Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313430303a3a2f34302d3438203d3e20323136333639.roa
File: 326131343a3763303a313430303a3a2f34302d3438203d3e20323136333639.roa (raw, json)
Hash identifier: GvL1rYAwQro1Y3Rp+unqJQX+iLzLdNBIW0EZId/Q9lQ=
Subject key identifier: C8:CB:12:BA:A6:96:FE:C3:DA:33:9B:3A:45:F7:09:F7:6C:80:8E:10
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 77DF6F013432AE8D4997455A0EEAE3CB0B03E46E
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313430303a3a2f34302d3438203d3e20323136333639.roa
Signing time: Tue 29 Apr 2025 15:19:13 +0000
ROA not before: Tue 29 Apr 2025 15:14:13 +0000
ROA not after: Tue 28 Apr 2026 15:19:13 +0000
asID: 216369
IP address blocks: 2a14:7c0:1400::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:df:6f:01:34:32:ae:8d:49:97:45:5a:0e:ea:e3:cb:0b:03:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:13 2025 GMT
Not After : Apr 28 15:19:13 2026 GMT
Subject: CN=C8CB12BAA696FEC3DA339B3A45F709F76C808E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:27:13:11:3c:41:79:25:30:aa:7d:52:92:
e2:70:6a:84:19:73:c1:84:42:24:ea:55:18:78:f1:
3d:6b:fe:b7:6e:ea:90:2b:6b:d4:68:86:54:16:55:
c8:67:2c:d3:30:72:9d:9f:5b:45:c6:e9:4d:e6:23:
68:d7:6d:ef:f6:51:76:be:1b:aa:1b:b2:66:e7:cd:
7f:42:96:b2:12:23:be:63:92:96:9e:e0:43:16:08:
d4:0a:19:5f:3e:04:cc:5b:eb:11:70:5e:17:0c:fb:
9a:d4:0d:ff:1d:3a:47:75:af:fa:ff:4d:29:ef:04:
e2:ab:b7:71:95:54:33:9f:05:cc:a3:76:53:b9:d8:
19:77:37:3f:ae:0f:4e:95:d8:c5:e8:ca:12:da:cc:
6c:61:05:5b:6a:6d:2d:71:9b:c6:5f:37:3d:d7:ef:
89:44:69:64:a0:6e:8e:95:e0:22:74:99:03:f2:bc:
1c:91:14:9f:a0:71:15:c6:38:2d:9c:75:75:59:53:
9b:60:1c:11:23:41:07:2a:0b:4d:43:74:29:2f:bc:
7a:91:d7:6c:44:fb:b6:7e:a0:58:10:6c:ee:d7:04:
74:50:9e:a9:37:39:5a:42:aa:85:1c:b3:1d:7f:bf:
15:67:24:45:89:b5:33:e2:e1:01:73:99:40:00:0b:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CB:12:BA:A6:96:FE:C3:DA:33:9B:3A:45:F7:09:F7:6C:80:8E:10
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313430303a3a2f34302d3438203d3e20323136333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1400::/40
Signature Algorithm: sha256WithRSAEncryption
8e:5f:d7:3c:52:89:7b:a3:37:f8:14:35:a1:82:c0:f4:df:28:
97:f7:f1:3f:01:5a:4b:31:d5:77:39:0f:bf:73:c6:33:62:88:
be:12:5c:d0:ec:49:ec:53:41:6b:57:11:5b:27:d4:aa:b6:1b:
90:61:7f:f4:b3:af:0f:b1:00:14:df:f4:71:5c:0c:90:54:cc:
b6:af:cc:1b:f6:93:aa:5e:79:7b:20:96:8f:dd:3f:2d:db:25:
11:ee:05:70:53:23:8b:57:7d:5c:e6:73:fb:9b:ac:2a:2d:89:
49:35:11:35:89:86:ca:0b:d5:58:68:4f:ab:91:68:e7:fd:5b:
00:e3:2a:f9:f0:a6:6a:d8:76:a9:de:76:ac:1e:bf:91:d5:9c:
4a:e6:66:b4:32:63:42:ed:80:66:86:6e:34:1c:32:96:84:bb:
ef:9a:ac:41:f2:39:0d:32:41:63:76:92:7f:fd:33:da:40:14:
45:61:30:9e:15:44:51:91:17:e4:97:41:d4:af:fb:55:de:51:
b0:ec:6e:83:32:23:53:4b:33:3c:e0:44:7c:e4:fc:29:87:1d:
61:12:b1:91:4a:3d:ed:6d:9e:d6:ef:23:c7:bd:b7:84:a5:e5:
84:b6:cc:16:75:02:09:e9:41:e1:1e:d4:69:8c:45:10:84:72:
18:71:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 21:17:42 2025 by rpki-client