Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa
File:                     326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa (raw, json)
Hash identifier:          9HD56rO0r1/IkT0FUW4uzlEFGGLAJqcPb/zmq9jsKpk=
Subject key identifier:   2F:2A:86:44:B6:2F:52:04:58:E0:78:EA:74:63:98:BE:EF:79:37:FF
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       1E078499903C5D5E8CE6396886DB00A25E76E47D
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa
Signing time:             Tue 28 May 2024 15:08:06 +0000
ROA not before:           Tue 28 May 2024 15:03:06 +0000
ROA not after:            Tue 27 May 2025 15:08:06 +0000
asID:                     215580
IP address blocks:        2a14:7c0:3800::/44 maxlen: 48

Validation:               Failed, certificate revoked on Wed 29 May 2024 14:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:07:84:99:90:3c:5d:5e:8c:e6:39:68:86:db:00:a2:5e:76:e4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 28 15:03:06 2024 GMT
            Not After : May 27 15:08:06 2025 GMT
        Subject: CN=2F2A8644B62F520458E078EA746398BEEF7937FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:af:92:c2:49:95:8b:e1:75:9b:f6:a9:f6:
                    53:34:66:cd:b5:20:a0:8d:33:7f:80:91:90:28:77:
                    b1:8e:e1:70:7d:e8:61:03:0a:00:84:2c:55:1a:a3:
                    0f:be:3f:7b:90:90:1b:56:10:49:d4:8f:06:61:60:
                    9c:65:39:dd:bf:ae:84:5b:14:27:58:57:2f:98:c4:
                    ae:39:85:c4:17:19:38:a1:19:74:85:7c:f7:09:d2:
                    bf:c0:e8:d6:7d:54:45:f3:95:cc:8b:ef:69:b2:e2:
                    c2:f3:7f:45:7c:f6:bc:8d:5c:e4:a2:a4:bd:2b:93:
                    50:e5:ae:90:bb:f6:27:63:68:3a:dd:3d:17:ea:52:
                    1d:2a:3c:9b:cb:5b:57:3c:af:82:1b:ed:e8:39:14:
                    f5:06:a8:09:d1:72:d2:10:16:87:4b:76:6a:40:e5:
                    7b:b7:b8:61:e0:65:05:9e:28:51:9c:92:55:10:4b:
                    1f:23:03:a7:5a:67:a8:12:8b:a1:70:4d:28:a6:90:
                    03:89:23:e5:0a:15:40:3f:c0:62:b9:cc:8e:b4:7a:
                    b3:58:6d:57:6c:dc:49:4f:80:15:9a:bd:ea:a3:de:
                    5a:a1:95:93:3b:6a:aa:3b:ad:e0:fd:7d:97:d0:b6:
                    8d:5a:3d:44:b9:e6:37:2a:1b:fd:e6:87:e8:e1:3f:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2A:86:44:B6:2F:52:04:58:E0:78:EA:74:63:98:BE:EF:79:37:FF
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333830303a3a2f34342d3438203d3e20323135353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3800::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:38:0d:39:b1:49:58:aa:f5:ec:1a:6b:24:71:88:96:17:
         cd:d8:1c:ee:be:ca:4f:f7:d8:83:1d:9c:95:cf:3b:76:73:91:
         81:1a:25:3a:55:1c:7f:e5:4c:1f:c5:b0:f8:7c:97:91:7f:5b:
         8b:f5:bb:6e:e8:9a:a0:11:fd:ff:e6:3a:8b:5f:ea:97:e0:6c:
         6a:fa:89:93:12:15:99:79:99:da:06:dd:fa:63:41:7a:0c:f9:
         ce:13:06:04:10:ee:b1:14:26:01:82:f6:ea:7d:b1:44:e4:c6:
         be:f8:af:b6:4b:83:92:d3:20:74:fa:b0:38:7b:a0:62:ea:1a:
         5e:b0:47:80:f6:15:2e:e1:b0:95:8e:8a:b9:3b:f5:e1:b6:86:
         9f:99:5b:d4:71:f2:1d:15:31:6e:80:9d:9b:5e:49:20:41:f6:
         71:ec:06:4c:3c:36:b3:f8:13:11:d8:0a:3d:d2:d0:35:9f:50:
         fe:0e:f3:76:f0:c8:0d:1c:56:83:5a:6e:cf:35:61:2b:31:f1:
         01:97:e6:4c:f1:39:03:6f:7e:80:6c:74:96:21:79:a2:b9:5e:
         69:bd:8a:50:ef:4d:b3:a0:d5:fe:a4:65:95:8a:c9:90:b4:7c:
         b6:de:97:cd:01:d1:b4:4d:66:bb:5b:a9:cc:98:73:91:92:82:
         d6:14:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org