Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/-quJUWHV7tOIhHSRPCdP6shEMBE.roa
File: -quJUWHV7tOIhHSRPCdP6shEMBE.roa (raw, json)
Hash identifier: 0+l8ft868SQP4w7pDjmmduW6SNzzDnbK6D9CUi27+NA=
Subject key identifier: FA:AB:89:51:61:D5:EE:D3:88:84:74:91:3C:27:4F:EA:C8:44:30:11
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 9FA2
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/-quJUWHV7tOIhHSRPCdP6shEMBE.roa
Signing time: Sun 29 Aug 2021 23:37:53 +0000
ROA not before: Sun 29 Aug 2021 23:37:53 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40866 (0x9fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Aug 29 23:37:53 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=FAAB895161D5EED3888474913C274FEAC8443011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:6b:31:8e:af:aa:3c:c3:fc:34:2a:91:69:
a9:bb:5a:27:b1:f6:90:02:f0:3e:e8:bc:cc:fc:6a:
73:bc:03:d9:18:7d:26:68:9f:7e:12:ca:21:61:94:
dd:4d:27:0e:da:a4:a0:7f:90:8a:00:75:5e:6d:f7:
88:9c:c5:23:0a:77:55:49:fc:56:50:3f:2f:e8:15:
44:71:1c:94:2e:6d:4d:32:16:ad:b7:c6:2b:54:40:
bb:af:e5:ac:1f:52:b8:75:49:c5:5f:31:c5:91:6d:
08:44:2c:34:98:7f:41:f8:6c:c6:f1:56:bd:1e:f6:
4b:9c:a6:c4:a8:ab:7c:ad:37:3e:9a:15:a2:b1:d4:
e9:37:ba:0e:5e:b9:28:9d:6e:4f:a3:6d:89:b1:e2:
32:eb:2b:06:24:bf:c0:6d:19:bf:ff:f6:89:9e:9e:
81:bf:aa:20:cd:31:90:88:fb:4b:5a:b9:c1:6f:05:
17:40:4b:95:70:33:e1:ac:dd:67:a4:81:f9:43:42:
60:e0:a8:69:71:e0:39:25:b7:65:87:e5:f9:3d:a3:
36:5d:6f:3c:0f:2f:74:a8:36:0f:ac:08:ed:4e:58:
14:f7:b1:0f:86:fe:fe:d1:dc:ec:6a:24:3b:be:e9:
48:4d:9c:fc:5c:16:6c:3b:eb:bb:6b:dc:eb:eb:38:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:89:51:61:D5:EE:D3:88:84:74:91:3C:27:4F:EA:C8:44:30:11
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/-quJUWHV7tOIhHSRPCdP6shEMBE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:94:ff:f3:a5:4a:29:f2:e5:48:67:67:5d:3f:16:6e:f7:5d:
4d:c2:52:34:d6:b8:f1:7e:22:b3:55:28:ae:21:8d:39:8a:80:
48:a1:f1:03:79:a3:2a:c0:c0:f5:e5:b0:cd:36:b9:83:86:2b:
aa:67:9b:86:02:34:12:a5:74:5e:28:43:56:e9:ce:ba:51:de:
05:36:20:e0:40:3e:8a:b0:9e:79:88:27:c8:0d:37:3c:a1:92:
9e:20:fa:e0:93:d4:0f:97:99:14:6c:93:a7:05:2e:6c:d3:d6:
ee:27:b1:81:68:03:ce:9f:af:05:ca:c0:c9:d5:de:a0:17:05:
c6:5c:6c:0b:8e:dd:05:95:5b:7b:79:81:05:fb:7f:57:ab:68:
03:b8:41:04:29:6a:6b:6a:8f:7f:b8:e8:7c:a4:9b:31:37:6a:
94:ab:19:f5:61:b5:e9:50:b5:f5:be:c8:a7:83:d4:47:1b:b6:
c0:ac:84:64:72:2e:58:4a:a2:98:61:5a:9b:df:16:2b:2b:bb:
e6:73:c9:ab:5d:f2:f5:08:e4:55:3a:4f:5c:77:95:38:26:80:
f5:32:8e:bb:f6:65:13:0b:04:c0:3f:ab:f2:d2:f3:0a:cf:25:
3a:0e:25:83:1c:3b:b5:f6:de:69:a9:94:58:67:3e:1b:98:1c:
4b:2b:c8:ea
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIDAJ+iMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjEwODI5
MjMzNzUzWhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhGQUFCODk1MTYxRDVF
RUQzODg4NDc0OTEzQzI3NEZFQUM4NDQzMDExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArcJrMY6vqjzD/DQqkWmpu1onsfaQAvA+6LzM/GpzvAPZGH0m
aJ9+EsohYZTdTScO2qSgf5CKAHVebfeInMUjCndVSfxWUD8v6BVEcRyULm1NMhat
t8YrVEC7r+WsH1K4dUnFXzHFkW0IRCw0mH9B+GzG8Va9HvZLnKbEqKt8rTc+mhWi
sdTpN7oOXrkonW5Po22JseIy6ysGJL/AbRm///aJnp6Bv6ogzTGQiPtLWrnBbwUX
QEuVcDPhrN1npIH5Q0Jg4KhpceA5Jbdlh+X5PaM2XW88Dy90qDYPrAjtTlgU97EP
hv7+0dzsaiQ7vulITZz8XBZsO+u7a9zr6zg/kQIDAQABo4IB1DCCAdAwHQYDVR0O
BBYEFPqriVFh1e7TiIR0kTwnT+rIRDARMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBigYI
KwYBBQUHAQsEfjB8MEsGCCsGAQUFBzALhj9yc3luYzovL2NhLnJnLm5ldC9ycGtp
L1JHbmV0LU9VLy1xdUpVV0hWN3RPSWhIU1JQQ2RQNnNoRU1CRS5yb2EwLQYIKwYB
BQUHMA2GIWh0dHBzOi8vY2EucmcubmV0L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAJMcBzANBgkqhkiG9w0BAQsFAAOCAQEAq5T/
86VKKfLlSGdnXT8WbvddTcJSNNa48X4is1UoriGNOYqASKHxA3mjKsDA9eWwzTa5
g4YrqmebhgI0EqV0XihDVunOulHeBTYg4EA+irCeeYgnyA03PKGSniD64JPUD5eZ
FGyTpwUubNPW7iexgWgDzp+vBcrAydXeoBcFxlxsC47dBZVbe3mBBft/V6toA7hB
BClqa2qPf7jofKSbMTdqlKsZ9WG16VC19b7Ip4PURxu2wKyEZHIuWEqimGFam98W
Kyu75nPJq13y9QjkVTpPXHeVOCaA9TKOu/ZlEwsEwD+r8tLzCs8lOg4lgxw7tfbe
aamUWGc+G5gcSyvI6g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org