Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/-V_7zZA5gijnMGHIuB83IpbLSVc.roa
File: -V_7zZA5gijnMGHIuB83IpbLSVc.roa (raw, json)
Hash identifier: yYmUaVEg+/7AiqD0Fi4/MyR2gsJ2wyB4m2kCXddL3Fo=
Subject key identifier: F9:5F:FB:CD:90:39:82:28:E7:30:61:C8:B8:1F:37:22:96:CB:49:57
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 9FA1
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/-V_7zZA5gijnMGHIuB83IpbLSVc.roa
Signing time: Sun 29 Aug 2021 23:37:53 +0000
ROA not before: Sun 29 Aug 2021 23:37:53 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 3130
IP address blocks: 198.180.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40865 (0x9fa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Aug 29 23:37:53 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=F95FFBCD90398228E73061C8B81F372296CB4957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:2c:46:ad:98:d6:bf:ce:77:e4:e3:a9:b2:
8a:ad:83:ab:26:88:5e:25:e6:73:31:ec:4b:bb:ec:
b8:34:9f:f5:fe:ac:90:e4:74:0b:87:e3:0a:27:f7:
82:9b:fc:ca:fe:68:f6:7a:59:0a:ef:f9:57:d9:ab:
cb:70:3f:0d:fd:29:ea:c5:2e:8b:19:fc:34:45:1b:
d6:04:0b:bc:44:8a:50:17:2f:02:bc:e4:90:d6:75:
0e:10:8c:cc:66:10:3f:4e:90:89:54:80:18:12:f1:
02:4d:20:ab:c4:c2:0a:90:dd:7b:84:18:8b:0c:90:
37:4a:cf:7e:13:cb:c8:1b:b2:3d:5c:35:f8:4e:c7:
13:0a:1c:80:83:74:9b:79:ef:dd:50:0a:8f:18:dd:
fd:8f:f4:a8:b7:2d:52:5a:e3:eb:4e:23:2b:e9:55:
67:29:1a:a0:85:2e:e5:5c:ee:10:48:da:bc:d1:ae:
3d:c6:19:0e:f2:cf:fd:72:ca:ad:3b:99:a8:a3:66:
49:ee:fe:0a:1f:de:d4:c1:1a:8b:61:25:9f:0c:d0:
11:f7:d5:46:44:e2:3c:9e:70:39:82:e6:bf:41:26:
0c:5e:91:ce:8a:b6:7a:13:ec:24:d6:67:fd:3a:48:
c4:68:28:9c:07:aa:4a:91:bd:cb:98:4b:4c:e5:d6:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:FB:CD:90:39:82:28:E7:30:61:C8:B8:1F:37:22:96:CB:49:57
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/-V_7zZA5gijnMGHIuB83IpbLSVc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6f:b3:e5:53:29:e6:97:d0:ee:bd:82:73:ed:02:94:e3:79:
70:07:51:fd:c9:c3:eb:5b:56:3e:0a:1e:83:ce:fb:f3:b1:4c:
c5:60:54:d6:a2:e9:e5:81:b8:35:da:a9:6e:94:c6:c3:a1:91:
3d:2f:4d:89:29:ce:8c:de:72:45:6f:4e:50:d4:f3:fe:2f:cd:
3d:59:20:ce:b2:58:c9:37:5e:c1:5b:6a:c7:1b:66:7b:cf:52:
49:51:4a:33:b2:4f:89:04:75:b3:d4:09:01:b0:11:a6:62:8d:
fa:47:76:54:8d:b3:ab:3c:60:1b:bc:5e:8e:96:6b:bf:dd:6a:
bc:7b:0f:f8:ea:a0:d1:c9:7d:4c:32:f3:19:fb:62:88:e5:dd:
03:bb:ce:28:68:cb:b1:39:94:d1:05:52:55:3a:0d:2e:ed:a3:
e6:81:2d:cb:ce:bf:52:e5:f1:38:9e:5f:e8:63:f4:cc:1d:7f:
2a:16:6b:99:bc:b3:2e:bd:21:0c:e8:6a:4f:d0:64:fa:df:37:
0d:df:51:9d:37:c0:76:67:bf:47:10:00:59:ec:63:13:c5:f2:
58:3e:a0:42:9d:bb:df:17:b5:f2:b3:2a:ce:91:1f:2a:26:13:
55:43:fd:7d:11:1e:af:7d:aa:90:a6:3d:9e:af:21:1f:cf:bd:
9a:78:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org