Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ZO6vvqfNk097NBxkVYtWME7pbuk.roa
File: ZO6vvqfNk097NBxkVYtWME7pbuk.roa (raw, json)
Hash identifier: xJVQi6WMunQo0Cfr0VZtU+7EuSqTPuNhlqfgniWd8zw=
Subject key identifier: 64:EE:AF:BE:A7:CD:93:4F:7B:34:1C:64:55:8B:56:30:4E:E9:6E:E9
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 04D975FC
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ZO6vvqfNk097NBxkVYtWME7pbuk.roa
Signing time: Sun 15 May 2022 08:36:40 +0000
ROA not before: Sun 15 May 2022 08:36:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38981
IP address blocks: 87.237.109.0/24 maxlen: 24
87.237.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81360380 (0x4d975fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: May 15 08:36:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64eeafbea7cd934f7b341c64558b56304ee96ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:eb:e7:c1:c2:03:25:7c:f7:dd:fa:b6:8d:
21:1b:bb:93:de:81:a0:7d:a2:b3:a7:69:55:c5:2a:
1f:17:21:48:69:21:56:e1:61:3c:a7:05:83:6e:50:
37:e5:9d:da:1a:a0:a6:aa:7b:92:8b:a7:f1:ef:b8:
2c:b1:45:b3:41:22:48:3f:4e:de:39:a8:2d:4f:c2:
04:a6:83:27:b7:49:32:05:1c:aa:e2:98:49:83:a9:
1e:33:16:ac:a4:70:c0:ac:84:fb:33:25:2d:06:53:
94:8b:2a:80:22:e7:5b:58:76:46:38:67:61:a4:4b:
4d:47:de:bd:8e:3d:ea:b5:9a:ae:7a:b7:17:ca:a5:
b9:82:5d:91:a2:d4:da:20:cd:78:3d:c5:8c:f0:85:
94:55:2d:c6:ec:11:2a:15:e9:3b:a1:1f:e6:41:65:
fc:64:a8:d5:77:53:ff:eb:17:1b:d1:d8:af:61:94:
59:d0:cd:45:fa:6d:d2:81:e8:c9:0d:3b:ef:2d:ec:
9e:b3:02:48:7f:62:20:fa:96:68:4c:c1:dd:92:54:
92:df:1e:97:92:7c:12:bc:ff:7a:bb:29:5d:6e:d3:
0a:89:dd:a6:57:f2:9f:22:f7:37:a2:56:e8:4f:97:
55:f9:a0:d4:d5:aa:cc:ee:c4:7d:17:76:67:2f:db:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:AF:BE:A7:CD:93:4F:7B:34:1C:64:55:8B:56:30:4E:E9:6E:E9
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/ZO6vvqfNk097NBxkVYtWME7pbuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.108.0/23
Signature Algorithm: sha256WithRSAEncryption
13:30:5c:bc:4b:f5:2d:97:a5:73:d6:06:00:2c:48:c3:2c:02:
f4:62:93:23:73:8c:c3:1a:4b:5a:97:9f:96:d3:df:1b:08:fe:
6b:5f:b4:21:22:48:16:a2:a7:17:94:39:73:5f:5c:d8:78:1f:
c0:be:c5:5f:b2:c5:0e:4d:ce:df:f3:e8:43:45:84:67:89:77:
17:1d:29:85:3d:73:7b:de:4b:f3:02:da:d3:6d:45:39:d6:e5:
80:31:80:b3:fe:e2:d5:cc:16:e4:c4:24:42:b9:15:f4:3c:c4:
65:9d:6b:ab:48:f4:6b:f9:11:47:cf:4c:fa:49:85:4f:37:ef:
37:61:0e:8e:7b:0d:0b:28:aa:ea:e8:3b:9b:31:5c:3a:80:77:
50:8e:d2:25:b5:fc:b0:83:e0:79:70:e7:c4:0d:f5:e5:51:ec:
8f:00:a9:79:ab:7d:3a:c7:d0:a6:28:45:c2:75:4a:ba:e6:a3:
a7:5e:dd:ff:ee:4c:cf:2c:8c:21:1d:81:a9:0d:90:7e:62:ef:
4a:e9:ae:32:86:08:5d:ed:3d:4a:80:2e:11:9a:ee:4f:c4:4b:
11:da:2b:37:22:ea:9c:78:c7:72:da:d0:e8:cb:02:74:4c:5d:
4b:28:d2:60:f9:93:ea:3c:89:2e:91:31:63:57:81:09:79:2b:
de:cd:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:21 2025 by rpki-client