Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/go8-eWI9GcsJIrTjaV6IZGmULK0.roa
File: go8-eWI9GcsJIrTjaV6IZGmULK0.roa (raw, json)
Hash identifier: Fh1Fr6rmFr/gE200jlvNYX0M21vNnWR/jW8pU7NHnmc=
Subject key identifier: 82:8F:3E:79:62:3D:19:CB:09:22:B4:E3:69:5E:88:64:69:94:2C:AD
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 092B54B1
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/go8-eWI9GcsJIrTjaV6IZGmULK0.roa
Signing time: Sat 01 Jan 2022 09:58:02 +0000
ROA not before: Sat 01 Jan 2022 09:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8859
IP address blocks: 194.77.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153834673 (0x92b54b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Jan 1 09:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=828f3e79623d19cb0922b4e3695e886469942cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:44:55:62:97:1d:26:d6:3e:2d:91:bf:e2:fd:
ee:2a:4c:fe:79:77:b1:56:d7:fa:16:0b:83:90:4d:
60:5e:66:cc:0a:65:c9:89:d4:3d:04:c6:68:4d:08:
ec:1c:4c:f8:eb:e2:21:2d:58:2f:6d:43:01:1e:8a:
16:6d:84:44:67:fd:39:4a:39:5c:78:24:4a:9c:75:
00:8d:a6:63:ec:48:0d:cc:ef:db:66:a3:74:3b:d0:
7c:a1:6e:38:30:f7:64:92:cb:fe:0c:e8:f6:5b:eb:
dd:f2:d2:51:7d:6c:0c:03:0f:13:e1:45:54:0f:fc:
70:c6:f2:41:7b:53:b4:d3:19:8e:f8:0a:32:83:0f:
6c:59:6a:09:15:79:f0:e5:fa:b2:52:01:5b:7b:02:
66:4c:e1:63:36:9e:d0:43:80:ce:93:a1:c4:d8:6a:
db:cb:a6:b4:02:69:aa:75:48:b2:2d:0a:cf:b6:bd:
26:ed:96:63:e3:31:2c:da:73:ea:6b:45:a4:a8:04:
f9:fb:de:4d:40:d6:18:9e:fc:94:da:12:7d:73:8a:
88:ee:95:04:ce:d9:e9:7a:37:c4:67:92:a9:1b:90:
26:3a:66:2f:9a:00:75:fc:c6:f5:09:09:28:bb:49:
40:0a:4d:bf:bc:8b:90:c4:37:e3:5d:c4:93:fc:a1:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:3E:79:62:3D:19:CB:09:22:B4:E3:69:5E:88:64:69:94:2C:AD
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/go8-eWI9GcsJIrTjaV6IZGmULK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:10:39:88:45:0c:6e:6c:9e:ea:9a:15:f2:a2:bb:bc:db:52:
de:89:a5:b7:ca:f1:1c:58:4d:af:a9:aa:7f:89:2d:b0:29:f1:
65:8a:cf:a0:00:99:66:aa:5f:4c:8d:be:bf:0d:3c:a9:28:99:
cc:b2:5a:bb:b5:c4:f7:6d:28:c8:b6:b6:ed:49:26:1f:df:cc:
5b:8c:cd:d5:8f:b9:07:56:d3:fc:28:a3:a0:b2:bc:a6:f2:48:
f0:d6:28:45:38:c7:2c:4a:21:6e:01:bf:ad:c6:af:40:bb:e5:
44:32:d9:0e:33:59:23:7c:42:37:54:ea:0d:13:f5:58:9c:3f:
d7:35:23:33:39:b4:e4:57:ee:1a:22:27:78:3f:2d:75:55:b0:
82:9f:9a:1a:d3:77:a0:12:a5:65:c5:99:72:f1:e6:64:83:73:
16:18:44:70:60:70:67:3c:ee:54:61:8d:94:8b:35:bb:a5:8e:
d9:ab:24:de:d1:d7:e9:17:9d:9a:7f:2c:61:13:f2:01:c6:72:
db:30:28:45:06:ff:8c:ca:c0:78:45:63:74:46:48:8f:fd:39:
99:ec:23:96:f8:d4:dd:47:a5:99:92:cd:1f:56:e3:6d:bc:3e:
64:39:8d:ea:e7:a5:8f:06:ed:58:42:f5:bf:eb:7a:e7:cb:07:
e8:60:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:50 2025 by rpki-client