Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/plckDwXV4pyks0dW1MkTRrTyEp4.roa
File: plckDwXV4pyks0dW1MkTRrTyEp4.roa (raw, json)
Hash identifier: 2eSkFU1EgUhEkP4vZN8mKx029rUkiE1L4UlPRRNstaE=
Subject key identifier: A6:57:24:0F:05:D5:E2:9C:A4:B3:47:56:D4:C9:13:46:B4:F2:12:9E
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 0184C876D2D975C4E3490396D2645CBF7F42
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/plckDwXV4pyks0dW1MkTRrTyEp4.roa
Signing time: Wed 30 Nov 2022 12:15:41 +0000
ROA not before: Wed 30 Nov 2022 12:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202872
IP address blocks: 185.149.128.0/23 maxlen: 23
185.149.130.0/23 maxlen: 23
2a07:6880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:76:d2:d9:75:c4:e3:49:03:96:d2:64:5c:bf:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Nov 30 12:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a657240f05d5e29ca4b34756d4c91346b4f2129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:33:3f:2e:31:f4:2d:62:e0:df:e2:01:f3:6f:
03:8a:b0:27:b8:79:7a:53:bb:81:d6:aa:c7:5c:48:
d8:af:e8:1b:48:18:c5:c2:fa:1e:b3:9b:80:7d:ad:
39:c2:ad:08:fe:35:32:0f:c8:df:c8:41:aa:2a:9c:
b9:11:6c:55:c7:f4:1f:e6:b8:c1:82:c2:50:ac:e9:
0a:02:4e:7e:24:9f:ea:00:10:0d:b5:52:4a:9d:25:
92:b2:c6:54:8f:ce:b6:74:b9:6f:32:28:e4:b1:0c:
1f:77:76:05:83:43:71:bc:dd:a6:69:3e:29:ab:2a:
4c:b6:2c:ac:dd:93:ba:29:eb:be:8d:01:45:ee:c1:
0d:6a:e9:e8:02:40:b0:d8:cf:b3:db:93:e5:f6:b4:
1b:e0:fc:e2:eb:e7:f4:24:18:5d:dc:5c:c6:d5:76:
c9:4c:06:78:2f:85:59:05:f9:68:4f:0e:ba:7f:30:
2d:95:b8:48:b9:57:76:3a:66:77:af:01:cb:a5:2c:
56:9f:be:6a:da:8f:4b:01:f0:5c:10:b5:3b:59:ad:
03:58:28:06:74:10:84:d5:de:a1:a4:53:23:b9:31:
38:75:43:67:73:bd:d0:db:e8:7d:c3:39:1a:3d:64:
52:94:d5:16:e3:02:7b:45:0a:b1:3c:cd:59:c1:8b:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:24:0F:05:D5:E2:9C:A4:B3:47:56:D4:C9:13:46:B4:F2:12:9E
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/plckDwXV4pyks0dW1MkTRrTyEp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.128.0/22
IPv6:
2a07:6880::/32
Signature Algorithm: sha256WithRSAEncryption
51:43:ec:ea:2f:45:4a:ce:7d:f4:a1:20:d5:ad:75:77:df:9a:
6d:d1:aa:62:ee:90:af:da:23:68:5b:b1:aa:cd:d0:a8:8a:f7:
d1:b4:86:fa:f4:dd:07:30:7d:72:33:52:f5:0a:a9:83:6f:c7:
81:4c:b9:63:3b:de:c2:11:7b:67:f2:3a:6e:44:69:b2:31:bb:
ac:f7:94:25:c6:38:f6:e1:72:f6:ab:be:6a:13:b7:29:b0:6b:
cd:d4:48:4f:c9:bf:6c:0b:5f:5c:72:dd:83:82:1d:7e:ef:66:
84:06:35:ce:7c:c4:50:64:98:ea:d1:f7:6d:14:b5:cf:d6:e1:
dc:fd:80:38:c4:72:97:ef:c7:08:de:be:e8:aa:a1:f8:cf:71:
50:94:52:d3:c1:08:fc:c7:7f:25:61:27:62:ec:a5:51:d7:76:
94:ab:ac:22:94:7c:a4:c3:72:9a:de:bb:00:e4:f6:ee:38:5e:
84:29:23:1d:3a:e8:aa:45:1b:22:3e:ec:d2:8d:a2:86:89:da:
2f:b5:3c:ed:05:7f:37:11:69:07:55:b1:fa:8b:66:3f:ce:3f:
03:13:93:48:3b:1d:a6:7d:f6:4c:1e:c7:4b:ff:df:16:63:15:
73:0f:7e:58:10:30:7e:01:8b:41:a7:67:8a:c5:5b:90:a4:99:
02:d7:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org