Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/gwo_QfmendCr3sRS59-5wQ7xxz0.roa
File: gwo_QfmendCr3sRS59-5wQ7xxz0.roa (raw, json)
Hash identifier: sQwI0Mfk2JXqrTBd/PLpAMhtACPe9J9rODKjIL5sMME=
Subject key identifier: 83:0A:3F:41:F9:9E:9D:D0:AB:DE:C4:52:E7:DF:B9:C1:0E:F1:C7:3D
Certificate issuer: /CN=56978809c50f0141c2591549ba0727fdf60b1850
Certificate serial: 668FE2
Authority key identifier: 56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/gwo_QfmendCr3sRS59-5wQ7xxz0.roa
Signing time: Sat 01 Jan 2022 00:52:50 +0000
ROA not before: Sat 01 Jan 2022 00:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212552
IP address blocks: 146.19.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6721506 (0x668fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56978809c50f0141c2591549ba0727fdf60b1850
Validity
Not Before: Jan 1 00:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=830a3f41f99e9dd0abdec452e7dfb9c10ef1c73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:29:b6:fe:4a:20:17:ea:33:e3:c3:ca:21:
69:88:ba:bf:c5:ad:25:53:17:c7:77:09:1e:33:7f:
1f:e5:3a:03:8f:8d:01:ef:a6:78:31:fb:90:c6:cb:
c1:79:be:be:4e:64:5c:ad:3a:c3:6b:57:4a:b9:c9:
e9:66:5b:b0:3a:ce:2a:9e:cd:1b:bf:64:b8:c9:f9:
d2:8e:c9:4b:f0:a2:0b:53:2b:e4:a7:9e:a2:19:df:
95:49:07:e3:b0:ed:4d:97:ec:3f:42:54:9a:65:18:
d4:80:8d:ce:50:2f:18:b0:54:bb:f9:f8:31:71:09:
fb:9a:d5:3a:92:c7:a6:3d:b8:b5:1b:d5:5c:a7:7b:
80:c6:86:20:3d:47:05:dc:62:6a:b4:62:52:7e:fb:
1a:0b:7a:57:0e:2d:f0:52:f0:7f:fe:09:2c:19:b1:
17:90:0e:17:ef:ea:11:24:f7:a4:68:08:e5:f2:8e:
b3:5c:17:8f:d5:ce:0a:f8:3d:6e:4c:50:b6:22:91:
f9:63:7c:b6:9a:a2:3c:45:44:14:17:ae:1e:16:99:
01:05:5c:18:52:36:d0:43:f5:7d:70:6b:65:43:6e:
e9:b3:6b:84:58:15:d6:72:97:aa:22:25:bb:ed:7f:
fb:60:84:72:e8:df:8b:a7:25:87:23:1a:e8:30:f0:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:3F:41:F9:9E:9D:D0:AB:DE:C4:52:E7:DF:B9:C1:0E:F1:C7:3D
X509v3 Authority Key Identifier:
keyid:56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/gwo_QfmendCr3sRS59-5wQ7xxz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/VpeICcUPAUHCWRVJugcn_fYLGFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.130.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c3:79:48:e0:17:d8:6a:30:a0:51:57:13:92:a4:d3:9e:ca:
61:ad:99:9d:4e:09:d2:b8:c9:57:db:65:18:b7:7d:75:42:04:
b4:33:bf:37:a4:ec:26:13:07:ec:a7:06:e1:ea:8f:4e:a5:ab:
5d:c7:ed:0e:56:3b:f9:87:f0:1d:43:97:21:10:3c:85:6a:44:
ab:32:16:26:43:d2:02:c2:05:1e:57:48:15:20:f8:4e:5a:93:
28:43:37:13:c2:ef:ff:e1:10:2a:32:a5:e0:6f:42:02:3b:03:
8f:20:09:18:b1:15:34:12:24:73:27:cb:a5:bd:c6:b8:97:d9:
78:aa:47:83:a7:d0:35:87:7b:3a:f6:ae:49:56:4a:cd:30:6e:
69:8b:2a:9d:63:a2:3c:37:09:f5:f8:57:8d:c4:86:a5:fd:8f:
1a:54:d5:c3:10:59:c0:1c:7b:8c:e2:37:2d:6a:bf:ad:f1:52:
e5:d2:30:b2:94:9b:4a:d3:a4:48:56:c2:ff:47:15:66:79:20:
1d:55:5e:90:49:11:da:f3:d5:85:cc:52:27:c1:09:b9:69:8f:
ff:a2:85:dc:eb:8a:5b:20:a2:a0:98:b4:36:bc:44:80:94:24:
dc:73:c8:60:74:b4:ac:fa:f4:cc:08:2b:50:f0:84:3a:01:8b:
97:6d:37:9d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDZo/iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU2
OTc4ODA5YzUwZjAxNDFjMjU5MTU0OWJhMDcyN2ZkZjYwYjE4NTAwHhcNMjIwMTAx
MDA1MjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MzBhM2Y0MWY5OWU5
ZGQwYWJkZWM0NTJlN2RmYjljMTBlZjFjNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApb8ptv5KIBfqM+PDyiFpiLq/xa0lUxfHdwkeM38f5ToDj40B
76Z4MfuQxsvBeb6+TmRcrTrDa1dKucnpZluwOs4qns0bv2S4yfnSjslL8KILUyvk
p56iGd+VSQfjsO1Nl+w/QlSaZRjUgI3OUC8YsFS7+fgxcQn7mtU6ksemPbi1G9Vc
p3uAxoYgPUcF3GJqtGJSfvsaC3pXDi3wUvB//gksGbEXkA4X7+oRJPekaAjl8o6z
XBeP1c4K+D1uTFC2IpH5Y3y2mqI8RUQUF64eFpkBBVwYUjbQQ/V9cGtlQ27ps2uE
WBXWcpeqIiW77X/7YIRy6N+LpyWHIxroMPBPjQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIMKP0H5np3Qq97EUuffucEO8cc9MB8GA1UdIwQYMBaAFFaXiAnFDwFBwlkV
SboHJ/32CxhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
VnBlSUNjVVBBVUhDV1JWSnVnY25fZllMR0ZBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85MS85MTQ3NDktOGMwMi00NjYwLWE4NzEtMDE3ODIyN2UwOWMyLzEv
Z3dvX1FmbWVuZENyM3NSUzU5LTV3UTd4eHowLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85
MTQ3NDktOGMwMi00NjYwLWE4NzEtMDE3ODIyN2UwOWMyLzEvVnBlSUNjVVBBVUhD
V1JWSnVnY25fZllMR0ZBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOCMA0GCSqGSIb3DQEBCwUAA4IB
AQAHw3lI4BfYajCgUVcTkqTTnsphrZmdTgnSuMlX22UYt311QgS0M783pOwmEwfs
pwbh6o9Opatdx+0OVjv5h/AdQ5chEDyFakSrMhYmQ9ICwgUeV0gVIPhOWpMoQzcT
wu//4RAqMqXgb0ICOwOPIAkYsRU0EiRzJ8ulvca4l9l4qkeDp9A1h3s69q5JVkrN
MG5piyqdY6I8Nwn1+FeNxIal/Y8aVNXDEFnAHHuM4jctar+t8VLl0jCylJtK06RI
VsL/RxVmeSAdVV6QSRHa89WFzFInwQm5aY//ooXc64pbIKKgmLQ2vESAlCTcc8hg
dLSs+vTMCCtQ8IQ6AYuXbTed
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:59 2024 by rpki-client on console-ams.rpki-client.org