Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa
File: 326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa (raw, json)
Hash identifier: SRJkdRb5rrnxeeL9xiyvJP99pvsaL+xdJbsl1QKpXSk=
Subject key identifier: 2E:1D:F1:B0:BA:4E:F6:64:09:82:95:37:8A:3D:EA:54:83:FD:3B:0E
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 4B6813875517F7C0202ED48E380782AB3D67C2AC
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa
Signing time: Sat 31 May 2025 16:19:28 +0000
ROA not before: Sat 31 May 2025 16:14:28 +0000
ROA not after: Sat 30 May 2026 16:19:28 +0000
asID: 214781
IP address blocks: 2a14:7c0:c000::/35 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:68:13:87:55:17:f7:c0:20:2e:d4:8e:38:07:82:ab:3d:67:c2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 31 16:14:28 2025 GMT
Not After : May 30 16:19:28 2026 GMT
Subject: CN=2E1DF1B0BA4EF664098295378A3DEA5483FD3B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:45:d1:60:85:51:3c:1c:db:1a:22:ec:22:
96:3f:20:5b:9b:40:f1:fa:1e:bb:68:ec:ea:70:8d:
2e:80:6c:41:eb:4e:75:94:63:cc:11:16:91:4d:d5:
41:d3:d1:8b:10:59:94:1b:72:d8:18:90:ea:a3:61:
30:e8:ef:6a:e5:de:ec:dd:ca:1c:11:52:ca:d7:f9:
12:b8:18:43:91:80:8c:5d:51:a8:5f:56:ad:83:d9:
60:f7:35:da:44:f1:88:ff:9d:d9:40:70:6e:a1:2b:
95:cc:92:07:a6:f3:13:97:11:3d:b3:b3:2e:0c:79:
f6:fd:35:ec:aa:25:d5:3e:79:ba:20:d0:33:8a:7a:
26:8d:aa:c5:55:10:5c:94:66:38:96:2c:8e:21:aa:
28:bc:ec:0e:e4:12:49:c4:74:82:9b:c8:02:c5:e8:
5a:44:5a:0d:62:a9:19:44:45:78:23:15:ce:6c:8d:
92:fe:c6:48:89:32:38:ab:9a:1c:16:1f:e8:24:2d:
72:2f:22:34:76:87:ae:65:cf:2c:d9:e5:07:d7:07:
7c:78:33:ed:1f:91:e3:a5:9d:ff:6f:ca:64:69:45:
32:0f:5a:76:6d:f7:20:c8:e0:5b:e5:eb:2a:00:2f:
f4:1b:09:3e:6d:af:0b:5b:21:5d:36:a2:7b:1f:31:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:F1:B0:BA:4E:F6:64:09:82:95:37:8A:3D:EA:54:83:FD:3B:0E
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:c000::/35
Signature Algorithm: sha256WithRSAEncryption
46:1e:9b:c2:31:f6:9f:41:67:b3:3f:e8:7c:29:bd:23:34:85:
47:38:75:55:7e:b8:43:25:1c:11:11:0f:66:77:13:73:5f:8c:
eb:25:81:ef:e0:da:c9:d2:ae:96:e0:06:7f:a3:e4:30:a8:80:
9c:fc:18:1d:9b:7d:db:cb:35:f4:ea:77:84:e8:c5:32:6b:c6:
53:bb:dc:fb:89:b4:82:99:39:f4:38:7b:f9:4b:c9:7e:d5:29:
78:2b:2d:d4:82:3b:b2:3a:87:1e:5e:71:0c:1e:d8:ea:3f:83:
14:3d:7c:11:0e:c5:39:10:e5:c5:d0:72:c5:30:6c:88:83:3d:
ad:42:e4:dd:c2:2b:61:85:27:75:0e:f6:7f:4c:b8:cd:ce:65:
e1:ef:2b:a2:00:03:3c:63:93:54:b7:a2:42:ed:b3:39:13:65:
72:e1:04:49:02:6d:d9:2b:20:66:68:9d:ef:46:90:41:ec:2e:
4a:3e:46:b0:5c:d3:51:19:b2:23:ab:f6:4f:44:1a:f1:a3:e9:
39:47:02:2a:59:a1:7e:17:df:16:af:95:15:1c:8f:b3:f9:c6:
7c:0b:55:be:b5:f7:f8:80:21:34:61:14:78:4b:22:dc:9c:a3:
44:af:03:c8:8b:55:7a:c9:e3:a9:f6:be:2e:d0:f9:bb:29:9e:
04:26:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:32:15 2025 by rpki-client