Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
File: 326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa (raw, json)
Hash identifier: uBosOmiF9W6xjF0mSXyM6E64rc+UtR+OZpgW56sH99E=
Subject key identifier: F1:1D:08:C2:D0:51:8D:AB:0F:80:64:03:1E:A5:13:E2:4A:F2:C9:57
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2A71D3954B4752A6296F47DEECBE7CD6AB15F831
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
Signing time: Tue 29 Apr 2025 15:19:16 +0000
ROA not before: Tue 29 Apr 2025 15:14:16 +0000
ROA not after: Tue 28 Apr 2026 15:19:16 +0000
asID: 214843
IP address blocks: 2a14:7c0:4a00::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:71:d3:95:4b:47:52:a6:29:6f:47:de:ec:be:7c:d6:ab:15:f8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:16 2025 GMT
Not After : Apr 28 15:19:16 2026 GMT
Subject: CN=F11D08C2D0518DAB0F8064031EA513E24AF2C957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:34:37:c2:00:e4:c6:d1:de:e7:32:49:bc:
09:23:2e:e8:73:8e:02:77:4f:75:09:b7:65:20:b4:
0d:f5:f4:ae:5a:db:5f:e8:ce:ce:12:b2:00:ee:1b:
f9:95:21:b2:13:ef:7c:36:dd:74:89:4d:3c:ac:64:
5d:84:15:83:4e:1e:0b:26:72:26:93:ab:e8:bb:04:
4e:a3:36:53:9d:6d:a7:be:d8:b5:58:93:69:15:38:
6c:7d:56:f2:9c:fe:d6:36:1f:ab:e5:ef:cd:e1:e4:
0c:c9:f4:4a:80:22:e1:88:fd:d0:ac:f5:80:5b:cb:
5f:62:c7:d1:f5:ed:c6:c6:9e:ff:a6:44:05:ff:0a:
7f:cc:69:da:15:f4:c5:ce:6d:ce:93:14:76:05:e8:
8c:85:f3:1d:68:c3:ab:96:b6:b6:17:46:6e:a9:6a:
98:08:89:6f:b6:22:e1:8c:4f:6f:66:00:41:39:a3:
52:20:33:3a:42:df:cb:37:ba:a4:1c:1d:dc:b7:6e:
e1:ba:7d:82:9c:8a:89:c3:f7:d1:94:a9:0c:66:78:
1b:ae:97:d5:bb:0f:c6:47:94:de:da:67:68:1e:2d:
65:48:12:1f:78:80:88:15:03:90:3c:f5:c0:e2:e4:
a2:6d:9c:45:30:2f:86:4b:3b:15:d4:31:8c:20:34:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1D:08:C2:D0:51:8D:AB:0F:80:64:03:1E:A5:13:E2:4A:F2:C9:57
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4a00::/40
Signature Algorithm: sha256WithRSAEncryption
13:7c:a0:7f:59:5b:a0:5f:af:4e:47:c9:f2:e5:5e:28:77:7f:
bd:25:29:d6:59:72:de:d9:7b:23:78:77:0d:60:0d:2a:27:7d:
1f:24:9c:ee:a8:fc:64:03:fe:2c:a4:9f:37:ec:5a:b6:d3:28:
3f:92:b8:4a:a5:44:bc:cc:c5:8d:d1:94:22:29:a5:a6:1a:be:
9d:63:2a:79:25:82:8c:85:6e:ec:e4:d2:16:31:38:d2:c5:5a:
f1:ff:54:59:39:a4:98:63:bc:c0:75:b0:35:a0:78:e4:93:b7:
d0:31:75:3a:13:f7:25:90:ee:ad:7c:9b:b2:6f:b6:9f:24:83:
dd:aa:cb:0a:b8:ba:40:14:a3:da:59:90:42:f7:75:d2:c3:22:
89:25:77:2c:de:73:7f:16:b1:68:25:80:9d:11:df:65:20:5b:
08:f8:cf:ca:d4:27:65:50:c2:5a:d2:09:a4:74:ff:4f:0c:07:
84:95:76:d5:bf:e8:35:ba:a9:89:25:08:59:c5:bf:92:c5:19:
a2:a1:97:b3:67:86:e7:d5:63:e3:59:5a:05:32:44:ac:11:a1:
35:7e:20:73:78:22:2e:72:b7:9b:fc:90:93:e9:aa:42:cf:0d:
7e:9d:be:98:d0:b2:71:f9:39:94:51:7a:ea:4d:71:01:c0:bb:
9f:30:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:57 2025 by rpki-client