Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
File: 326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa (raw, json)
Hash identifier: bOFvfQnacOZzFiyIwWc/Yg0tr2W4ywJkCC57O5W590A=
Subject key identifier: E8:49:3C:27:2E:56:30:34:E3:C7:F4:75:B1:94:76:79:A5:62:37:AE
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 3E33B349B38F039BEEE35C8E3352BE0623BD1C28
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
Signing time: Sat 10 May 2025 21:19:25 +0000
ROA not before: Sat 10 May 2025 21:14:25 +0000
ROA not after: Sat 09 May 2026 21:19:25 +0000
asID: 214775
IP address blocks: 2a14:7c0:4d00::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:33:b3:49:b3:8f:03:9b:ee:e3:5c:8e:33:52:be:06:23:bd:1c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 10 21:14:25 2025 GMT
Not After : May 9 21:19:25 2026 GMT
Subject: CN=E8493C272E563034E3C7F475B1947679A56237AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:54:82:06:cc:bb:eb:76:be:46:9b:35:7c:
0d:95:d6:97:9c:1a:98:c2:e4:93:75:ee:b4:00:c3:
8f:e2:8c:60:c8:30:a3:09:a5:ee:22:11:fe:57:fe:
57:cb:b4:34:28:54:2b:82:50:48:34:e9:a5:7c:02:
ad:72:96:7f:90:8e:75:b6:e7:71:7e:20:1a:15:ad:
1f:81:87:00:4d:19:70:c5:55:1c:78:8f:d3:e9:19:
3d:cb:f4:18:88:13:1f:c6:ea:d2:df:32:15:fc:11:
0e:c1:d0:15:7e:e4:ca:f3:ef:bb:a3:62:04:c9:37:
f6:79:29:80:75:4c:64:89:78:31:e2:95:2e:5c:5e:
55:42:9f:95:bf:ce:be:d5:e2:5f:0d:d6:aa:fa:5c:
44:42:66:ff:ee:e5:4e:d5:14:2c:21:84:62:eb:e6:
ee:12:68:25:94:ad:be:af:6e:c3:08:45:22:f9:84:
2d:35:6c:e2:05:80:08:e5:6b:5b:3c:27:e4:9e:f8:
d2:42:bb:e5:b1:66:1e:b0:c0:ca:b3:32:07:f5:77:
a6:2a:71:d9:03:4c:17:19:e6:b7:9b:ea:cc:ae:54:
2a:09:9a:7a:6b:08:c4:54:68:b3:e0:10:8e:06:7d:
2c:33:37:2c:ff:72:16:7b:7e:3a:e2:2f:29:e0:cc:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:49:3C:27:2E:56:30:34:E3:C7:F4:75:B1:94:76:79:A5:62:37:AE
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4d00::/40
Signature Algorithm: sha256WithRSAEncryption
70:07:bb:ae:27:ec:a8:a2:07:b2:f7:08:30:15:0f:03:03:6d:
eb:86:7f:02:5a:39:d5:83:e7:e1:cd:73:15:03:b4:4b:62:40:
b0:60:aa:31:07:33:17:9f:44:ef:61:dc:5c:b5:0d:3b:e2:a6:
24:f3:5e:3a:ce:2b:73:29:aa:76:65:1f:f8:17:60:cd:9c:47:
87:a9:32:5b:63:42:6d:98:df:c7:cc:cd:7a:b5:dc:e8:00:77:
23:4a:5c:ba:bb:8c:7c:1c:d3:9f:17:b4:87:8b:be:4b:ea:aa:
55:7a:aa:0d:cd:45:bb:91:cd:92:94:ea:ae:3c:41:6e:fc:92:
83:2a:72:b0:39:33:e5:0b:ea:5e:b9:1d:2f:2d:38:fc:04:bd:
3d:c4:cc:d8:40:de:84:15:45:cf:aa:9c:55:a7:d5:8f:f7:aa:
e2:f0:61:ee:4b:95:35:0c:9c:4f:34:40:58:9b:6b:8e:ed:c3:
a8:0c:39:54:18:2c:e4:1b:a8:8f:ec:6f:7b:67:ba:db:20:08:
0c:1f:fb:7d:90:ee:59:5c:9b:05:10:3e:fe:1f:2f:c3:cc:2d:
56:6a:85:54:2d:96:2d:af:59:5e:64:b9:cf:a0:71:fe:4d:30:
b8:db:97:fb:00:66:a6:46:20:0d:94:44:58:a5:94:a9:6e:5c:
5e:a4:fc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:57:44 2025 by rpki-client