Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/OeR3MjZ6S4ko1i8W7rNWagRS4Ro.roa
File: OeR3MjZ6S4ko1i8W7rNWagRS4Ro.roa (raw, json)
Hash identifier: UV+OoU6kIPg2drQFUBpfTbYKBMWZ14z+zu3qBiiS6I4=
Subject key identifier: 39:E4:77:32:36:7A:4B:89:28:D6:2F:16:EE:B3:56:6A:04:52:E1:1A
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: E9B2
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/OeR3MjZ6S4ko1i8W7rNWagRS4Ro.roa
Signing time: Fri 30 Sep 2022 03:24:05 +0000
ROA not before: Fri 30 Sep 2022 03:24:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3130
IP address blocks: 192.83.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59826 (0xe9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Sep 30 03:24:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39E47732367A4B8928D62F16EEB3566A0452E11A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:3b:03:ac:12:e6:fe:b2:c3:84:cf:9d:88:
6c:9d:8f:b7:b0:5d:cf:40:ef:49:8b:93:c3:88:60:
aa:44:5f:7c:fd:4e:57:10:3b:7c:75:6d:3f:58:57:
b3:5a:68:10:8b:15:a0:a3:6f:16:e7:86:30:49:ce:
eb:5c:b4:04:43:03:12:58:bb:3a:0a:8a:6f:8c:d4:
d3:9f:3f:fd:0e:f8:5e:2e:b8:63:d6:e4:bc:4b:58:
34:92:25:95:ec:9e:9a:10:24:d1:3f:08:c5:31:dc:
2e:ad:8f:19:30:12:a2:47:43:77:5d:55:de:b8:9d:
09:31:ed:7b:7a:5b:f8:20:16:58:d7:b4:75:61:ca:
31:ad:1e:29:fc:58:4a:77:a6:8f:72:48:7f:13:57:
9c:33:dd:c1:60:8b:99:3a:e6:b4:9f:c3:cc:25:0c:
d3:a6:b0:0d:a6:38:4f:2f:f6:33:07:05:8e:0c:bb:
7c:9b:5e:b4:f4:6e:04:69:c2:f2:f2:1b:34:8a:97:
1a:77:8c:03:73:08:b4:13:64:c1:1a:a4:4d:58:1a:
78:56:21:d2:68:91:4b:93:ed:e8:5b:d2:01:99:d0:
29:d7:ec:0b:5d:2b:08:7a:a0:0c:28:6c:d5:5b:cc:
bb:7b:98:60:19:78:12:da:17:a3:82:99:54:ee:24:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E4:77:32:36:7A:4B:89:28:D6:2F:16:EE:B3:56:6A:04:52:E1:1A
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/OeR3MjZ6S4ko1i8W7rNWagRS4Ro.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
79:0c:61:bd:9d:90:f5:78:1b:fd:b9:5c:34:ad:e5:93:26:ab:
59:d3:2b:1f:f6:42:71:7a:d8:e0:23:78:69:12:32:3b:5d:83:
1b:76:8b:ab:53:e5:6e:52:d1:42:3d:42:1a:bf:55:8e:c4:b0:
29:70:85:1c:d6:31:21:1f:18:49:c0:fc:cb:97:91:63:58:e5:
75:5d:dd:9a:4c:60:fb:a0:7d:c7:00:46:65:ea:29:20:fb:6f:
ee:85:11:c6:0c:4e:4d:ac:cb:6b:40:48:bf:6d:52:25:bf:b2:
3b:8e:a7:cb:0a:04:f4:05:0e:39:2f:82:ef:15:4c:8b:82:eb:
91:cb:a0:4a:4f:b4:21:21:da:21:bc:1b:eb:50:e2:54:0c:6d:
14:46:0b:26:95:c9:55:ee:eb:d4:d6:39:c3:0e:d7:50:6d:09:
0f:e7:a9:58:bf:11:44:2c:c7:18:f1:a2:47:18:d6:a1:ab:85:
4f:6f:ac:81:00:fd:15:2f:59:c3:f9:4a:b0:46:bb:f5:30:8e:
97:27:d7:71:9f:bb:3f:24:ec:fc:dc:e9:4b:aa:ab:28:ab:72:
b2:ea:4c:94:74:40:2a:40:2c:cc:35:cf:3e:86:2b:79:4d:76:
02:e8:98:bc:59:ae:83:ea:6c:25:12:46:3f:1d:8e:c3:c9:4a:
12:08:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org