Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/grblmKISaw0lBXQ860J67lFM89A.roa
File: grblmKISaw0lBXQ860J67lFM89A.roa (raw, json)
Hash identifier: nHNM13yzvGSQHYFR+dVGem24uBZ8gDQh54u8ekBukvA=
Subject key identifier: 82:B6:E5:98:A2:12:6B:0D:25:05:74:3C:EB:42:7A:EE:51:4C:F3:D0
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 016B59C3
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/grblmKISaw0lBXQ860J67lFM89A.roa
Signing time: Wed 19 Jan 2022 13:19:23 +0000
ROA not before: Wed 19 Jan 2022 13:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.90.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23812547 (0x16b59c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 19 13:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82b6e598a2126b0d2505743ceb427aee514cf3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:03:a0:b7:0d:8d:b9:65:4a:84:62:dc:81:
61:3f:52:86:c3:f3:da:ab:9d:2b:bc:cb:ae:9b:ca:
6c:79:01:e2:4a:1c:f3:92:01:a7:4b:5e:86:73:46:
a3:0b:ca:d0:4d:13:a0:3e:a5:8d:64:90:20:d7:50:
5d:80:6e:3f:c9:56:91:c1:75:75:18:6a:ca:d2:fd:
4f:c5:3c:4e:42:cc:32:1e:27:ab:99:2e:fa:ac:53:
7d:15:c3:28:5d:02:51:1c:d9:f8:d3:b3:db:2d:76:
36:1f:26:60:70:f2:0e:e1:d7:a2:a9:97:3a:31:10:
b6:d9:73:32:ea:9c:c5:7c:a3:d1:df:3e:56:18:36:
c6:4c:42:83:a6:16:27:e1:f6:85:76:39:b1:82:2a:
b7:37:44:3b:ef:5a:a7:05:81:83:38:00:d7:43:3d:
6c:ce:e4:01:e4:ae:d8:ca:c7:54:cc:32:26:df:9c:
61:f5:56:9f:27:62:cf:c7:88:37:f5:3a:11:43:ad:
00:5d:4f:83:1f:5b:b2:0a:3f:58:15:85:af:e5:5b:
07:98:72:64:78:6e:a8:3a:4f:bf:db:c2:63:6a:fb:
94:ac:ad:97:d6:76:63:1e:5b:b5:bc:8d:c4:67:3d:
99:82:ca:44:5b:d2:5e:cc:1b:0d:1c:64:05:2c:3d:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:E5:98:A2:12:6B:0D:25:05:74:3C:EB:42:7A:EE:51:4C:F3:D0
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/grblmKISaw0lBXQ860J67lFM89A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.84.0/24
Signature Algorithm: sha256WithRSAEncryption
43:02:5f:c8:40:b9:23:39:b1:56:6c:53:a1:2c:8b:46:ee:c6:
d6:1b:ff:44:3a:21:4e:38:a0:c1:fd:54:55:3d:a8:50:d8:27:
57:58:8a:86:9d:52:6c:6b:01:1c:ed:20:c0:04:df:73:ea:ea:
f0:01:ba:84:ef:a4:90:7a:a7:82:a6:41:79:2c:3b:98:5b:f0:
75:55:ad:1f:c8:97:bc:bb:d2:c5:2c:9d:51:09:1d:c2:30:7a:
8e:89:27:26:6a:00:9d:6f:ec:67:18:ef:af:85:5b:d8:00:32:
58:fe:85:94:76:19:b9:08:4c:de:73:36:0c:03:e9:f1:08:02:
29:3a:e2:9a:78:12:6c:08:0e:7a:fb:bc:fe:2e:17:73:a8:f3:
bb:72:52:ae:1b:02:2e:c5:5b:cd:e0:f1:7a:2a:45:a5:47:06:
60:d5:ca:46:3c:4c:96:93:c5:4f:a6:d7:ee:d8:e2:04:9a:79:
29:30:b9:0a:df:d7:1a:2a:3d:10:2b:66:f0:8e:b8:1e:81:6f:
a5:af:81:3c:3e:47:f8:ee:f4:4a:37:6f:2a:ca:06:53:bc:20:
d7:72:0d:5a:7a:82:8b:18:a9:54:71:dd:b2:7b:10:6a:5d:79:
b4:fb:9d:fb:0a:41:a2:74:88:7f:41:0e:fe:c1:11:f4:1f:6b:
a2:5d:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org