0:d1:43:a7:c2:41:5b:
         e2:a3:b7:0b:ef:d1:90:7b:f5:f4:57:a6:45:bf:b6:c5:c5:c2:
         dd:e7:45:89:f6:2b:13:fc:08:62:bc:ea:8f:c8:2a:1a:69:85:
         a3:75:57:42:a1:c9:64:0a:a4:86:84:88:6b:11:9b:5d:45:56:
         fb:dc:be:31:93:9f:05:a7:0c:73:a0:ee:44:8c:41:2b:1b:2e:
         a5:6c:e5:9b:9e:37:90:fc:84:65:75:7b:f5:b0:67:54:d3:0e:
         e7:cf:6f:5e:9b:81:30:88:d4:a2:26:8d:b2:48:2d:f5:32:11:
         eb:71:5d:c4:d8:fc:5a:51:1a:7e:99:6e:c0:1e:b0:c8:a4:58:
         a4:ca:fe:27:2e:07:53:a7:d5:a6:91:8a:a0:b4:ae:d8:03:5b:
         f7:46:2d:c8:00:ff:04:8d:31:17:6b:c0:1c:0a:84:f5:c5:f5:
         35:e4:56:dd:b2:79:2d:40:8c:2a:3d:a1:6a:04:76:bd:6b:9b:
         cf:18:91:e9:44:52:93:05:d8:4a:b6:d8:e2:59:f5:a6:9b:fd:
         0f:48:06:40:63:ef:2e:9b:2f:f5:27:92:5c:21:af:09:ac:d3:
         01:e1:d5:40:9d:88:12:53:19:35:fc:c3:48:b4:03:7c:e1:9f:
         32:e1:08:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org