Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333830303a3a2f34302d3438203d3e203630323233.roa
File:                     326131343a3763303a333830303a3a2f34302d3438203d3e203630323233.roa (raw, json)
Hash identifier:          3cdXY0NaplMqi/V7BPryUrs1mwWerto+A2qc2hbZsMs=
Subject key identifier:   BC:BA:6A:5F:66:F9:CD:48:F1:6A:5B:50:86:E0:0B:D9:18:80:C6:5D
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       14FE0E362325EDAEDA985AF1C687D8EDFDDBC9D8
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333830303a3a2f34302d3438203d3e203630323233.roa
Signing time:             Tue 28 May 2024 14:58:06 +0000
ROA not before:           Tue 28 May 2024 14:53:06 +0000
ROA not after:            Tue 27 May 2025 14:58:06 +0000
asID:                     60223
IP address blocks:        2a14:7c0:3800::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 29 May 2024 14:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fe:0e:36:23:25:ed:ae:da:98:5a:f1:c6:87:d8:ed:fd:db:c9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 28 14:53:06 2024 GMT
            Not After : May 27 14:58:06 2025 GMT
        Subject: CN=BCBA6A5F66F9CD48F16A5B5086E00BD91880C65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:20:9d:cf:63:93:b3:cb:1b:f1:85:21:7e:
                    ca:80:86:52:1f:48:b0:cf:4a:62:97:49:e2:e2:9b:
                    66:5a:bd:39:da:06:d7:dc:df:cd:9e:9c:db:bc:b1:
                    26:56:2c:03:33:09:a6:c4:0a:1b:78:e3:a2:22:84:
                    3e:d1:21:86:ee:4e:11:ae:fb:12:ba:d5:75:43:28:
                    60:84:29:de:6d:c5:48:d5:41:1a:4c:6f:ce:6c:44:
                    87:b8:79:a5:2a:c8:ca:e5:60:35:ec:3f:26:7e:04:
                    67:f2:15:13:34:3d:aa:49:cc:43:59:f0:64:f1:57:
                    6a:cc:a3:b0:c0:b7:97:04:6a:e3:a6:f4:71:f2:7b:
                    ac:a1:e7:28:41:1f:93:0c:6a:34:71:43:b1:88:e4:
                    2a:fe:d1:72:4d:78:4c:89:76:a2:fd:80:23:41:ff:
                    5d:1f:af:85:67:ef:89:94:c3:c7:a2:be:b9:cd:4b:
                    8f:f0:41:09:5c:a9:21:a5:f3:99:8b:2f:25:43:72:
                    65:d3:62:97:fb:98:72:73:d3:dd:23:72:57:3a:8d:
                    6c:63:3f:79:23:cb:f8:4c:d0:ed:f0:ef:1d:36:ac:
                    b0:f8:50:59:e1:d9:37:84:d2:8d:f3:ce:79:e9:02:
                    9b:00:f8:40:45:07:17:52:4c:db:af:08:9e:9f:82:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:6A:5F:66:F9:CD:48:F1:6A:5B:50:86:E0:0B:D9:18:80:C6:5D
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333830303a3a2f34302d3438203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:95:3b:09:68:94:c5:66:94:0a:cb:55:58:14:30:e0:e0:11:
         6a:be:c7:4a:e0:b5:44:3e:a8:f5:2c:38:5e:87:d3:53:bf:1b:
         2f:cb:6d:a0:01:9c:5f:3d:52:cb:31:d8:37:90:0e:e2:b9:65:
         8c:d4:3c:e4:71:60:23:40:1c:30:2c:a4:99:c2:7b:4c:2b:8a:
         9f:d5:cc:11:23:85:52:f2:e0:a6:6e:87:19:52:81:a5:79:dc:
         d8:a0:a0:19:f4:bf:c5:ec:c1:ca:54:40:83:fa:a9:fc:86:ba:
         d7:a4:8b:07:79:fe:60:2b:d9:c1:1f:5a:21:f1:f3:19:ff:57:
         5c:1d:57:57:6c:ec:3e:ed:1f:33:b3:e8:81:88:20:3e:30:48:
         df:ff:99:78:fd:17:88:17:db:93:49:20:b9:fa:c8:b2:89:bb:
         8a:30:60:db:36:a6:25:36:ba:ac:df:2c:89:4b:55:86:b6:3d:
         56:57:58:e6:6f:86:03:46:16:7d:a0:1a:03:55:a7:f4:94:e4:
         b6:22:14:56:bd:3c:ba:8f:98:68:67:6e:e6:fd:20:ac:c6:aa:
         27:89:8d:5a:58:38:f8:e4:f2:1b:a5:b6:51:d9:ef:75:4f:36:
         73:bf:81:16:10:d8:f4:10:56:f1:35:62:d6:ee:c7:ae:50:5f:
         97:22:4a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org