Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa
File:                     326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa (raw, json)
Hash identifier:          FalsRjlH/v0rE0xp6odzbS2F3bgRQaCFNwgQQHQ4Kvg=
Subject key identifier:   44:58:C1:D4:5E:AD:9F:0D:30:8D:53:4C:21:5A:9C:72:7C:91:E3:79
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       67DC12505988D2835D96A63A5EC32BF6CC18F11E
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa
Signing time:             Tue 28 May 2024 17:42:52 +0000
ROA not before:           Tue 28 May 2024 17:37:52 +0000
ROA not after:            Tue 27 May 2025 17:42:52 +0000
asID:                     215531
IP address blocks:        2a14:7c0:400::/38 maxlen: 38

Validation:               Failed, certificate revoked on Sat 15 Jun 2024 15:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dc:12:50:59:88:d2:83:5d:96:a6:3a:5e:c3:2b:f6:cc:18:f1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: May 28 17:37:52 2024 GMT
            Not After : May 27 17:42:52 2025 GMT
        Subject: CN=4458C1D45EAD9F0D308D534C215A9C727C91E379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:ca:d5:46:c2:d5:3d:24:f0:c6:1a:20:9c:
                    e5:f6:2f:60:2f:a1:9d:49:22:ca:ef:a9:54:c8:04:
                    d5:c9:45:58:b1:eb:15:66:e2:61:8a:4e:e5:d4:93:
                    4f:71:94:20:ff:5c:d3:e6:cb:c4:72:d6:8b:f4:31:
                    1f:9a:e6:c7:45:bb:85:d9:18:cc:75:8c:84:29:54:
                    2d:84:be:e9:1c:d8:32:f5:ca:14:81:8e:b0:45:58:
                    44:af:d6:1c:26:0e:27:75:2f:fc:14:b4:de:b4:c5:
                    92:01:ec:de:ca:ff:1d:d0:98:b8:93:7b:04:5e:7e:
                    a2:24:2c:c3:15:f8:d9:40:52:3a:2a:a2:ee:47:29:
                    ee:bf:db:ff:2a:42:5d:c7:6f:58:2a:f0:10:3e:6f:
                    6b:02:8f:bb:6d:23:0d:21:9c:db:1f:63:2f:1c:19:
                    ca:d1:cf:15:ae:5a:78:db:5f:cf:95:d1:04:37:aa:
                    7a:a0:e5:d1:67:da:68:d5:a0:54:e6:4c:df:a0:f0:
                    9f:eb:c9:fc:8d:00:99:af:51:4c:c9:b2:d6:a6:83:
                    30:59:6e:e9:1a:57:80:6f:90:12:48:8d:bd:66:cd:
                    41:29:37:ae:9a:30:1d:1c:6d:7a:72:cb:36:36:5f:
                    3c:89:f5:b7:8b:26:22:95:42:28:02:5e:f2:f7:a6:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:C1:D4:5E:AD:9F:0D:30:8D:53:4C:21:5A:9C:72:7C:91:E3:79
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763303a3430303a3a2f33382d3338203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:14:b3:a2:0a:4f:73:56:c5:ed:b2:cf:05:72:51:e4:f6:
         f5:39:66:27:a7:10:a9:9e:e4:93:58:d2:91:a5:76:d4:9d:7d:
         ee:67:74:b0:1a:da:f1:fe:c5:7b:6c:16:fa:71:13:b1:45:4a:
         5b:8c:d8:69:96:94:c6:28:49:a6:12:04:dc:46:fc:55:b9:d3:
         0c:58:94:59:6c:e6:2d:d1:16:f8:95:b4:fc:12:d5:95:ff:43:
         06:e5:3e:22:be:2c:08:35:db:54:9d:35:82:27:79:b3:e1:61:
         7f:f3:a0:10:dd:b8:a0:03:8b:e4:3b:21:07:73:ea:fd:b1:44:
         fd:2f:f6:f5:fe:ab:1e:97:0c:83:03:93:46:07:95:7f:ca:98:
         50:e6:62:b3:24:0c:fc:44:2b:5d:2b:7d:8a:78:c2:5d:f6:78:
         f2:0c:20:a9:0b:83:69:7e:5e:01:ab:c4:2a:89:25:ed:42:2d:
         ab:bb:cd:09:fc:af:03:ca:bd:a0:ce:ad:b7:8c:0d:99:79:b0:
         95:24:5f:09:38:07:c7:a8:fb:3c:1f:a5:fd:56:50:c8:e0:72:
         18:bf:9b:26:6f:94:74:13:cb:94:99:b7:a1:b2:c5:3d:fb:33:
         a6:a5:02:43:b0:6d:c9:24:06:8c:73:cb:6c:89:e5:43:86:d9:
         f8:ca:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:18:54 2024 by rpki-client on console-fra.rpki-client.org