Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/goGnCD48_a1X32VnXYe-IwYulXU.roa
File: goGnCD48_a1X32VnXYe-IwYulXU.roa (raw, json)
Hash identifier: XeLfhtHDy8cMJKUP9zsQlWBqH2DjGr3hiMuz36X9jGs=
Subject key identifier: 82:81:A7:08:3E:3C:FD:AD:57:DF:65:67:5D:87:BE:23:06:2E:95:75
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018AB87606D5A9CB64BF608BC5652D5D912C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/goGnCD48_a1X32VnXYe-IwYulXU.roa
Signing time: Thu 21 Sep 2023 15:57:37 +0000
ROA not before: Thu 21 Sep 2023 15:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209828
IP address blocks: 45.147.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:76:06:d5:a9:cb:64:bf:60:8b:c5:65:2d:5d:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 21 15:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8281a7083e3cfdad57df65675d87be23062e9575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:7c:21:be:4a:1a:41:f1:08:5f:a6:90:b2:
d8:a2:3a:03:fe:be:5b:54:0f:58:ca:02:6f:f7:66:
53:d0:d7:8d:1f:37:11:7c:f4:9c:0e:8e:1c:bb:4a:
e6:89:1d:ee:a9:26:41:5a:94:65:8d:bf:b6:9d:62:
2b:f2:48:35:cd:6c:52:83:95:44:03:e0:50:e5:b7:
8e:8e:7c:5f:9e:3c:6a:6a:8f:37:cf:6e:27:23:78:
ea:c5:55:28:62:a9:23:9e:8e:76:2b:0f:21:a4:f1:
30:7b:e7:14:97:86:17:4b:d1:4d:c8:a3:ef:cd:2a:
ed:9e:c3:b5:2c:63:b2:d8:42:d4:18:b2:97:f6:bd:
52:39:29:11:98:8c:d8:ce:c9:9a:65:4a:21:30:c7:
2d:1e:40:ec:b8:46:fa:49:19:de:1c:78:c5:2a:be:
7c:05:79:34:c3:df:5d:e9:f6:8d:05:63:09:80:c5:
05:6d:27:f4:5c:d9:c6:9e:9c:50:60:18:2a:f8:c7:
45:5a:81:5f:35:e4:81:38:be:95:8a:10:40:bb:3c:
3e:1d:9b:e0:1e:50:99:6f:20:07:15:04:47:2f:68:
83:1e:46:40:96:65:74:5c:27:05:92:c0:f6:80:27:
23:5f:c2:1d:18:43:33:63:2c:54:3a:08:b0:8e:ce:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:81:A7:08:3E:3C:FD:AD:57:DF:65:67:5D:87:BE:23:06:2E:95:75
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/goGnCD48_a1X32VnXYe-IwYulXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.47.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ff:c9:21:31:97:83:8d:f4:ac:fb:44:2c:35:42:5b:f5:cc:
76:51:4f:cb:0a:7e:43:f5:05:51:b3:0a:32:ee:f1:c2:9a:ec:
94:f4:53:fb:81:dc:1c:bb:03:f4:79:af:1d:a0:25:8f:98:2c:
0b:03:d4:4f:54:87:3b:a9:80:8a:8c:28:4e:17:23:da:f3:95:
12:4f:22:4b:1c:09:14:d9:9f:be:0c:2e:43:f1:5e:05:73:f7:
a2:9e:17:c2:39:ac:59:6b:3f:45:87:43:40:7a:b2:48:ca:b8:
97:0b:87:43:d6:71:8c:10:92:7c:1b:2f:b3:91:c6:9a:7b:46:
0f:20:6a:bf:5b:1e:e7:2a:2f:28:a8:39:bc:70:8b:22:e2:16:
98:d6:8a:96:92:a5:c3:fd:b9:8b:52:8d:ba:e6:22:bd:d4:f1:
06:bc:7e:3c:59:39:72:36:89:2d:2d:06:5c:3b:a1:8b:29:cc:
75:fa:6f:87:0a:bc:05:ba:6e:9e:13:25:53:b8:90:d2:73:37:
fa:3b:d3:7d:8a:30:f6:8f:6e:8b:4f:56:91:50:53:06:60:fa:
4a:15:85:31:ce:5e:33:88:2b:e3:f8:fc:30:5a:44:0b:8c:02:
c1:07:9a:d5:10:42:ed:81:54:d0:f0:a8:c5:96:21:bd:c3:39:
04:a6:04:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYq4dgbVqctkv2CLxWUtXZEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwOTIxMTU1NzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjgxYTcwODNlM2NmZGFkNTdkZjY1Njc1ZDg3YmUyMzA2MmU5NTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlp8Ib5KGkHxCF+mkLLYojoD/r5b
VA9YygJv92ZT0NeNHzcRfPScDo4cu0rmiR3uqSZBWpRljb+2nWIr8kg1zWxSg5VE
A+BQ5beOjnxfnjxqao83z24nI3jqxVUoYqkjno52Kw8hpPEwe+cUl4YXS9FNyKPv
zSrtnsO1LGOy2ELUGLKX9r1SOSkRmIzYzsmaZUohMMctHkDsuEb6SRneHHjFKr58
BXk0w99d6faNBWMJgMUFbSf0XNnGnpxQYBgq+MdFWoFfNeSBOL6VihBAuzw+HZvg
HlCZbyAHFQRHL2iDHkZAlmV0XCcFksD2gCcjX8IdGEMzYyxUOgiwjs5RkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIKBpwg+PP2tV99lZ12HviMGLpV1MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvZ29HbkNENDhfYTFYMzJWblhZZS1Jd1l1bFhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZMvMA0G
CSqGSIb3DQEBCwUAA4IBAQBY/8khMZeDjfSs+0QsNUJb9cx2UU/LCn5D9QVRswoy
7vHCmuyU9FP7gdwcuwP0ea8doCWPmCwLA9RPVIc7qYCKjChOFyPa85USTyJLHAkU
2Z++DC5D8V4Fc/einhfCOaxZaz9Fh0NAerJIyriXC4dD1nGMEJJ8Gy+zkcaae0YP
IGq/Wx7nKi8oqDm8cIsi4haY1oqWkqXD/bmLUo265iK91PEGvH48WTlyNoktLQZc
O6GLKcx1+m+HCrwFum6eEyVTuJDSczf6O9N9ijD2j26LT1aRUFMGYPpKFYUxzl4z
iCvj+PwwWkQLjALBB5rVEELtgVTQ8KjFliG9wzkEpgSK
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:55 2025 by rpki-client