Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763333a3a2f33322d3332203d3e203531333936.roa
File: 326131343a3763333a3a2f33322d3332203d3e203531333936.roa (raw, json)
Hash identifier: 70HkBUdUNmOAeu5A/ZbRBRHJ+IiSlsZUHkZVmLPs/kM=
Subject key identifier: 76:46:57:61:16:9A:42:6A:62:5D:CE:88:5A:22:E3:22:89:1C:44:C8
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 528589EB98B307910E7C9173B3C2A28EC2005892
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763333a3a2f33322d3332203d3e203531333936.roa
Signing time: Tue 28 May 2024 14:57:16 +0000
ROA not before: Tue 28 May 2024 14:52:16 +0000
ROA not after: Tue 27 May 2025 14:57:16 +0000
asID: 51396
IP address blocks: 2a14:7c3::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 16:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:85:89:eb:98:b3:07:91:0e:7c:91:73:b3:c2:a2:8e:c2:00:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 28 14:52:16 2024 GMT
Not After : May 27 14:57:16 2025 GMT
Subject: CN=76465761169A426A625DCE885A22E322891C44C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:dd:b1:33:cc:fe:84:80:73:e6:71:c4:87:
83:96:fe:e2:74:0d:c2:ee:2f:0e:15:a8:b4:69:1e:
d6:ec:bd:e5:59:6b:0f:ab:c1:a8:a6:1c:e3:67:51:
ef:34:57:58:f6:08:47:ef:da:45:2d:3b:d7:73:e2:
91:c7:d8:ce:62:3a:ae:04:a9:38:b7:d6:23:29:ff:
35:f4:d7:f7:da:7b:bf:7b:90:0c:04:8a:87:cc:a0:
c4:71:05:d3:3c:f0:fe:f0:06:ae:1f:a5:ef:59:3e:
46:cc:08:fb:92:d6:ea:4f:29:c7:6c:c9:a7:13:79:
6e:0e:79:7b:a7:91:2a:40:ab:7d:94:7f:d7:cd:82:
30:cd:1d:9c:39:71:e9:2c:c0:2b:86:4d:21:32:b4:
44:64:18:07:3a:9d:ad:a6:62:d0:bc:f6:a8:dd:e0:
24:3e:86:c1:fb:36:ac:ab:5d:d2:01:56:19:bb:67:
20:eb:75:c4:08:e9:23:bb:44:8e:b3:7c:c6:e0:26:
cc:c1:f0:46:9e:b6:a0:20:4b:7b:e6:82:71:62:59:
19:22:64:5a:d7:22:d2:c6:72:f4:ce:1a:40:50:89:
f7:ea:4e:8a:4c:ee:b2:71:78:54:a8:31:93:cb:d2:
1f:2d:9f:91:29:41:80:29:50:19:2d:c8:96:b1:80:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:46:57:61:16:9A:42:6A:62:5D:CE:88:5A:22:E3:22:89:1C:44:C8
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763333a3a2f33322d3332203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c3::/32
Signature Algorithm: sha256WithRSAEncryption
0d:01:aa:e0:39:1a:83:24:4e:59:64:83:5b:4b:0f:0b:48:53:
4a:d2:48:e1:3b:e5:aa:75:54:ab:1c:14:f7:11:98:0c:f8:c9:
c8:e4:c8:bb:1e:dc:95:0f:cc:f2:e5:54:b6:30:87:68:f4:e2:
16:d1:fc:83:6f:84:08:1c:54:db:7d:a9:a0:bd:f5:2c:5b:77:
e6:b3:22:d5:75:fb:27:53:c7:35:3d:f4:fc:2b:ae:15:ad:de:
8e:95:9f:ee:8a:d2:e1:25:d1:62:27:e9:d4:79:ec:d7:08:3c:
94:7f:9e:3b:89:b6:7f:5a:a7:f7:8b:54:4b:b9:70:0e:ac:27:
fd:51:f6:83:79:fb:58:62:72:9a:d3:00:bd:e8:62:84:66:97:
eb:0e:47:ba:2b:5f:20:19:9e:66:da:cf:d5:ad:5b:6a:61:98:
d4:c0:f1:13:15:48:78:25:c5:78:5a:f1:b0:ab:1d:b9:5f:c4:
5a:96:b1:3a:a5:cf:67:5f:27:e5:08:9c:4a:1c:ad:92:07:0e:
3b:ae:48:17:2a:05:d4:69:e1:2d:19:84:03:60:51:5f:b0:f6:
ef:58:b0:b2:26:f0:9b:05:12:b8:e6:29:50:f3:7b:c4:19:f9:
4a:14:d4:d6:8a:da:8a:e0:cb:cd:f9:f6:6c:70:6b:c0:be:0a:
26:16:54:08
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUUoWJ65izB5EOfJFzs8KijsIAWJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNDA1MjgxNDUyMTZaFw0yNTA1MjcxNDU3MTZaMDMxMTAvBgNV
BAMTKDc2NDY1NzYxMTY5QTQyNkE2MjVEQ0U4ODVBMjJFMzIyODkxQzQ0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGd2xM8z+hIBz5nHEh4OW/uJ0
DcLuLw4VqLRpHtbsveVZaw+rwaimHONnUe80V1j2CEfv2kUtO9dz4pHH2M5iOq4E
qTi31iMp/zX01/fae797kAwEiofMoMRxBdM88P7wBq4fpe9ZPkbMCPuS1upPKcds
yacTeW4OeXunkSpAq32Uf9fNgjDNHZw5cekswCuGTSEytERkGAc6na2mYtC89qjd
4CQ+hsH7NqyrXdIBVhm7ZyDrdcQI6SO7RI6zfMbgJszB8EaetqAgS3vmgnFiWRki
ZFrXItLGcvTOGkBQiffqTopM7rJxeFSoMZPL0h8tn5EpQYApUBktyJaxgGLrAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUdkZXYRaaQmpiXc6IWiLjIokcRMgwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8v
cmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS8zMjYxMzEzNDNhMzc2
MzMzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMTMzMzkzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACoUB8MwDQYJKoZIhvcNAQELBQADggEBAA0BquA5GoMkTllkg1tLDwtIU0rSSOE7
5ap1VKscFPcRmAz4ycjkyLse3JUPzPLlVLYwh2j04hbR/INvhAgcVNt9qaC99Sxb
d+azItV1+ydTxzU99PwrrhWt3o6Vn+6K0uEl0WIn6dR57NcIPJR/njuJtn9ap/eL
VEu5cA6sJ/1R9oN5+1hicprTAL3oYoRml+sOR7orXyAZnmbaz9WtW2phmNTA8RMV
SHglxXha8bCrHblfxFqWsTqlz2dfJ+UInEocrZIHDjuuSBcqBdRp4S0ZhANgUV+w
9u9YsLIm8JsFErjmKVDze8QZ+UoU1NaK2orgy8359mxwa8C+CiYWVAg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:14:23 2025 by rpki-client