Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/Lzz-_Hm_Fjv3gsqb1Dei7cylkII.roa
File: Lzz-_Hm_Fjv3gsqb1Dei7cylkII.roa (raw, json)
Hash identifier: jCmW8oAQHoj6phzUWZIdY1/ko2OPk6iBJCF2EQiiV/Q=
Subject key identifier: 2F:3C:FE:FC:79:BF:16:3B:F7:82:CA:9B:D4:37:A2:ED:CC:A5:90:82
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01881FD0CB4104C22DC767B6338CDC897FA3
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/Lzz-_Hm_Fjv3gsqb1Dei7cylkII.roa
Signing time: Mon 15 May 2023 14:29:17 +0000
ROA not before: Mon 15 May 2023 14:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206814
IP address blocks: 77.247.197.0/24 maxlen: 24
2a12:b540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:d0:cb:41:04:c2:2d:c7:67:b6:33:8c:dc:89:7f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: May 15 14:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f3cfefc79bf163bf782ca9bd437a2edcca59082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:97:89:44:9c:94:18:32:86:b1:6e:f9:f9:
f5:c9:9e:03:41:cb:11:15:22:b2:01:67:ad:25:28:
02:af:01:2f:10:6d:16:bd:a0:6f:aa:46:49:71:47:
26:c7:69:c7:6b:b1:65:d2:c8:ec:1e:6d:72:a9:5a:
6b:ed:f6:74:49:f2:4f:2f:4f:31:a9:60:89:7c:52:
47:fe:e8:d3:c5:4c:a1:65:45:e6:5a:5a:f5:46:6b:
cf:b4:23:4a:3e:a4:a9:df:7f:ca:31:ae:f5:3f:98:
20:44:66:e3:9a:ba:7f:32:39:f1:ac:78:b3:fe:99:
9a:e3:f4:a2:3f:21:f0:ab:7c:8c:a4:e7:9c:3a:9e:
70:e8:58:5c:1f:fb:bd:aa:97:58:b4:28:87:01:65:
74:e6:6f:2c:51:56:23:b7:e4:ba:8a:8f:14:ad:96:
54:0f:61:ad:34:b4:3d:f5:f1:5a:29:a8:ca:2f:ea:
73:0a:56:13:7e:1d:0f:2c:96:7d:f1:97:c7:74:e1:
15:d9:9b:1a:27:34:08:98:fe:2f:07:69:f4:33:f3:
5b:ee:9a:70:e5:05:c3:ab:f7:12:51:49:4d:c4:2a:
a8:67:cb:6a:2f:30:80:cc:be:5f:2b:ca:98:f1:80:
6a:0f:12:40:13:55:35:a5:99:97:d4:01:b3:31:ef:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:FE:FC:79:BF:16:3B:F7:82:CA:9B:D4:37:A2:ED:CC:A5:90:82
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/Lzz-_Hm_Fjv3gsqb1Dei7cylkII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.197.0/24
IPv6:
2a12:b540::/29
Signature Algorithm: sha256WithRSAEncryption
2b:21:eb:4a:f6:83:cd:64:66:c7:ae:b7:5d:cc:6f:26:04:d0:
29:25:2a:29:06:33:75:1f:9e:68:9b:a5:47:c9:3e:00:d3:4b:
04:60:75:7e:76:f8:2b:13:48:82:1d:0f:68:39:f2:78:6f:7a:
3d:3f:16:33:53:78:30:ea:90:d4:6b:26:e6:34:ef:bd:14:1c:
3c:bb:ff:12:66:7f:cf:2f:45:79:b5:3d:81:ac:c2:6c:78:e0:
c5:51:8a:6c:a6:c8:7e:73:84:4b:a8:41:26:9e:82:c5:75:f2:
4d:c8:dd:09:13:29:dc:1f:7f:0c:c0:04:71:68:37:c7:22:b1:
fe:1a:63:ce:e3:3e:7c:3c:74:47:9f:a1:6b:83:a8:5e:b8:62:
84:9f:e4:31:f5:7b:9d:30:61:2e:47:d6:79:f2:88:cb:f0:71:
a2:01:0f:8c:d4:9e:e9:70:85:51:0c:59:44:55:93:b8:32:f3:
1b:24:4a:b3:09:3c:65:d0:71:05:23:b7:2a:1e:88:18:34:d9:
b3:19:a8:42:c3:e1:4e:a8:26:12:92:91:ba:1e:f9:e2:5a:ad:
2f:2d:3b:31:12:e1:86:e3:0e:23:b9:80:bb:f7:e7:e3:e4:3c:
d9:4a:e7:d6:b0:10:0e:6b:7a:b1:b4:e8:df:0a:43:99:03:0c:
0e:42:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:21 2025 by rpki-client