Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/pZrivJTVoChVdBEfTfM3ShjneIw.roa
File: pZrivJTVoChVdBEfTfM3ShjneIw.roa (raw, json)
Hash identifier: yLu/bSkzzNyYHBdM5DhnhskvU+ew5l/WsN+6csBSsug=
Subject key identifier: A5:9A:E2:BC:94:D5:A0:28:55:74:11:1F:4D:F3:37:4A:18:E7:78:8C
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 085953FA
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/pZrivJTVoChVdBEfTfM3ShjneIw.roa
Signing time: Sat 01 Jan 2022 10:04:20 +0000
ROA not before: Sat 01 Jan 2022 10:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208006
IP address blocks: 45.82.138.0/24 maxlen: 24
45.82.137.0/24 maxlen: 24
45.82.139.0/24 maxlen: 24
45.82.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140071930 (0x85953fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Jan 1 10:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a59ae2bc94d5a0285574111f4df3374a18e7788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:34:d8:a4:ff:8c:30:70:e3:35:29:dd:b7:
8e:15:b5:47:e1:0c:70:66:2d:62:f2:c7:8f:64:3c:
88:85:22:d0:28:ca:94:9c:79:53:b3:54:01:71:26:
54:00:0e:2c:9e:f1:38:ac:6c:4e:34:21:c2:df:ed:
4e:19:03:57:fe:45:b5:e1:49:9a:43:b7:64:af:7a:
2a:33:94:e9:9e:ec:f1:f0:c4:33:fb:f4:b2:ca:dd:
e5:a3:41:d2:93:ac:5c:e9:bd:c5:27:32:03:e8:18:
81:7b:72:5d:d3:ae:3c:77:bc:4f:09:31:cc:0c:80:
4c:47:b1:78:a5:45:cc:da:f5:73:d3:b3:ae:c0:49:
7f:63:12:ee:99:fb:e4:ce:2d:5b:d7:81:50:ba:8b:
f8:c8:11:b9:48:4b:2b:71:ca:05:97:1d:9d:43:19:
53:1a:25:bb:bf:b9:67:25:c8:8f:40:0e:84:15:f2:
68:d8:f6:71:1e:ec:f8:1d:6e:06:ae:e0:e8:a4:fd:
34:9a:0d:11:66:92:b4:e4:92:d7:83:8f:e1:76:4b:
c4:d7:00:7c:58:63:7d:61:a9:e7:9d:8a:86:c4:d7:
4e:61:cf:12:34:d9:86:31:a1:0c:37:fa:28:e6:e0:
54:11:b2:01:f2:b3:cc:5a:fd:89:99:08:24:12:8b:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9A:E2:BC:94:D5:A0:28:55:74:11:1F:4D:F3:37:4A:18:E7:78:8C
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/pZrivJTVoChVdBEfTfM3ShjneIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.136.0/22
Signature Algorithm: sha256WithRSAEncryption
20:4c:a8:80:c7:c2:84:17:29:9a:6f:5d:c6:6f:4e:47:96:1c:
19:a0:3c:31:36:bd:68:5d:d4:8a:bd:f4:36:b2:37:f9:8a:f3:
42:47:39:bf:a7:cb:64:ca:ed:13:32:f9:15:17:1f:78:cd:e3:
fd:41:37:d6:41:08:8d:38:9c:fb:ca:bb:fc:04:7d:da:85:07:
de:cf:4a:ca:63:8e:21:05:a6:56:fa:49:0c:56:3c:9c:0d:a0:
97:58:a2:a7:ad:d4:c3:3a:28:83:82:c5:83:14:6e:41:d5:47:
88:89:fb:d1:24:9e:4d:31:68:f7:26:21:29:2e:57:a5:ae:a5:
8e:e5:b0:4d:64:b7:06:cc:a4:95:55:ac:04:11:3e:8f:d2:f8:
9d:a3:7c:9a:99:c5:67:30:b2:14:34:9f:04:00:f1:ef:5b:16:
22:fe:d4:24:84:ba:ec:40:7a:e1:e4:d0:29:eb:a3:32:55:88:
4f:3a:37:a2:b8:28:a3:04:3f:37:fc:af:7c:1d:3a:c3:49:3b:
83:65:cd:43:34:5c:1f:78:d6:c0:e3:7f:bf:30:f8:56:bf:10:
80:c7:7d:69:88:38:3b:6e:24:4d:aa:67:07:70:5c:d1:02:77:
91:8f:e1:20:69:bd:b9:57:07:ab:66:50:49:6f:d5:96:8d:2f:
bd:5a:39:c8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECFlT+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Nzc4NWEzMGQ4NTEyZDBkOGFiNjM3ODEyYjc5ZmE0NTI5YTFlZjFiMB4XDTIyMDEw
MTEwMDQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTU5YWUyYmM5NGQ1
YTAyODU1NzQxMTFmNGRmMzM3NGExOGU3Nzg4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXANNik/4wwcOM1Kd23jhW1R+EMcGYtYvLHj2Q8iIUi0CjK
lJx5U7NUAXEmVAAOLJ7xOKxsTjQhwt/tThkDV/5FteFJmkO3ZK96KjOU6Z7s8fDE
M/v0ssrd5aNB0pOsXOm9xScyA+gYgXtyXdOuPHe8TwkxzAyATEexeKVFzNr1c9Oz
rsBJf2MS7pn75M4tW9eBULqL+MgRuUhLK3HKBZcdnUMZUxolu7+5ZyXIj0AOhBXy
aNj2cR7s+B1uBq7g6KT9NJoNEWaStOSS14OP4XZLxNcAfFhjfWGp552KhsTXTmHP
EjTZhjGhDDf6KObgVBGyAfKzzFr9iZkIJBKLIssCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSlmuK8lNWgKFV0ER9N8zdKGOd4jDAfBgNVHSMEGDAWgBS3eFow2FEtDYq2
N4ErefpFKaHvGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3QzaGFNTmhSTFEyS3RqZUJLM242UlNtaDd4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNTQzMTdkLTA5NGUtNDgyMC05NjUxLTYyMTliMzIxMjJkMC8x
L3Bacml2SlRWb0NoVmRCRWZUZk0zU2hqbmVJdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NTQzMTdkLTA5NGUtNDgyMC05NjUxLTYyMTliMzIxMjJkMC8xL3QzaGFNTmhSTFEy
S3RqZUJLM242UlNtaDd4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1SiDANBgkqhkiG9w0BAQsFAAOC
AQEAIEyogMfChBcpmm9dxm9OR5YcGaA8MTa9aF3Uir30NrI3+YrzQkc5v6fLZMrt
EzL5FRcfeM3j/UE31kEIjTic+8q7/AR92oUH3s9KymOOIQWmVvpJDFY8nA2gl1ii
p63Uwzoog4LFgxRuQdVHiIn70SSeTTFo9yYhKS5Xpa6ljuWwTWS3BsyklVWsBBE+
j9L4naN8mpnFZzCyFDSfBADx71sWIv7UJIS67EB64eTQKeujMlWITzo3orgoowQ/
N/yvfB06w0k7g2XNQzRcH3jWwON/vzD4Vr8QgMd9aYg4O24kTapnB3Bc0QJ3kY/h
IGm9uVcHq2ZQSW/Vlo0vvVo5yA==
-----END CERTIFICATE-----
Generated at Mon May 12 03:59:13 2025 by rpki-client