Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/tz-ZBoO8BQjoGUtKpoLLmN7bxoc.roa
File: tz-ZBoO8BQjoGUtKpoLLmN7bxoc.roa (raw, json)
Hash identifier: +zgHkZdxSqfItsA0WQpCxA+dPbR1jWqVBRyfuviLZjU=
Subject key identifier: B7:3F:99:06:83:BC:05:08:E8:19:4B:4A:A6:82:CB:98:DE:DB:C6:87
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 08B2EAF5
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/tz-ZBoO8BQjoGUtKpoLLmN7bxoc.roa
Signing time: Sat 01 Jan 2022 16:02:06 +0000
ROA not before: Sat 01 Jan 2022 16:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56460
IP address blocks: 178.218.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145943285 (0x8b2eaf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jan 1 16:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b73f990683bc0508e8194b4aa682cb98dedbc687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:fb:63:f7:d0:8a:cb:6e:1c:5c:24:35:e2:
30:50:0b:bd:9e:37:50:02:a6:61:11:db:f1:41:e6:
db:a4:59:9e:05:b3:d7:1e:75:a8:2a:f1:3b:21:20:
c4:43:60:ef:9f:32:f9:b5:ca:b4:f6:c4:55:68:0f:
fa:bd:10:dc:7f:1a:69:13:40:11:05:c4:4a:e0:45:
3c:6f:e7:15:65:21:01:8a:3a:78:4a:63:72:72:7c:
3c:3e:3d:65:5f:38:fb:3b:05:28:26:b3:b9:f5:1e:
6b:4f:5e:2b:1e:a2:16:8a:b2:8a:f9:42:66:d8:90:
fe:08:2f:47:4c:88:96:6d:5d:e8:9a:eb:42:03:b1:
a1:9f:64:59:ab:7d:63:8f:b6:7b:fe:a1:48:9d:66:
70:93:33:e7:81:32:ef:21:6b:f6:cc:8e:25:87:5f:
57:cb:1b:27:70:8e:ff:54:9c:78:59:3f:20:39:ba:
0e:4c:f6:95:13:00:04:ae:55:9c:d6:bb:93:ff:a7:
4d:2e:57:cc:5a:0a:58:ef:56:5a:99:e8:a8:88:66:
b8:91:20:37:56:62:32:01:99:2c:c2:62:ca:55:9d:
7b:c3:98:96:a9:fe:a7:d3:62:0a:8e:8e:d4:be:96:
cd:ef:1a:1f:e9:5e:8c:0d:b5:bb:fa:2e:1d:18:f6:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3F:99:06:83:BC:05:08:E8:19:4B:4A:A6:82:CB:98:DE:DB:C6:87
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/tz-ZBoO8BQjoGUtKpoLLmN7bxoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:0c:dc:32:f7:57:b1:1c:d6:0a:45:84:8d:dc:b9:5e:4d:15:
21:b5:b2:85:53:70:d7:04:2a:84:76:45:8e:79:f8:ce:f4:73:
9e:d7:d2:fd:40:25:8a:68:10:3a:bc:0a:04:2b:92:26:77:7f:
3c:00:15:6d:b7:ca:e6:13:52:49:67:16:a6:88:89:4c:ba:47:
a2:4c:6e:56:79:31:72:c2:93:09:e0:36:19:3e:a2:d8:41:5b:
af:fe:f7:dc:d4:5e:37:59:7e:4e:b1:d4:77:bc:60:14:bc:e7:
4e:bb:e8:ec:8b:57:01:3a:f3:06:cb:ae:42:c5:f3:be:7f:c8:
bd:18:d5:12:14:ba:44:c2:97:44:b5:ab:39:63:80:7a:fc:12:
c4:16:56:23:fb:96:d4:7e:29:2d:f0:9a:5c:e1:87:aa:ec:57:
a1:c1:a9:b5:8c:ba:a5:6d:33:f6:a2:c6:a1:fd:45:2f:ac:a7:
21:a7:02:ba:ce:25:39:22:58:9f:3f:e6:d2:a5:e9:f7:79:6e:
f9:22:8a:80:48:dc:c2:1c:f8:e1:af:77:32:c2:47:4a:19:73:
c0:8b:8e:1a:60:e9:bc:cf:b6:82:db:53:ec:5a:34:ef:7f:e8:
47:dc:27:b5:c8:bd:d4:c7:78:03:6d:e6:44:24:c6:ad:66:e3:
56:4f:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:57 2025 by rpki-client