Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763373a3a2f33322d3332203d3e203533333536.roa
File: 326131343a3763373a3a2f33322d3332203d3e203533333536.roa (raw, json)
Hash identifier: bK7M8aF98m4XQ5IEHT2f4tsF4KLb4wUrrqVDRv+dGTY=
Subject key identifier: E1:9B:03:F4:D2:B0:8A:53:17:B4:95:C5:09:F5:9C:00:30:F8:D3:01
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 31BD8354E8E04FFB47D330579AA66E87C40BDB9F
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763373a3a2f33322d3332203d3e203533333536.roa
Signing time: Tue 29 Apr 2025 15:19:17 +0000
ROA not before: Tue 29 Apr 2025 15:14:17 +0000
ROA not after: Tue 28 Apr 2026 15:19:17 +0000
asID: 53356
IP address blocks: 2a14:7c7::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:bd:83:54:e8:e0:4f:fb:47:d3:30:57:9a:a6:6e:87:c4:0b:db:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:17 2025 GMT
Not After : Apr 28 15:19:17 2026 GMT
Subject: CN=E19B03F4D2B08A5317B495C509F59C0030F8D301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:83:06:b1:9a:df:fd:d1:46:40:95:65:7b:
f6:0c:2e:25:d5:7c:f9:f2:29:12:85:18:02:df:35:
45:27:94:7e:0c:fd:ff:17:89:00:66:bc:3b:7f:0b:
35:26:65:68:ef:4d:e6:0f:05:76:32:81:d5:d7:ae:
e9:b0:6a:da:40:72:c1:22:d1:51:6e:fc:97:29:70:
cc:56:df:ec:ee:64:5d:08:05:08:cb:40:e3:10:91:
0d:9f:48:88:6b:20:7a:90:40:36:d2:7d:63:2d:6a:
b4:50:5e:bc:3e:43:f5:b7:b6:dd:4a:ef:d6:37:64:
54:a6:eb:3c:07:e9:3d:1b:80:7d:aa:a6:1a:51:ac:
b3:f7:b6:ad:80:2e:d1:83:e4:cf:39:c2:da:5b:b1:
9f:ef:aa:d9:90:02:75:d0:db:fa:c6:ee:34:43:b9:
03:c7:2d:d7:af:3d:e4:a3:f2:3e:38:3f:8c:47:58:
e9:af:d5:0d:51:5d:bf:2b:a6:b3:42:9b:29:60:6c:
90:c1:e7:ee:5a:4e:a9:6e:29:6b:5f:88:5d:cf:af:
1a:ce:0b:26:d9:10:f3:97:16:de:3c:59:4b:ea:3a:
c3:ac:12:27:1e:81:29:79:4f:96:0c:d8:c8:fa:15:
49:24:aa:17:c5:d4:ba:d0:75:e1:bf:a2:c1:74:ff:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:03:F4:D2:B0:8A:53:17:B4:95:C5:09:F5:9C:00:30:F8:D3:01
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763373a3a2f33322d3332203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c7::/32
Signature Algorithm: sha256WithRSAEncryption
4d:55:63:27:7d:2b:11:51:2a:da:33:92:e7:83:7a:6c:87:1e:
7c:0d:d3:ce:8f:37:36:82:0f:f3:8d:70:95:15:5d:34:7e:c6:
5d:9d:fd:f9:5c:a3:18:13:91:b3:bd:7f:1a:16:31:e8:6d:6c:
1b:cd:29:08:d0:42:31:16:76:4c:65:3c:36:15:ad:25:cc:e2:
73:85:a1:62:0b:38:87:b4:a6:68:a6:47:83:17:9a:a0:90:aa:
1c:d2:c4:a6:ea:bc:4e:8d:df:e8:c7:9b:0e:9a:22:85:93:3f:
09:48:54:fc:e5:94:13:2d:05:da:55:40:d0:be:d3:ab:41:2b:
17:cb:45:b2:96:fb:3a:69:5a:5a:06:45:27:c9:c5:a1:63:26:
1c:91:a7:51:ea:69:25:a6:46:a4:d0:64:4e:8a:e6:d9:ed:9c:
41:3f:47:8b:2a:15:b9:ed:38:ba:4e:a8:b4:66:ef:5d:e2:ab:
74:0f:a4:4b:94:5e:37:90:6a:cf:e9:d8:c9:59:d2:f5:59:28:
c3:a5:b3:de:ab:3a:8d:ba:03:c7:06:73:01:65:a1:1d:46:9e:
27:a3:e1:3b:2a:86:02:a6:f6:e4:ce:c6:7b:99:02:c9:ab:e2:
56:db:2c:41:55:db:d0:34:fa:1e:4c:f9:a6:cd:03:07:e6:df:
1b:2f:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:32 2025 by rpki-client