Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ChobGgV178AM6JwD5I7JbCDnnX0.roa
File: ChobGgV178AM6JwD5I7JbCDnnX0.roa (raw, json)
Hash identifier: OJwuta9naCpw9Ullu2Pj3DNeRGNfGz8ZrxLa64qVP/A=
Subject key identifier: 0A:1A:1B:1A:05:75:EF:C0:0C:E8:9C:03:E4:8E:C9:6C:20:E7:9D:7D
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 0FBFDAD0
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ChobGgV178AM6JwD5I7JbCDnnX0.roa
Signing time: Sat 01 Jan 2022 09:57:06 +0000
ROA not before: Sat 01 Jan 2022 09:57:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203535
IP address blocks: 2a05:b0c6:80e::/48 maxlen: 48
2a05:b0c6:80b::/48 maxlen: 48
2a05:b0c6:80d::/48 maxlen: 48
2a05:b0c6:80c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264231632 (0xfbfdad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 09:57:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a1a1b1a0575efc00ce89c03e48ec96c20e79d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:1b:72:94:19:19:69:4b:71:8a:13:a9:97:
4e:0c:a2:a8:fb:59:6f:db:2f:7b:f6:f3:ca:5b:d2:
fa:24:d2:2d:4c:28:24:bc:31:4c:27:21:9c:16:f6:
1a:c1:98:cd:de:4d:a3:c2:f7:84:61:16:c7:38:c3:
4b:52:27:73:8a:9a:cd:52:c9:15:ef:f0:77:1e:ae:
e6:c9:8e:2b:02:31:6e:00:95:75:17:fb:30:c3:b3:
ef:4f:a8:c9:41:37:63:98:3a:6c:52:24:b7:3a:f1:
b7:84:2c:cb:70:7b:cf:42:c0:4a:d9:7b:c0:fd:5d:
f7:2f:5c:ed:2c:1a:f3:83:1d:bc:cb:fe:66:72:54:
86:82:e3:7c:f2:71:ec:8c:9f:b3:0d:fd:4b:19:29:
61:67:7f:49:ef:bb:4e:93:d8:3e:60:5a:5e:3c:ce:
cf:91:e3:ec:8a:cd:ee:45:4e:74:62:71:f1:a0:26:
73:81:d4:9b:87:63:c0:be:ed:79:71:e5:7b:61:58:
2c:37:65:89:d0:a7:ea:6f:04:cc:97:05:41:99:79:
85:de:98:1d:cc:e0:40:f5:31:8d:99:cf:37:ba:bb:
7d:bb:aa:f5:3b:3b:10:fd:f5:ff:96:89:cf:d1:a8:
7b:d9:1b:50:2b:04:3e:30:cb:bf:bd:23:e9:1c:dc:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1A:1B:1A:05:75:EF:C0:0C:E8:9C:03:E4:8E:C9:6C:20:E7:9D:7D
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ChobGgV178AM6JwD5I7JbCDnnX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:80b::-2a05:b0c6:80e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:a7:4a:4e:ec:76:e5:88:94:0d:02:30:94:57:c9:c7:f3:94:
04:d5:7d:23:5d:33:53:07:c2:2b:a3:10:2c:44:d7:7c:ab:51:
42:46:04:33:9e:23:a5:bc:3c:e2:81:75:c3:17:07:40:a6:c4:
99:27:3c:e4:80:ce:64:45:02:61:f8:25:04:6c:64:6e:58:d1:
e2:cb:d7:5d:5d:1d:4d:c0:8b:50:55:d9:ea:bf:42:f2:70:28:
75:2d:74:b5:2e:25:df:9a:00:2a:01:7c:d7:b6:10:bb:d8:cd:
0e:47:1a:fb:df:14:62:d4:33:97:91:c0:b7:d1:fa:8c:73:a9:
5b:e8:4d:bb:31:e0:e6:0b:67:55:3b:18:ff:61:59:47:b5:88:
9e:02:07:b4:20:ae:eb:86:c5:b3:52:77:07:12:48:0d:16:2f:
69:9e:eb:e2:f7:ea:9c:fd:80:17:24:49:c3:49:ba:64:0d:31:
64:96:cd:63:35:9d:9b:ef:b6:17:d7:e1:de:2e:e0:7e:c2:7c:
8c:a3:29:29:e2:bc:9f:c2:d5:e5:55:62:ae:40:97:12:1d:92:
e9:d8:85:97:8e:9b:43:64:5a:36:de:b8:8d:c4:46:08:84:60:
b5:79:e6:22:a8:e4:16:d8:0d:59:c5:9f:df:5f:ac:39:3c:77:
1e:43:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:47 2025 by rpki-client