Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/BPSElk4dhrcl9V3ulUulXgPlsIo.roa
File: BPSElk4dhrcl9V3ulUulXgPlsIo.roa (raw, json)
Hash identifier: Z7Jy/VTl8kJcAL1xMqblAlIGxITqSe9SG56+gc/d3yk=
Subject key identifier: 04:F4:84:96:4E:1D:86:B7:25:F5:5D:EE:95:4B:A5:5E:03:E5:B0:8A
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 01856ECBA8241589B7E2883122D602BF5FB1
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/BPSElk4dhrcl9V3ulUulXgPlsIo.roa
Signing time: Sun 01 Jan 2023 19:25:18 +0000
ROA not before: Sun 01 Jan 2023 19:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16292
IP address blocks: 5.63.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a8:24:15:89:b7:e2:88:31:22:d6:02:bf:5f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 1 19:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04f484964e1d86b725f55dee954ba55e03e5b08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:b4:71:18:26:3d:b6:36:64:18:74:df:e9:
e7:4d:b6:e3:a5:2b:cc:81:11:d2:6c:38:64:2d:bf:
4e:ad:14:0f:76:f7:fd:65:ba:f4:d3:ad:32:bd:f3:
6f:df:45:13:2b:f8:23:0c:48:0f:ec:bd:20:00:ad:
b8:19:8e:96:04:66:1a:c2:b6:d1:42:b2:52:67:3e:
27:36:02:48:ce:5e:97:08:5c:a8:1b:dd:ec:31:86:
90:03:fa:21:df:a4:a2:a9:f3:00:5e:9d:5c:d1:d6:
63:8d:3b:fd:d5:1d:58:69:2f:7e:b1:82:ba:84:6c:
34:d3:22:be:09:42:41:e4:34:58:70:14:23:bd:a1:
a5:a2:51:1c:40:49:ee:db:31:f5:da:9a:66:6d:5a:
21:70:8c:c2:4a:b4:28:68:c1:67:f2:54:1d:50:db:
53:36:a2:28:13:64:5d:9d:aa:16:b7:50:27:68:83:
91:3d:83:a8:79:85:92:0f:c7:d4:27:0e:a8:24:86:
51:f6:46:1f:e9:a2:b3:3d:6a:c8:b3:b3:71:72:a4:
a6:89:77:72:d6:98:73:0d:0d:69:c7:cf:77:9d:fc:
88:b2:97:4d:eb:aa:e8:e4:56:01:d0:79:44:9d:26:
2d:79:a9:b5:1c:1c:c2:6a:b7:15:0b:ba:f7:89:fa:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:84:96:4E:1D:86:B7:25:F5:5D:EE:95:4B:A5:5E:03:E5:B0:8A
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/BPSElk4dhrcl9V3ulUulXgPlsIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.15.0/24
Signature Algorithm: sha256WithRSAEncryption
66:76:8f:a2:0c:46:60:ce:26:28:89:b3:58:73:4e:70:30:df:
4b:20:1b:27:f9:c5:66:27:14:3c:8d:69:f7:f4:af:62:b7:03:
ec:aa:5a:9e:76:de:0b:5f:51:ef:0a:ea:fd:be:9f:dd:14:48:
13:89:c9:76:11:c4:7d:dd:32:e9:0e:c4:28:91:a7:34:3b:7d:
9e:a1:aa:79:2d:b0:78:f4:fa:9f:39:77:c5:80:ca:a7:62:48:
cb:4d:a3:74:fb:07:a2:5a:11:22:06:fb:e1:5b:3b:42:0a:59:
87:d8:11:7b:b7:a1:27:11:70:58:63:0a:99:a6:68:03:d5:22:
8f:e2:24:29:91:73:1e:a5:57:6a:f7:b3:2d:2c:39:2c:c7:45:
b1:b6:e3:ef:4b:6a:93:b2:68:e2:d3:bb:ff:c2:8a:d9:1e:6c:
16:04:93:35:43:c6:eb:d9:3b:d8:00:77:2f:ec:24:f4:6e:93:
4b:09:50:69:6e:22:a2:0b:7f:5a:4f:49:2e:a9:9e:8b:28:4d:
f2:28:fe:b6:28:c9:7d:54:32:33:af:b2:17:ec:88:b6:59:fb:
47:df:80:6f:5b:7b:cd:a3:1d:66:ab:41:34:dd:0b:c0:d1:75:
f4:9e:73:10:6d:2f:4f:ad:ef:02:ae:11:e4:a0:e7:5b:a7:d6:
be:43:21:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy6gkFYm34ogxItYCv1+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj
YTQzYzUwHhcNMjMwMTAxMTkyNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGY0ODQ5NjRlMWQ4NmI3MjVmNTVkZWU5NTRiYTU1ZTAzZTViMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUG0cRgmPbY2ZBh03+nnTbbjpSvM
gRHSbDhkLb9OrRQPdvf9Zbr0060yvfNv30UTK/gjDEgP7L0gAK24GY6WBGYawrbR
QrJSZz4nNgJIzl6XCFyoG93sMYaQA/oh36SiqfMAXp1c0dZjjTv91R1YaS9+sYK6
hGw00yK+CUJB5DRYcBQjvaGlolEcQEnu2zH12ppmbVohcIzCSrQoaMFn8lQdUNtT
NqIoE2RdnaoWt1AnaIORPYOoeYWSD8fUJw6oJIZR9kYf6aKzPWrIs7NxcqSmiXdy
1phzDQ1px893nfyIspdN66ro5FYB0HlEnSYteam1HBzCarcVC7r3ifoLwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAT0hJZOHYa3JfVd7pVLpV4D5bCKMB8GA1UdIwQY
MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt
YWNmYzNkMmMyNTIyLzEvQlBTRWxrNGRocmNsOVYzdWxVdWxYZ1Bsc0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy
LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT8PMA0G
CSqGSIb3DQEBCwUAA4IBAQBmdo+iDEZgziYoibNYc05wMN9LIBsn+cVmJxQ8jWn3
9K9itwPsqlqedt4LX1HvCur9vp/dFEgTicl2EcR93TLpDsQokac0O32eoap5LbB4
9PqfOXfFgMqnYkjLTaN0+weiWhEiBvvhWztCClmH2BF7t6EnEXBYYwqZpmgD1SKP
4iQpkXMepVdq97MtLDksx0WxtuPvS2qTsmji07v/worZHmwWBJM1Q8br2TvYAHcv
7CT0bpNLCVBpbiKiC39aT0kuqZ6LKE3yKP62KMl9VDIzr7IX7Ii2WftH34BvW3vN
ox1mq0E03QvA0XX0nnMQbS9Pre8CrhHkoOdbp9a+QyFi
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:58 2025 by rpki-client