Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/AjizMhbvZP8EczcE0oTBcJ_mSnw.roa
File: AjizMhbvZP8EczcE0oTBcJ_mSnw.roa (raw, json)
Hash identifier: Q/JU/ebLp6lN8HgqLWcJCqVKaNKdPQRwmjzAKXx1eBU=
Subject key identifier: 02:38:B3:32:16:EF:64:FF:04:73:37:04:D2:84:C1:70:9F:E6:4A:7C
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: D622
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/AjizMhbvZP8EczcE0oTBcJ_mSnw.roa
Signing time: Fri 17 Jun 2022 00:05:08 +0000
ROA not before: Fri 17 Jun 2022 00:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3130
IP address blocks: 198.180.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54818 (0xd622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Jun 17 00:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0238B33216EF64FF04733704D284C1709FE64A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:fc:97:1d:70:2b:cb:71:c1:a9:f1:b7:c2:
d3:01:7d:fc:e5:fb:67:f3:85:92:4e:fe:f5:e9:07:
28:49:e8:9e:aa:4e:99:ed:17:56:30:61:67:b4:c4:
17:b1:ba:64:79:fe:fc:e6:24:6d:df:0e:ef:23:ef:
e1:f8:b5:4b:69:57:c3:9e:3e:92:37:63:b5:03:62:
95:a1:94:66:c6:a4:15:6e:0d:8f:28:e6:48:d1:83:
5c:c0:b2:b7:19:d8:28:69:56:ce:3b:e5:60:ef:fc:
61:1b:fe:50:65:78:0d:75:8b:58:8b:86:fc:1e:a9:
f3:12:e3:75:61:aa:79:95:33:c3:15:af:0b:be:99:
92:01:48:1a:f1:5e:71:f4:bf:fd:54:95:e0:55:77:
04:2e:25:fa:7b:4d:cb:45:c4:a6:05:17:2d:40:53:
bb:72:53:99:f2:80:08:c4:ce:ae:2f:c7:11:7b:e8:
8d:d2:71:b6:0b:9c:00:df:d2:af:15:a0:68:9f:b5:
c5:e9:3c:74:04:db:3c:3e:52:54:d6:8a:42:e0:7a:
f0:42:71:95:b6:ed:79:a0:8a:af:17:92:7d:71:a4:
9e:26:c3:54:45:8b:70:dc:93:e9:8f:35:1c:f7:18:
af:07:d2:fd:81:af:c7:50:8e:89:ee:5b:95:cc:3e:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:B3:32:16:EF:64:FF:04:73:37:04:D2:84:C1:70:9F:E6:4A:7C
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/AjizMhbvZP8EczcE0oTBcJ_mSnw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:51:b7:f0:f3:e6:de:90:a8:7d:4a:0c:3d:b6:5f:32:8c:ac:
19:22:80:16:ca:bd:92:d3:2f:70:43:e1:60:76:df:b6:b1:1d:
de:27:e3:16:86:b3:1b:ee:dc:2e:78:aa:92:f3:eb:85:5c:05:
70:c1:d4:b8:ce:25:06:22:cd:53:85:02:a2:59:fb:7e:64:9e:
40:2c:8e:bb:81:f1:fd:0c:48:ff:cb:7d:82:08:61:d2:5f:46:
ad:ec:e2:38:41:d7:7d:30:79:a6:92:37:b0:c2:a1:87:97:53:
c0:b1:11:68:b2:53:b9:51:7e:53:51:8a:d9:c2:a5:53:7c:a0:
ff:e3:1e:00:ae:fb:cd:af:21:44:50:c9:f5:d0:36:7d:96:3c:
b2:3c:80:2b:85:82:49:6a:9f:4a:f2:6a:6d:43:c7:33:31:e3:
b9:01:03:d1:90:c6:e2:4d:bf:28:9b:59:7d:bc:11:80:0b:0a:
52:46:73:79:1d:6e:fb:13:50:cb:fc:3e:e8:96:e4:b2:cf:a5:
bf:aa:18:af:db:46:d8:d7:66:a4:b5:3b:db:f1:b8:3e:0f:84:
0c:ad:56:2b:d8:0c:27:ef:e6:ce:fc:85:9e:3d:12:84:06:41:
84:c6:58:d1:b0:a8:cd:cc:54:94:65:64:a0:61:c1:e6:ca:f7:
42:5f:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:35 2023 by rpki-client on console-fra.rpki-client.org