Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Chz51sRoR_IP5sYjxWo8QEqfIEs.roa
File: Chz51sRoR_IP5sYjxWo8QEqfIEs.roa (raw, json)
Hash identifier: oTR1XJTwlYK7VwmBBBCer7Xim+PPrSgabtWKihNroGU=
Subject key identifier: 0A:1C:F9:D6:C4:68:47:F2:0F:E6:C6:23:C5:6A:3C:40:4A:9F:20:4B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01BDCE96
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Chz51sRoR_IP5sYjxWo8QEqfIEs.roa
Signing time: Sat 05 Feb 2022 11:50:52 +0000
ROA not before: Sat 05 Feb 2022 11:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209968
IP address blocks: 2a0f:1e00::/29 maxlen: 29
2a0f:e1c6::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29216406 (0x1bdce96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 5 11:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a1cf9d6c46847f20fe6c623c56a3c404a9f204b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:29:ef:a7:13:7a:fc:42:65:4c:f0:4d:b6:
95:65:85:a1:50:10:56:62:5f:73:46:18:7d:68:a0:
e5:f3:4b:de:6a:31:ca:c7:0c:80:50:7c:a9:2c:a0:
23:fe:9e:6b:5d:8c:37:de:ac:78:f1:e8:d7:d2:de:
32:b4:b6:82:f5:63:72:59:33:21:9e:0e:6f:25:4c:
ad:c8:ed:0a:9c:f6:b7:ed:69:ff:7d:96:b4:b1:88:
7f:c1:73:47:d6:e2:99:ae:cf:05:26:49:54:0c:20:
a3:22:0f:24:dc:f1:d5:c9:c1:cb:94:3d:6b:ad:0f:
d0:2b:90:cb:46:0e:10:a1:7c:82:c5:df:38:ba:d5:
65:63:14:4b:6c:b4:44:45:e3:69:8f:27:74:79:6f:
c6:07:37:64:8a:4e:0a:2e:92:b8:da:af:69:56:f0:
d6:11:cf:3f:cb:94:e9:3c:0d:e8:6d:62:64:f7:8d:
a5:13:13:3e:11:1f:9c:a8:71:16:a9:90:b1:78:d4:
5f:96:7b:be:f5:77:e5:3b:95:58:75:02:85:13:f3:
a8:99:cd:11:78:18:cf:3d:13:cf:07:a6:5d:7a:3f:
52:0b:8e:58:d8:42:82:90:08:60:5e:8c:91:67:40:
7d:1e:a5:f8:95:a4:f9:e9:a5:c2:4a:45:15:8f:a1:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:F9:D6:C4:68:47:F2:0F:E6:C6:23:C5:6A:3C:40:4A:9F:20:4B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Chz51sRoR_IP5sYjxWo8QEqfIEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1e00::/29
2a0f:e1c6::/32
Signature Algorithm: sha256WithRSAEncryption
33:fb:2d:82:99:87:3f:61:b0:14:a3:b5:56:67:7d:07:5e:a0:
84:ef:99:f1:db:6f:cf:2d:b3:4a:58:d1:b4:be:47:94:1c:53:
bd:2d:b3:26:db:68:c0:46:54:a0:3b:dd:4c:8f:b4:c7:ed:27:
06:b6:08:f3:5e:10:06:84:86:4f:3d:fb:de:72:b3:cf:db:68:
06:26:dc:b4:f4:62:34:a4:be:5f:e9:66:ed:79:ee:05:d3:79:
73:d8:00:ad:39:b3:45:d4:1f:09:a8:41:97:4e:bf:fd:f4:6d:
0a:c2:7c:02:6e:6f:91:16:0e:36:0d:a6:b0:58:77:92:08:95:
5a:24:dd:fe:3c:9d:72:c6:e1:59:33:13:a3:6b:79:a0:bc:b3:
49:89:01:17:52:69:04:c2:33:d9:ad:ea:7d:b2:f0:4a:cf:05:
fb:29:73:4f:0b:e1:83:d8:60:48:5e:2c:ef:52:04:1d:a3:a0:
14:12:1b:48:4b:7a:be:89:91:d7:14:83:c9:f7:3a:eb:b2:32:
7c:99:4a:c6:65:ee:b9:81:b5:53:f1:bd:af:0a:4e:9c:25:be:
8d:69:f7:c9:29:8e:99:91:ce:4f:40:94:91:82:63:20:ee:7b:
9c:67:5d:c6:c1:da:96:ed:0f:63:f5:e0:e7:bc:ba:e2:ce:5e:
2e:1b:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:47:07 2025 by rpki-client