Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa
File: 326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa (raw, json)
Hash identifier: UkZ4EMah5+0UDG3Up5V3ewmwRYNAIVOEXQpvszlGles=
Subject key identifier: 9A:5B:1E:75:40:0F:A4:5B:1A:C4:3A:7D:B6:C0:EC:D4:FC:CE:87:CB
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 768E726E7FA3FC0E4CA5C828102D649B4C1AB171
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa
Signing time: Tue 29 Apr 2025 15:19:16 +0000
ROA not before: Tue 29 Apr 2025 15:14:16 +0000
ROA not after: Tue 28 Apr 2026 15:19:16 +0000
asID: 51396
IP address blocks: 2a14:7c0:2800::/38 maxlen: 38
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8e:72:6e:7f:a3:fc:0e:4c:a5:c8:28:10:2d:64:9b:4c:1a:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 29 15:14:16 2025 GMT
Not After : Apr 28 15:19:16 2026 GMT
Subject: CN=9A5B1E75400FA45B1AC43A7DB6C0ECD4FCCE87CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:94:a8:25:0f:66:e3:0c:19:dd:e6:bf:a8:
72:ec:30:05:ad:ab:08:f3:e3:09:26:a4:ff:40:f0:
c7:cb:35:a1:81:54:a7:7d:cc:fb:75:2c:ef:62:52:
87:54:a9:fd:53:38:56:b9:5d:4c:f6:52:bc:a8:07:
d5:ff:f6:4e:d1:bd:73:04:49:28:4a:fb:21:b8:a8:
64:26:74:bf:c8:4e:a3:05:50:24:9b:02:af:55:11:
c9:6d:2c:e6:31:3e:c7:ef:fd:17:5f:66:df:9a:c1:
ad:86:8d:ae:a7:63:71:bf:42:dc:24:52:58:28:ef:
af:65:b1:48:fa:c2:8e:2c:6a:f2:08:77:9a:95:25:
59:7a:33:34:4d:09:b7:75:67:a7:11:ce:e8:b6:4b:
68:f1:54:bc:f7:0f:0c:b3:7e:3d:11:05:98:f9:e9:
a8:5c:e6:5c:84:31:35:f1:ca:94:f0:9a:21:c5:4d:
88:d8:b7:61:f7:cc:79:19:51:12:6c:3c:18:db:71:
61:24:d3:82:40:f0:40:d0:00:d8:f0:35:41:7c:b1:
0b:17:db:d9:5f:fd:22:7f:8a:b5:61:52:86:9a:64:
78:81:fa:6f:1d:bb:1f:cd:55:0b:98:d0:39:cb:03:
aa:7f:80:af:0d:ad:32:fd:29:ed:33:03:61:f3:21:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:1E:75:40:0F:A4:5B:1A:C4:3A:7D:B6:C0:EC:D4:FC:CE:87:CB
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:2800::/38
Signature Algorithm: sha256WithRSAEncryption
22:88:0a:86:23:f7:a1:5b:9a:3a:e2:87:85:55:d5:a6:b9:25:
ae:39:7e:a4:cc:1a:c4:0b:63:09:b7:70:50:f9:58:8e:38:5c:
d5:80:99:4a:6a:27:c9:70:32:db:56:1c:fe:8e:7c:b8:bd:c4:
1d:85:0f:25:97:2f:c8:cf:a1:ce:7d:a4:5a:e3:cf:f5:ee:82:
6f:f2:34:e2:2a:52:ce:eb:b8:ce:ba:2e:10:b7:ca:47:8f:07:
d2:7b:0d:a7:76:ee:a2:05:ba:a0:3d:3d:28:94:15:5f:41:6a:
8a:87:64:8c:e0:86:fd:ae:7d:60:cf:36:0a:9c:3c:a5:75:d8:
45:dd:e1:cc:b4:33:e7:d4:74:09:7a:69:bb:4f:21:89:d6:a5:
d0:a8:d9:f5:c5:f9:80:04:df:81:02:63:25:57:c4:78:8d:bb:
41:20:b5:3c:4d:8d:8e:76:73:0d:1c:b1:4a:ae:71:98:6d:ac:
cd:24:ec:69:b9:4e:44:d4:6e:50:3e:73:6c:50:fd:87:21:4f:
f2:e2:69:24:9f:d5:7d:84:44:ae:c4:f6:6a:44:3e:7a:74:5d:
2f:3d:f5:67:b8:8b:e6:9d:d4:79:3f:d9:53:bd:3a:af:24:d9:
8d:16:cc:21:3a:50:4b:e6:3e:9e:88:51:15:e2:dc:70:cd:97:
46:34:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 21:16:46 2025 by rpki-client