Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa
File: 326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa (raw, json)
Hash identifier: Y/FEIkFPpxERpBXSrHaJ5+ZJfPxuTxz5CGLWi30dKbI=
Subject key identifier: 43:24:85:92:64:C1:0D:75:6F:F6:21:85:1E:89:E5:62:72:A6:58:8C
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2166BC1CBF198E7C9BA709F1BDD819E388ECE67A
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa
Signing time: Sat 17 May 2025 20:19:27 +0000
ROA not before: Sat 17 May 2025 20:14:27 +0000
ROA not after: Sat 16 May 2026 20:19:27 +0000
asID: 214967
IP address blocks: 2a14:7c0:5800::/38 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:66:bc:1c:bf:19:8e:7c:9b:a7:09:f1:bd:d8:19:e3:88:ec:e6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 17 20:14:27 2025 GMT
Not After : May 16 20:19:27 2026 GMT
Subject: CN=4324859264C10D756FF621851E89E56272A6588C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:0d:a1:13:dd:ee:d7:61:b2:0b:55:ae:0f:
97:bb:dc:e7:c0:82:a7:68:33:07:aa:dc:54:1f:84:
36:ce:a2:56:ef:4c:e0:30:88:3d:d7:81:5e:2b:1f:
d4:bb:32:50:6f:42:34:95:3b:aa:db:ae:38:de:1d:
25:bb:b9:21:2f:1f:90:75:3a:1e:84:45:5f:a1:23:
63:86:ba:a6:66:05:66:ed:a8:01:36:23:98:48:ea:
38:51:29:5e:2d:9e:53:19:53:5e:15:2d:a3:99:a5:
b0:15:d3:a8:d5:85:e3:a2:f3:2e:4d:bb:50:e3:50:
80:0b:fd:a0:b0:c6:2c:b8:11:98:15:c7:16:f6:0d:
49:5d:59:83:1c:6a:88:6b:92:45:34:92:60:df:56:
a2:1f:57:47:f8:eb:31:6e:17:0a:4c:c9:8f:40:4d:
e7:49:22:4a:ac:bf:6a:47:e7:e9:bf:e1:a6:17:42:
6d:fb:5b:15:9f:ba:22:d5:84:70:c6:e8:01:a2:fc:
73:8d:9e:62:75:fb:1e:49:1d:de:2e:f8:36:28:c8:
e3:87:c1:3d:d6:e5:f1:1e:99:12:d0:6e:43:33:e0:
af:5c:ca:61:21:88:6a:1e:21:13:fb:83:b9:be:74:
4a:15:ae:3f:b0:52:73:5c:a2:39:9f:47:96:42:56:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:85:92:64:C1:0D:75:6F:F6:21:85:1E:89:E5:62:72:A6:58:8C
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:5800::/38
Signature Algorithm: sha256WithRSAEncryption
53:1e:8e:c4:58:45:01:3e:a7:bd:cc:d4:b8:80:75:e7:e8:08:
42:49:10:e7:27:43:1b:d4:08:5f:e1:e2:9f:b8:00:62:d1:3e:
3e:5a:94:f2:de:86:bb:b8:20:03:68:56:82:a0:0d:2e:83:85:
b2:36:9e:9b:63:5f:d2:e3:3a:d8:43:1e:bf:e8:29:bb:70:c3:
69:3e:a2:d2:6e:b9:93:5a:7a:5d:84:60:91:0f:56:5f:c8:d1:
70:28:03:85:f0:b9:36:c3:f0:62:78:19:e7:e0:48:a9:eb:48:
cb:6e:ab:66:9d:b5:68:b4:20:d8:d2:d5:2b:bf:84:e8:ae:f3:
ee:4f:5b:c3:67:99:93:2c:36:a2:61:68:95:3a:15:67:b2:55:
6e:9a:01:39:b7:dc:37:95:d5:58:b0:35:78:38:70:31:f5:60:
64:25:2f:a3:56:73:65:00:71:8d:a8:c6:d1:95:62:cf:87:19:
cd:8c:1c:a7:10:4e:3a:62:85:7f:71:29:ef:1f:24:0d:51:21:
5d:46:7c:81:3a:de:43:09:c7:c9:9a:22:39:28:80:fa:ae:dc:
d5:1f:7c:bc:96:1d:e7:a6:e0:bd:50:38:6b:14:f7:61:4b:78:
46:ab:f0:89:20:3f:95:4d:5a:f7:2a:1d:2d:a4:98:4a:3d:32:
2c:64:1d:1c
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUIWa8HL8ZjnybpwnxvdgZ44js5nowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNTA1MTcyMDE0MjdaFw0yNjA1MTYyMDE5MjdaMDMxMTAvBgNV
BAMTKDQzMjQ4NTkyNjRDMTBENzU2RkY2MjE4NTFFODlFNTYyNzJBNjU4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uA2hE93u12GyC1WuD5e73OfA
gqdoMweq3FQfhDbOolbvTOAwiD3XgV4rH9S7MlBvQjSVO6rbrjjeHSW7uSEvH5B1
Oh6ERV+hI2OGuqZmBWbtqAE2I5hI6jhRKV4tnlMZU14VLaOZpbAV06jVheOi8y5N
u1DjUIAL/aCwxiy4EZgVxxb2DUldWYMcaohrkkU0kmDfVqIfV0f46zFuFwpMyY9A
TedJIkqsv2pH5+m/4aYXQm37WxWfuiLVhHDG6AGi/HONnmJ1+x5JHd4u+DYoyOOH
wT3W5fEemRLQbkMz4K9cymEhiGoeIRP7g7m+dEoVrj+wUnNcojmfR5ZCVou/AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUQySFkmTBDXVv9iGFHonlYnKmWIwwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzUzODMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzOTM2
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgIqFAfAWDANBgkqhkiG9w0BAQsFAAOCAQEAUx6OxFhFAT6n
vczUuIB15+gIQkkQ5ydDG9QIX+Hin7gAYtE+PlqU8t6Gu7ggA2hWgqANLoOFsjae
m2Nf0uM62EMev+gpu3DDaT6i0m65k1p6XYRgkQ9WX8jRcCgDhfC5NsPwYngZ5+BI
qetIy26rZp21aLQg2NLVK7+E6K7z7k9bw2eZkyw2omFolToVZ7JVbpoBObfcN5XV
WLA1eDhwMfVgZCUvo1ZzZQBxjajG0ZViz4cZzYwcpxBOOmKFf3Ep7x8kDVEhXUZ8
gTreQwnHyZoiOSiA+q7c1R98vJYd56bgvVA4axT3YUt4RqvwiSA/lU1a9yodLaSY
Sj0yLGQdHA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:48:10 2025 by rpki-client