Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/zEQT2osYVB4ZjwBLqCAxFQEnKzU.roa
File: zEQT2osYVB4ZjwBLqCAxFQEnKzU.roa (raw, json)
Hash identifier: QkB3Wi2Ng8VHtKWP9oppXNqHstmQ0yZztAmUeIWC2/Y=
Subject key identifier: CC:44:13:DA:8B:18:54:1E:19:8F:00:4B:A8:20:31:15:01:27:2B:35
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01857315F0E40ED7867929C739EE6598EB70
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/zEQT2osYVB4ZjwBLqCAxFQEnKzU.roa
Signing time: Mon 02 Jan 2023 15:24:55 +0000
ROA not before: Mon 02 Jan 2023 15:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25206
IP address blocks: 89.252.216.0/24 maxlen: 24
89.252.216.0/22 maxlen: 22
89.252.217.0/24 maxlen: 24
89.252.219.0/24 maxlen: 24
89.252.218.0/24 maxlen: 24
89.252.233.0/24 maxlen: 24
89.252.232.0/22 maxlen: 22
89.252.232.0/21 maxlen: 21
89.252.232.0/24 maxlen: 24
89.252.235.0/24 maxlen: 24
89.252.234.0/24 maxlen: 24
89.252.237.0/24 maxlen: 24
89.252.236.0/24 maxlen: 24
89.252.238.0/24 maxlen: 24
89.252.239.0/24 maxlen: 24
89.252.248.0/22 maxlen: 22
89.252.249.0/24 maxlen: 24
89.252.248.0/24 maxlen: 24
89.252.250.0/24 maxlen: 24
89.252.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f0:e4:0e:d7:86:79:29:c7:39:ee:65:98:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 15:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4413da8b18541e198f004ba820311501272b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:79:17:fb:c8:6e:89:06:ac:d0:67:12:d5:
6e:37:73:e1:1d:89:cf:2e:a0:71:ff:be:dd:27:73:
91:71:a2:e6:4a:06:2e:99:55:45:a8:0d:b9:72:45:
d1:9b:5e:5b:e0:39:f1:4e:e1:d4:ea:6c:60:65:81:
67:eb:b5:87:19:91:7c:13:dc:83:ca:14:ca:44:bf:
6f:66:c6:64:8d:e1:5c:4e:d4:28:04:82:41:99:24:
01:43:49:34:8e:c5:3f:73:0d:1c:d8:fb:7c:97:fd:
f7:74:18:7b:ce:0a:0d:20:ca:d7:5d:0c:f2:f5:0b:
ee:63:86:32:03:d1:08:6c:be:d0:24:82:52:2c:36:
68:98:aa:0a:dd:6f:53:eb:60:92:3f:5f:04:c3:96:
1d:0f:0e:94:91:57:0c:35:9c:d1:b4:44:f0:7c:e2:
f1:42:b7:b8:aa:ca:9b:36:49:e4:82:e8:c1:2b:a0:
94:a9:e2:47:74:00:da:c6:1a:29:e3:8c:92:2d:4f:
19:72:60:9c:0e:68:ef:ea:60:e6:da:ed:7c:47:12:
ec:2c:0d:8d:19:1e:93:66:eb:9a:95:d7:3e:aa:00:
2c:8e:a7:58:ce:47:0e:e1:1d:d2:b0:72:aa:d4:dc:
5c:d3:cc:e1:c3:d8:a5:07:7d:d9:de:97:ab:87:20:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:44:13:DA:8B:18:54:1E:19:8F:00:4B:A8:20:31:15:01:27:2B:35
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/zEQT2osYVB4ZjwBLqCAxFQEnKzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.216.0/22
89.252.232.0/21
89.252.248.0/22
Signature Algorithm: sha256WithRSAEncryption
68:9c:0c:3c:72:96:db:f9:ff:15:13:b9:2d:6d:96:4f:89:78:
4b:c2:32:71:21:8e:a1:4e:c1:7b:0c:79:6d:ff:39:9f:c0:7d:
6e:72:f5:a2:19:70:d8:15:65:26:bc:57:43:f3:b0:87:31:0b:
da:2a:c9:7b:29:0f:bd:9b:5e:d6:0a:10:47:4a:e1:02:e4:10:
62:72:75:40:97:b2:4a:de:19:00:7a:8b:4a:22:dc:1d:f8:64:
ba:f7:14:31:ea:4a:2d:27:74:0a:08:d9:82:06:bf:58:c9:fc:
31:92:98:af:66:62:d2:44:74:6f:bd:25:a9:4f:19:f0:6b:a4:
d8:5a:3c:db:56:d3:fb:9d:30:32:47:36:02:1c:a9:7b:98:9d:
69:96:c1:2a:e5:60:50:81:1c:9b:3b:c1:e7:d5:12:40:07:73:
66:4d:60:22:8f:d8:09:b5:7c:b8:c0:16:29:5f:66:8c:d4:9e:
27:3e:8b:26:6e:e2:45:f2:f6:75:98:9a:39:39:59:4e:87:4d:
30:bd:43:3f:44:24:82:7b:25:dd:fe:3e:f3:32:f7:1a:18:a7:
0e:cb:56:8a:1b:86:72:e0:e6:07:0b:91:4c:4b:4e:80:c2:78:
f9:98:92:31:69:7e:ab:c5:38:af:01:79:65:04:ce:df:7c:e5:
2a:f5:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:54 2025 by rpki-client