Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/OTbQr9-Xi9fHkHrGRopPTd_xI80.roa
File: OTbQr9-Xi9fHkHrGRopPTd_xI80.roa (raw, json)
Hash identifier: +2XWPePtsUo6YnT7qdfX7vyEqMX5yfuimmgeKoPsL9c=
Subject key identifier: 39:36:D0:AF:DF:97:8B:D7:C7:90:7A:C6:46:8A:4F:4D:DF:F1:23:CD
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01856F2FEF4DD539B384D6BA13F86C5818C1
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/OTbQr9-Xi9fHkHrGRopPTd_xI80.roa
Signing time: Sun 01 Jan 2023 21:14:50 +0000
ROA not before: Sun 01 Jan 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38981
IP address blocks: 87.237.109.0/24 maxlen: 24
87.237.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:ef:4d:d5:39:b3:84:d6:ba:13:f8:6c:58:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 1 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3936d0afdf978bd7c7907ac6468a4f4ddff123cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:2f:8a:ed:95:72:e7:8f:1c:50:35:a4:17:
55:b8:24:01:e0:29:c2:f5:48:a6:ab:94:26:6c:f9:
0d:8b:54:91:00:27:fc:7c:ea:d0:05:3a:de:09:d2:
95:a3:c4:86:78:8f:55:2f:0a:01:38:7f:b3:af:fa:
30:01:53:f7:17:a4:9b:47:e2:c2:3b:0f:68:d1:96:
cd:bd:44:b9:27:ab:e3:62:47:a0:89:da:e4:d6:a7:
fc:ab:c2:cd:77:36:21:f0:25:44:73:e3:34:79:57:
19:0a:3a:b2:a3:30:4d:4b:79:d1:df:01:f1:56:8e:
c0:f9:2b:1f:8d:80:50:3c:b0:b9:db:ab:da:9a:07:
75:61:e4:fe:12:ad:9b:67:24:5e:3e:4b:bb:aa:6b:
1d:cf:f5:71:fc:1b:59:13:59:53:11:f8:50:cb:d0:
a4:32:c3:30:ee:86:6a:cc:b8:f2:5e:4d:7d:e8:06:
8a:b1:12:a3:16:86:3a:c3:d6:32:e4:a5:05:9a:fd:
aa:d6:b1:71:5c:83:f3:e3:f8:83:ec:32:8a:5e:5f:
76:ea:ce:a5:bd:ba:d6:24:d8:b2:f7:65:21:28:36:
06:cc:28:f1:9d:23:1f:2b:13:76:43:9d:6c:5f:f1:
67:25:8e:79:5a:7a:a4:87:e6:45:ed:4a:6f:ee:4b:
55:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:D0:AF:DF:97:8B:D7:C7:90:7A:C6:46:8A:4F:4D:DF:F1:23:CD
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/OTbQr9-Xi9fHkHrGRopPTd_xI80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.108.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:6e:ce:76:e0:80:c9:f9:b9:af:4c:fa:52:b0:75:d4:e7:84:
f0:b0:90:47:a1:c9:1f:ed:a6:fa:a1:c1:5a:5b:10:89:6d:dd:
58:6e:df:ba:85:3b:80:b0:5b:41:fe:cd:2f:1f:d7:2d:9e:4f:
af:0a:f5:84:aa:97:66:5b:aa:00:a0:6e:51:26:16:76:78:42:
75:97:65:30:d5:79:89:75:75:97:4a:ab:1c:51:36:55:79:cf:
ef:bf:c6:98:d3:42:dc:dd:33:8c:47:26:dd:1b:af:28:c1:c4:
0f:f2:61:2b:27:8f:47:2d:cb:a6:2e:6b:45:26:5a:d9:d9:af:
98:41:96:ea:ce:39:93:61:79:e9:8c:71:ed:d7:d3:de:1e:8e:
ac:b9:da:e0:37:fe:8a:c8:f5:4e:4a:1d:d6:9a:9e:3e:89:37:
a9:ae:fa:c5:82:5b:43:86:53:7c:93:3b:03:c9:be:fb:9e:bc:
1b:2d:6f:bf:d3:cc:5d:a2:48:6f:20:54:4f:a6:e0:a1:b3:dd:
12:99:8b:1e:a6:7f:a0:41:2a:8a:d9:30:ae:f8:18:ac:fc:fb:
66:aa:a2:a1:59:b6:38:4c:fd:37:1e:b5:32:b0:92:26:72:18:
18:00:f5:56:ea:55:d5:3f:b3:ae:97:49:d0:2e:1c:5a:ba:c8:
2f:d3:73:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:46 2025 by rpki-client