Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gwd-iELoYWA3bO7m0SIH_E-pDx8.roa
File: gwd-iELoYWA3bO7m0SIH_E-pDx8.roa (raw, json)
Hash identifier: 4dVNP8F2UR/SXZMhx/jkCTs+8dokzbc9Ci397LoVSIM=
Subject key identifier: 83:07:7E:88:42:E8:61:60:37:6C:EE:E6:D1:22:07:FC:4F:A9:0F:1F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08766562
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gwd-iELoYWA3bO7m0SIH_E-pDx8.roa
Signing time: Wed 06 Apr 2022 15:32:35 +0000
ROA not before: Wed 06 Apr 2022 15:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 77.90.190.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141976930 (0x8766562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 6 15:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83077e8842e86160376ceee6d12207fc4fa90f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:a4:bb:4d:eb:b9:66:84:32:6e:80:ad:75:
ae:f2:69:42:9d:8c:b3:a8:72:a7:2f:fc:96:8a:e3:
6d:2a:e3:0e:d3:b5:e3:c7:01:8a:41:c7:9c:43:46:
a1:e6:4c:4b:b8:35:95:b7:68:41:04:fd:6a:ad:62:
87:99:52:89:b2:02:4c:87:ee:bc:02:1e:5b:31:71:
ac:69:db:94:25:d6:2a:8e:91:3d:52:73:7e:c0:5b:
82:e8:6e:c0:1b:51:60:8a:52:45:76:e5:8c:4a:f9:
31:dc:21:05:78:54:e1:28:66:10:20:df:05:5d:79:
c3:6e:ea:52:e3:8e:8b:fd:46:7b:02:b9:68:8c:29:
b7:55:81:48:fc:b3:ab:e7:35:de:ec:ad:0c:88:d3:
e9:ae:ef:89:e6:45:b9:07:db:03:df:55:09:47:08:
89:ac:03:54:3d:7b:66:b1:75:c4:de:1a:f6:d4:aa:
fc:de:17:92:8f:b7:c0:6e:84:73:f6:99:cc:72:69:
ce:59:62:db:e7:0d:5f:75:ab:aa:5b:79:8b:c8:c7:
2c:6b:ba:3d:1e:72:a1:c2:7d:80:36:c9:ac:30:16:
b4:3b:df:21:41:73:9d:c5:ed:9d:1b:7c:2f:5f:16:
53:8e:c4:60:ba:4d:34:39:0d:c5:29:8e:15:21:ad:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:7E:88:42:E8:61:60:37:6C:EE:E6:D1:22:07:FC:4F:A9:0F:1F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gwd-iELoYWA3bO7m0SIH_E-pDx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.139.0/24
77.90.166.0/24
77.90.178.0/24
77.90.190.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0c:10:fa:a2:82:89:b1:99:a4:7e:70:2f:14:52:c5:11:a4:
7a:6c:33:38:1f:b3:a8:4f:14:23:90:36:0e:9e:ac:f2:20:51:
ab:01:b8:c2:7f:8a:94:df:ab:dd:b7:3a:54:07:00:2f:0f:3b:
59:70:ef:ab:62:b7:48:2a:fb:ea:38:1c:ae:1e:3e:be:59:d8:
11:98:4a:fd:6d:60:ff:f7:26:9c:d8:e0:03:1c:82:98:20:6d:
c0:7c:3f:d0:27:6a:32:8d:66:e2:19:7a:05:f3:c0:34:40:ee:
44:20:47:c7:41:a7:36:3a:5f:61:40:4e:44:48:57:5d:da:3f:
ee:77:ff:e9:82:4e:4a:51:fb:46:72:40:cf:9c:9b:21:97:92:
8a:8e:9f:4b:27:a7:9d:ba:a2:95:00:dd:1d:b4:a1:55:83:40:
15:a6:96:4e:0d:45:72:22:cc:c1:93:c9:a7:be:ca:9a:93:7f:
a3:03:97:e2:c7:db:e3:de:5f:78:43:0a:08:ea:d8:26:cb:a3:
00:25:a9:e0:1b:51:0c:d0:89:9d:d0:87:0c:c9:dc:f5:6a:6b:
22:b1:01:e9:84:db:47:ec:17:d6:34:25:c7:3d:75:4e:63:e8:
ab:ef:35:d7:76:d7:78:01:ab:7f:dc:b7:13:e9:ec:4b:03:69:
0c:e5:94:fc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIECHZlYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDQw
NjE1MzIzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODMwNzdlODg0MmU4
NjE2MDM3NmNlZWU2ZDEyMjA3ZmM0ZmE5MGYxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlcpLtN67lmhDJugK11rvJpQp2Ms6hypy/8lorjbSrjDtO1
48cBikHHnENGoeZMS7g1lbdoQQT9aq1ih5lSibICTIfuvAIeWzFxrGnblCXWKo6R
PVJzfsBbguhuwBtRYIpSRXbljEr5MdwhBXhU4ShmECDfBV15w27qUuOOi/1GewK5
aIwpt1WBSPyzq+c13uytDIjT6a7vieZFuQfbA99VCUcIiawDVD17ZrF1xN4a9tSq
/N4Xko+3wG6Ec/aZzHJpzlli2+cNX3Wrqlt5i8jHLGu6PR5yocJ9gDbJrDAWtDvf
IUFzncXtnRt8L18WU47EYLpNNDkNxSmOFSGtUykCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBSDB36IQuhhYDds7ubRIgf8T6kPHzAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L2d3ZC1pRUxvWVdBM2JPN20wU0lIX0UtcER4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAE1aiwMEAE1apgMEAE1asgMEAE1a
vgMEANXRnzANBgkqhkiG9w0BAQsFAAOCAQEASwwQ+qKCibGZpH5wLxRSxRGkemwz
OB+zqE8UI5A2Dp6s8iBRqwG4wn+KlN+r3bc6VAcALw87WXDvq2K3SCr76jgcrh4+
vlnYEZhK/W1g//cmnNjgAxyCmCBtwHw/0CdqMo1m4hl6BfPANEDuRCBHx0GnNjpf
YUBOREhXXdo/7nf/6YJOSlH7RnJAz5ybIZeSio6fSyennbqilQDdHbShVYNAFaaW
Tg1FciLMwZPJp77KmpN/owOX4sfb495feEMKCOrYJsujACWp4BtRDNCJndCHDMnc
9WprIrEB6YTbR+wX1jQlxz11TmPoq+8113bXeAGrf9y3E+nsSwNpDOWU/A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org