Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a33303a3a2f34342d3438203d3e20323135343230.roa
File: 326131343a3763303a33303a3a2f34342d3438203d3e20323135343230.roa (raw, json)
Hash identifier: Y4eaQ2HUNutLSI1dPHYBcmXVXCBxOXMeYYU4l+1OZ+g=
Subject key identifier: 07:68:89:8F:8D:1C:2A:87:00:2C:F0:46:88:02:56:84:09:45:BA:36
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 3EBCC0117E9448D628B23090671EC12BC5AB8691
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a33303a3a2f34342d3438203d3e20323135343230.roa
Signing time: Sat 10 May 2025 17:19:24 +0000
ROA not before: Sat 10 May 2025 17:14:24 +0000
ROA not after: Sat 09 May 2026 17:19:24 +0000
asID: 215420
IP address blocks: 2a14:7c0:30::/44 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:bc:c0:11:7e:94:48:d6:28:b2:30:90:67:1e:c1:2b:c5:ab:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 10 17:14:24 2025 GMT
Not After : May 9 17:19:24 2026 GMT
Subject: CN=0768898F8D1C2A87002CF046880256840945BA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:89:7c:c4:37:2e:f4:74:d6:e9:7f:6d:5b:
99:5a:62:7c:63:bc:33:78:17:25:37:5e:5d:65:a5:
2a:5f:03:51:16:6a:3c:88:8f:0d:5e:5f:74:4c:70:
27:27:dd:76:f0:eb:32:73:71:27:70:c2:ac:ef:c3:
76:58:59:87:ba:c8:ab:b4:79:1f:b7:fe:c4:ba:8a:
04:da:6b:5b:38:90:88:c9:52:38:73:2c:c2:02:9a:
ba:4e:35:6f:55:9a:a1:05:76:5f:8c:8c:a0:c1:ed:
b8:2b:04:1b:0f:48:f4:dc:97:23:ef:f0:94:4e:63:
8f:c2:57:d4:61:3e:32:e8:52:81:82:b4:9f:18:56:
e0:4d:e3:6f:a5:e1:aa:d0:f6:0a:47:af:1e:27:90:
0f:fe:d5:f8:62:05:42:08:68:1c:5a:63:4f:de:4f:
5e:dd:b4:51:91:66:f8:7a:12:d4:f8:8f:e2:a7:6a:
a0:93:c1:ba:d4:d2:18:bc:f9:5e:97:03:0f:35:36:
49:3e:23:b3:3c:44:a4:d3:68:ae:f9:2b:3b:92:59:
a2:0d:24:c8:ba:e5:7f:e6:f9:8c:a1:c3:97:46:85:
ed:9e:b5:72:c4:38:d9:a7:d3:98:ad:45:07:f0:a7:
0b:c0:06:33:c5:01:c6:a9:15:ca:d8:ea:dd:57:33:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:89:8F:8D:1C:2A:87:00:2C:F0:46:88:02:56:84:09:45:BA:36
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a33303a3a2f34342d3438203d3e20323135343230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:30::/44
Signature Algorithm: sha256WithRSAEncryption
34:f1:7a:bd:9b:93:77:d9:07:2d:9c:86:9c:70:d1:fd:dd:ba:
41:a4:c9:93:11:5d:05:f5:fb:1b:c1:c6:35:46:c2:fc:e8:7e:
f4:e5:c3:3c:f5:c3:87:82:62:03:ef:98:06:80:59:09:11:ea:
a3:9f:07:a3:89:53:63:cb:04:8c:83:b0:0a:80:57:bb:84:da:
f1:51:43:1f:73:89:6c:e0:56:18:cd:08:39:06:4a:e3:ae:13:
08:d4:c1:e5:da:6c:02:09:b4:91:9f:87:e5:c4:08:01:43:d8:
92:6b:55:d0:2e:35:ac:72:32:e0:23:55:b3:a8:ca:71:80:29:
e4:2a:33:29:74:fb:63:59:8f:d8:12:10:6d:cb:59:37:0f:fa:
a7:34:aa:be:96:4e:42:d6:60:47:c1:6c:19:b0:5a:68:83:14:
ab:84:4a:c9:0a:bd:be:a4:ca:9f:4c:da:96:a9:b5:09:fd:47:
1e:8a:ac:20:07:6d:96:78:ce:4c:86:97:98:e0:3b:9a:07:2b:
a6:92:1a:4d:ca:06:89:5f:06:40:6d:ea:14:96:de:41:d4:48:
81:c9:8a:00:74:ac:a4:44:48:f0:5b:c5:fa:af:2b:5b:ab:ab:
2b:6d:c9:58:bb:cb:61:fa:36:2e:22:ed:e9:72:d9:2e:ed:50:
77:7d:03:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:17 2025 by rpki-client