Route Origin Authorization
$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313938303235.roa
File: 326130663a316363353a666666663a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier: 9cj66k3beGvhTapMBV8PiegOkdzMZusFmnnwRlGBov4=
Subject key identifier: 70:EE:45:68:A0:C8:7F:F4:25:4B:3F:F5:8D:44:C4:96:50:26:11:62
Certificate issuer: /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial: 658713EAC26ACACE9F8544C76A2127F18E2E90ED
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access: rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313938303235.roa
Signing time: Sat 28 Mar 2026 18:42:21 +0000
ROA not before: Sat 28 Mar 2026 18:37:21 +0000
ROA not after: Sat 27 Mar 2027 18:42:21 +0000
asID: 198025
IP address blocks: 2a0f:1cc5:ffff::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:87:13:ea:c2:6a:ca:ce:9f:85:44:c7:6a:21:27:f1:8e:2e:90:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Validity
Not Before: Mar 28 18:37:21 2026 GMT
Not After : Mar 27 18:42:21 2027 GMT
Subject: CN=70EE4568A0C87FF4254B3FF58D44C49650261162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:7b:c8:c2:2c:fe:fe:b2:a9:63:23:0b:f6:
3b:da:75:f8:98:e3:e5:3e:08:7c:c8:54:fd:95:5b:
05:59:64:b0:00:dc:76:14:f2:0b:6d:c1:56:d9:81:
0b:ce:da:7a:70:66:3a:b9:c2:66:bd:03:23:fe:f5:
40:05:31:2a:c4:f0:0b:30:49:61:e0:9d:64:80:7b:
ab:7c:7c:45:3b:c2:56:5f:38:9b:8e:66:79:68:d1:
90:23:84:98:c5:f5:0c:1f:18:51:6a:21:c0:ca:92:
d1:85:9e:d9:51:d7:9b:c0:fe:b4:80:8b:51:2b:fe:
22:61:df:fd:fb:71:d8:51:55:fc:29:ac:c1:5f:1c:
84:55:d2:82:25:fc:b6:4f:2f:f7:2b:aa:a0:fc:a2:
95:7e:62:3d:ff:81:ea:11:bf:26:ae:61:bd:78:65:
ea:68:4e:1e:63:bb:93:f6:64:1d:a0:bb:39:f1:92:
1e:96:97:e5:33:1d:1f:b4:27:f1:97:d7:84:b7:9f:
b1:62:eb:36:97:20:b2:15:3a:ea:13:9c:e1:b0:cd:
98:70:de:f0:02:d5:aa:85:a8:a6:f2:9b:b8:94:70:
7d:bd:66:e1:43:cc:84:09:77:d0:2f:7f:d0:8d:fd:
86:13:f3:f7:b4:25:90:f8:1e:f5:3b:4c:fb:3a:a2:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EE:45:68:A0:C8:7F:F4:25:4B:3F:F5:8D:44:C4:96:50:26:11:62
X509v3 Authority Key Identifier:
keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313938303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
70:c3:43:8a:f3:4d:76:a0:57:b2:a6:f6:55:8c:23:00:96:76:
99:9a:6f:3b:60:06:fc:0f:98:19:e8:0a:42:2f:36:73:d5:5a:
e5:c7:1d:19:b7:38:89:e0:97:97:81:1f:6b:81:23:4c:28:c8:
81:d2:f2:a6:e6:c3:36:f7:44:b4:17:df:35:8e:af:94:a2:3a:
2a:da:29:25:af:77:e4:18:bf:4b:35:32:9d:8e:98:99:6e:78:
e3:a1:6e:5f:32:04:70:ee:39:18:ad:9f:05:90:5e:f9:ca:2b:
95:15:ae:95:51:d6:d2:74:3c:f3:05:a2:92:e5:00:f4:eb:3d:
7a:06:82:e0:18:3d:23:75:81:30:b4:3d:0f:40:6d:41:91:53:
55:4a:66:66:fe:fa:31:c6:ee:10:19:19:88:c1:b6:b7:9a:95:
d4:6c:21:0a:1a:dd:89:20:19:c8:38:f9:c2:ea:eb:25:35:6f:
e6:e4:cd:0a:c8:3a:84:88:64:e2:7f:52:0d:fb:e6:68:96:22:
6d:9a:10:49:2f:c1:cd:b6:69:a7:67:45:9d:b9:34:a0:ab:36:
36:0a:7e:81:a2:52:c6:d4:e2:ec:5b:ec:be:2c:48:b0:c5:81:
b3:ea:a2:50:6b:94:80:ad:7a:70:d3:1b:ca:0e:07:d0:5c:86:
0f:f2:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:52 2026 by rpki-client