Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a393030303a3a2f33362d3438203d3e20323134373831.roa
File:                     326131343a3763303a393030303a3a2f33362d3438203d3e20323134373831.roa (raw, json)
Hash identifier:          g7asM33elrSpNc9DniwuhgO3IhhSeVoumxqbDxkachs=
Subject key identifier:   98:4E:DF:79:DD:A9:B4:0F:7B:34:17:BD:8C:D4:AE:8A:0E:26:62:88
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       666D9676C59923B6B15AE646537F5078C6F12FB1
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a393030303a3a2f33362d3438203d3e20323134373831.roa
Signing time:             Sat 29 Jun 2024 12:42:28 +0000
ROA not before:           Sat 29 Jun 2024 12:37:28 +0000
ROA not after:            Sat 28 Jun 2025 12:42:28 +0000
asID:                     214781
IP address blocks:        2a14:7c0:9000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 15:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6d:96:76:c5:99:23:b6:b1:5a:e6:46:53:7f:50:78:c6:f1:2f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jun 29 12:37:28 2024 GMT
            Not After : Jun 28 12:42:28 2025 GMT
        Subject: CN=984EDF79DDA9B40F7B3417BD8CD4AE8A0E266288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:d4:91:c1:6f:17:3d:c3:10:7e:32:61:cb:
                    09:37:8d:20:ea:f5:e1:ec:f2:30:4a:33:d9:02:4c:
                    ad:5a:35:48:16:10:e7:ad:67:c4:bd:26:ad:7a:b8:
                    40:e5:35:43:87:47:6b:82:6f:4b:4c:d7:d5:3f:41:
                    b6:36:d1:47:c6:83:37:23:59:c3:89:77:68:04:c5:
                    29:e8:2f:c4:98:d9:77:ae:69:ff:f0:d1:cf:2a:b6:
                    fc:04:48:08:1b:8f:ac:83:1d:7e:18:5e:9b:d9:80:
                    fb:57:a1:85:c1:5b:0f:eb:b5:1f:44:dd:80:95:bd:
                    9b:32:4b:4e:db:06:6d:41:c8:81:7f:bb:ae:98:87:
                    3c:e5:7f:fc:e3:32:4b:33:19:9e:d4:ae:9d:e7:30:
                    89:d7:4a:02:3f:e0:3f:67:70:41:de:e9:8b:e8:ba:
                    d0:eb:73:a3:ca:b7:b3:83:bf:6e:a2:c1:e8:fc:06:
                    f8:a8:c3:06:4a:2f:65:a6:9e:11:1d:11:ff:f1:5d:
                    a7:5e:77:59:af:15:89:be:1f:be:e8:ab:6d:42:74:
                    28:b9:e0:ff:a5:a4:57:49:cb:7c:a4:65:f6:85:24:
                    d1:83:6e:51:ca:b0:95:c9:7d:f3:a3:8f:f7:7b:38:
                    db:6b:ef:20:4d:9b:80:0e:d4:8c:ce:b7:ee:69:99:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:DF:79:DD:A9:B4:0F:7B:34:17:BD:8C:D4:AE:8A:0E:26:62:88
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a393030303a3a2f33362d3438203d3e20323134373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:26:75:29:a8:a4:d9:3c:83:d0:95:fe:14:2e:52:b8:10:bc:
         45:c0:3e:f8:3d:de:2b:15:9a:b2:55:ec:d5:bc:e9:bf:ba:de:
         4c:64:fd:c3:d2:c3:0a:56:cb:ed:c5:d3:9e:f5:17:aa:71:8e:
         69:19:67:74:36:7c:f7:cc:b0:cb:05:79:74:37:0c:4e:54:ff:
         4e:1a:5a:4c:5d:1a:15:58:ec:79:54:38:56:74:0d:d3:fb:e0:
         78:a7:43:9b:56:8c:af:2a:c5:26:1e:b6:18:84:a4:09:f5:09:
         cb:c7:a0:d5:e2:5c:52:69:0e:7b:f0:f9:3d:72:00:23:18:25:
         c1:15:1a:3e:28:b8:6e:a1:b2:e7:77:71:ef:c0:c4:30:fc:c3:
         ba:fa:fd:90:98:3b:87:81:1a:99:64:b6:fc:88:9d:6b:ee:11:
         98:ee:14:1e:46:8a:3d:fa:88:66:82:5c:84:ab:ae:e0:e6:ae:
         5e:a2:9b:7a:75:67:b8:4b:7a:e7:fe:9f:e6:d9:92:63:0d:ef:
         da:8c:c6:d4:6f:72:e2:30:ff:68:60:6d:e9:15:78:62:7f:ab:
         5e:93:62:13:4a:af:b9:89:c4:6f:47:ec:4b:b6:9d:c4:03:2c:
         c1:6c:53:22:c4:19:ec:c5:c0:5b:94:23:b4:b0:7b:95:e3:e2:
         fe:d8:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 19:34:37 2024 by rpki-client on console-ams.rpki-client.org