Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763313a3a2f33322d3438203d3e20323135353331.roa
File:                     326131343a3763313a3a2f33322d3438203d3e20323135353331.roa (raw, json)
Hash identifier:          tm68roAkXVlkPsliW4C5ML6cMv7LE12f8CVoZ91ALeI=
Subject key identifier:   E1:63:41:88:8B:C8:44:08:7C:0D:72:CC:95:A3:A2:36:4D:43:EE:2C
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       7BF666D7EED5E7DB40398820E9456214124ECFD6
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763313a3a2f33322d3438203d3e20323135353331.roa
Signing time:             Tue 28 May 2024 15:07:11 +0000
ROA not before:           Tue 28 May 2024 15:02:11 +0000
ROA not after:            Tue 27 May 2025 15:07:11 +0000
asID:                     215531
IP address blocks:        2a14:7c1::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 22 Sep 2024 09:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f6:66:d7:ee:d5:e7:db:40:39:88:20:e9:45:62:14:12:4e:cf:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 28 15:02:11 2024 GMT
            Not After : May 27 15:07:11 2025 GMT
        Subject: CN=E16341888BC844087C0D72CC95A3A2364D43EE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:6b:63:f2:aa:27:6f:96:00:dd:10:5d:f9:
                    e0:d4:ff:24:78:94:78:47:93:23:97:24:30:ea:e3:
                    5c:58:25:45:14:3c:31:fe:c1:8b:9c:aa:8d:bb:b0:
                    37:bc:4a:66:8f:c2:5c:d2:6d:10:06:59:84:4d:07:
                    f8:36:77:84:23:af:1c:bc:49:6a:3c:9d:68:5d:d8:
                    bb:ca:57:d0:d0:21:3e:f2:4a:2c:78:f7:22:e3:17:
                    62:f9:b8:ef:36:ef:ae:0a:7f:60:05:2f:f2:cc:1f:
                    4c:f1:94:a5:72:56:ee:a4:55:59:05:f9:66:17:88:
                    89:65:c2:2b:f8:29:0b:93:a7:71:da:e4:7b:1e:3d:
                    3e:85:97:11:0c:67:19:ca:63:2d:7e:79:3b:36:90:
                    97:6d:72:60:a2:4b:62:8c:6f:c6:74:01:32:b1:ca:
                    16:a1:98:b1:58:d5:a8:6c:2a:07:fb:38:68:b1:54:
                    1d:9a:eb:00:18:7d:90:d0:9e:66:6f:64:8a:b7:0f:
                    a4:eb:0d:ca:c0:a6:8f:d6:98:2c:10:f4:c3:21:f5:
                    42:e3:99:97:29:83:9b:e4:30:14:66:9b:17:4d:1f:
                    d1:ad:2e:c3:98:90:8e:36:72:01:e2:16:e2:94:54:
                    2f:81:56:16:19:84:d9:6f:d3:13:4a:34:4d:c5:29:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:41:88:8B:C8:44:08:7C:0D:72:CC:95:A3:A2:36:4D:43:EE:2C
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763313a3a2f33322d3438203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:44:f5:1b:b6:79:12:b2:60:b1:94:c2:f8:3a:94:44:1d:
         79:6d:02:78:dd:ae:bd:47:c0:29:8a:38:8b:3e:e8:25:0c:1b:
         7e:cc:a8:b3:77:98:fe:d8:4d:72:94:be:09:61:ce:81:e4:c5:
         d6:bd:b3:5c:6d:6d:f3:72:73:5b:ff:40:eb:ab:4c:39:48:9a:
         9f:8f:1f:ea:38:45:61:02:79:7a:9a:c0:9d:2c:49:be:08:81:
         44:50:63:f7:cf:d2:85:73:e7:b3:58:ff:20:fb:25:db:c1:ee:
         28:93:8b:80:03:96:b6:7f:05:88:c1:ea:4a:1d:05:8d:d6:39:
         bd:e0:42:b0:81:0e:37:bc:d5:89:da:82:12:8f:eb:03:8e:2b:
         ca:52:ab:50:c5:15:cd:4d:9d:fc:9b:e1:05:d6:da:a8:9c:b1:
         af:d6:6f:c6:a4:79:c5:d9:c4:6e:34:4c:63:76:eb:c3:1b:e9:
         86:0e:9c:2c:8b:a7:98:81:3d:8a:6c:09:bd:9a:b8:47:81:4b:
         08:58:ae:56:c2:f0:8e:15:ee:4f:8b:69:4b:8f:90:f2:6c:bf:
         8b:3d:56:e5:ea:57:d8:60:6c:8a:e0:12:ab:7e:ce:83:b4:ba:
         d6:17:c2:68:a5:91:d4:6b:88:81:23:7c:8c:76:17:c6:8c:80:
         96:bd:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 10:38:20 2024 by rpki-client on console-ams.rpki-client.org