Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/BbBI4_13OwkWdnQ_5Os6s6oUzFI.roa
File: BbBI4_13OwkWdnQ_5Os6s6oUzFI.roa (raw, json)
Hash identifier: Rggd2N4LlNQRVFyuX/KTZNfyg8bPNuOzKRtBIXPC94c=
Subject key identifier: 05:B0:48:E3:FD:77:3B:09:16:76:74:3F:E4:EB:3A:B3:AA:14:CC:52
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 01889F6F50620799B1F32AECBCCD370229A4
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/BbBI4_13OwkWdnQ_5Os6s6oUzFI.roa
Signing time: Fri 09 Jun 2023 09:14:12 +0000
ROA not before: Fri 09 Jun 2023 09:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41172
IP address blocks: 5.153.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:6f:50:62:07:99:b1:f3:2a:ec:bc:cd:37:02:29:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jun 9 09:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05b048e3fd773b091676743fe4eb3ab3aa14cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:57:06:8b:e1:64:86:19:90:18:e7:c3:7d:
cd:fd:0d:92:bc:1d:2c:39:d4:5b:9a:f6:55:69:ad:
cd:8d:33:bb:8c:4a:a0:f4:43:dc:6d:30:c5:13:1b:
1b:0a:31:cd:a4:ab:fb:1f:32:f3:b5:63:b1:43:d9:
17:4c:9c:c6:2e:3f:7b:55:70:0d:7d:47:24:25:76:
27:0f:4d:a7:00:9c:03:b8:4b:b7:e1:c3:bc:90:75:
14:98:1b:6d:d6:47:9a:98:cb:4c:cc:3c:46:44:34:
c7:0f:a5:6f:70:87:04:65:8f:69:4c:c1:61:e9:73:
c3:82:28:cb:e1:6f:5d:ea:3a:28:e5:9d:c6:8a:0e:
b6:2b:60:4b:5b:48:03:d6:7f:b1:7c:04:2a:13:ae:
8e:da:37:ba:d7:4a:03:86:0a:ea:11:53:81:a8:3a:
15:f0:19:da:b2:3e:74:5b:3e:70:e2:a0:75:e9:f3:
3b:b4:c6:28:e4:56:1d:39:38:67:d6:9a:1f:a8:79:
6f:0e:9a:d7:d4:24:d1:79:4b:23:cd:e5:ea:9e:9f:
4d:14:7d:7b:55:34:6e:40:f6:74:bc:56:c6:7b:0f:
54:24:51:03:d1:44:03:56:a2:d5:2c:ff:8e:0b:1d:
90:fe:2c:63:db:64:ea:1c:4d:20:68:b6:53:98:1d:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:48:E3:FD:77:3B:09:16:76:74:3F:E4:EB:3A:B3:AA:14:CC:52
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/BbBI4_13OwkWdnQ_5Os6s6oUzFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.184.0/24
Signature Algorithm: sha256WithRSAEncryption
25:62:43:94:5e:03:3f:7c:57:29:9b:3c:2d:57:90:46:e8:e3:
80:ed:b9:a1:a7:d6:29:36:d4:33:65:71:06:63:8a:09:90:98:
7b:8f:63:af:1a:cf:83:41:26:bf:b8:5e:63:fa:a5:c7:4e:5f:
14:88:1f:97:7f:9c:7e:a0:3c:32:a3:da:65:b7:b2:af:54:9a:
11:82:88:b0:89:df:db:43:9d:29:65:34:57:3a:98:2b:87:b7:
5d:15:e5:b3:af:3f:80:3b:20:b5:d1:1c:ed:3b:ea:da:38:5c:
3e:87:15:0e:4e:b0:c3:01:ec:5b:81:46:2d:17:81:d2:9a:27:
48:9f:d3:bf:ee:9d:08:59:bd:eb:fb:6c:54:ec:02:c7:65:04:
96:41:a9:b6:64:1f:d8:ea:13:7d:8a:ea:4c:fd:0d:36:f9:38:
d1:27:f2:aa:67:35:0f:1e:b6:1c:49:81:ee:a8:6d:21:1d:0b:
8f:98:f0:45:b2:52:ea:41:bc:7c:eb:b8:af:1f:d4:84:6b:54:
47:14:b4:c4:87:90:23:36:61:ea:2d:16:9d:db:61:ce:56:94:
76:73:14:57:a6:60:7f:4c:b4:ec:8e:7a:bb:de:fb:48:bb:07:
3e:a3:68:d7:97:73:f6:a3:72:ab:fc:e0:cf:8d:26:2c:9d:97:
83:2a:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:45:49 2025 by rpki-client