Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/GuNNux7NUw9rtZ3wrynKSRlP1kE.roa
File: GuNNux7NUw9rtZ3wrynKSRlP1kE.roa (raw, json)
Hash identifier: zgeS2MzW5xilhD2bAGZlicVURbZ4BxPJYSLBAuv8pDc=
Subject key identifier: 1A:E3:4D:BB:1E:CD:53:0F:6B:B5:9D:F0:AF:29:CA:49:19:4F:D6:41
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: E9AE
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/GuNNux7NUw9rtZ3wrynKSRlP1kE.roa
Signing time: Fri 30 Sep 2022 03:24:04 +0000
ROA not before: Fri 30 Sep 2022 03:24:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3130
IP address blocks: 198.180.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59822 (0xe9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Sep 30 03:24:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1AE34DBB1ECD530F6BB59DF0AF29CA49194FD641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f9:41:8a:90:0c:05:a5:ff:f3:38:82:50:d9:
cd:c3:9f:13:9a:a8:1d:62:8a:31:2f:a0:9a:1b:b5:
48:a1:28:39:53:d7:a3:e7:4c:c9:41:35:bf:b5:22:
74:26:fa:82:a3:58:c4:b5:bd:29:87:34:af:32:03:
33:88:31:e6:c2:5e:30:c4:94:52:76:0b:ec:ac:8f:
4b:1a:3b:b6:e9:b1:64:7c:1f:4c:1c:14:c8:ac:68:
57:0e:46:fe:a7:8b:31:f3:89:5a:fb:7b:29:a1:6a:
ac:f8:b0:c3:1a:d6:11:4f:83:2a:09:12:c3:d3:40:
7a:db:86:de:0f:22:68:15:22:17:67:dc:2c:ed:29:
ce:cd:e9:0c:fd:8f:0a:52:bf:04:f0:f5:42:75:63:
bc:29:ba:29:5f:d5:b8:ce:00:02:9f:5c:8d:44:44:
e0:5b:4d:79:54:ee:53:7d:39:d3:bf:08:3b:22:c3:
46:50:b0:dd:e4:4d:a9:db:fc:25:7d:14:6f:76:d7:
5c:00:e1:97:b3:87:6c:29:4f:bb:cd:0f:a8:ae:74:
97:11:0e:96:3d:92:2b:1b:0a:3c:f2:19:ed:71:75:
e2:a5:4c:ca:6c:44:e1:fd:37:6e:d7:33:29:bc:79:
06:9a:7e:8a:6f:ef:2d:08:28:08:0f:0f:ee:b7:02:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E3:4D:BB:1E:CD:53:0F:6B:B5:9D:F0:AF:29:CA:49:19:4F:D6:41
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/GuNNux7NUw9rtZ3wrynKSRlP1kE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:cb:52:e2:26:d2:aa:be:af:19:c7:a0:c7:9a:b0:8e:47:ae:
3f:a4:eb:01:04:a9:8c:ca:4b:26:d2:1d:9c:7e:2b:7d:ff:7b:
53:f1:6a:fb:e2:7a:a9:4f:43:7b:2c:93:96:d4:96:2a:aa:fa:
fa:a5:03:56:94:b6:a8:aa:0b:f1:42:d7:16:33:c2:e3:45:88:
28:15:14:e1:0d:43:4f:6f:e6:10:f7:84:71:2c:c8:c5:e8:8c:
11:e3:b8:af:a6:33:8d:3d:9e:c7:20:4e:d0:44:e1:cb:c0:17:
c6:c2:e9:b4:58:3f:b3:8b:65:a6:6f:e6:12:38:c2:db:08:f6:
05:fa:20:26:ba:59:04:5e:20:a1:f5:59:63:24:13:a2:97:b8:
4b:9d:f4:f6:46:89:24:2d:01:a9:22:c8:b9:10:4e:79:06:8f:
f7:fc:88:92:09:90:66:69:4a:aa:dc:0d:3e:ff:1b:2f:50:7b:
cc:a3:93:5b:61:ec:fa:3e:37:d1:1f:39:f8:45:b6:b1:a2:17:
90:f6:0e:a1:99:44:fc:75:e5:d1:85:3d:3d:d5:69:12:ab:ad:
21:94:0b:bb:c9:cb:b6:ac:07:1a:23:7d:ee:a3:21:74:78:66:
bf:49:ba:ef:a6:e1:04:1a:ab:28:2c:07:d0:4a:2a:34:ce:2b:
8f:83:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org