Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/jl5YR7sdkNK-bRmLnE5TEx_o940.roa
File: jl5YR7sdkNK-bRmLnE5TEx_o940.roa (raw, json)
Hash identifier: yfoFynTuilbzTXc+dp5LcnwGXc5HJqhR2j7gkTKFHxg=
Subject key identifier: 8E:5E:58:47:BB:1D:90:D2:BE:6D:19:8B:9C:4E:53:13:1F:E8:F7:8D
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 9FA7
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/jl5YR7sdkNK-bRmLnE5TEx_o940.roa
Signing time: Sun 29 Aug 2021 23:37:56 +0000
ROA not before: Sun 29 Aug 2021 23:37:56 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 203274
IP address blocks: 198.133.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40871 (0x9fa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Aug 29 23:37:56 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=8E5E5847BB1D90D2BE6D198B9C4E53131FE8F78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:dc:9a:64:74:61:96:ee:26:8e:13:1f:f6:
1d:d4:3e:6b:89:45:65:75:51:fb:3b:35:3e:ab:2d:
a0:86:13:ff:89:cd:a8:74:e4:b2:08:22:07:41:89:
cc:f7:d9:49:76:1d:2d:f7:b8:5e:d8:4d:8d:d1:ff:
bb:5c:8d:a8:9b:db:c7:e5:44:99:6a:96:ad:bc:4c:
e1:75:9c:10:f1:8d:3a:e6:54:49:68:d7:d2:1d:91:
4d:f6:a5:3d:f8:23:6a:14:91:cd:71:fb:18:1a:01:
43:18:f4:20:e2:98:b1:d1:43:ce:7b:6e:4f:2a:3d:
22:c9:6a:2f:5a:0d:1c:2b:bc:e8:ae:ce:51:91:ed:
cf:01:4b:98:54:a2:b2:2f:49:93:0a:e8:47:39:23:
c1:5f:d5:fb:4b:27:6d:c1:ee:a5:00:23:3f:da:21:
e1:ce:89:2a:81:d2:3b:21:c2:fa:1e:61:bb:9a:34:
a5:54:54:f3:22:bf:42:f3:0f:6a:b8:53:2c:02:84:
f8:06:fb:e8:58:6d:3d:29:92:c4:00:a7:56:12:92:
dd:a4:53:66:cb:ba:83:28:c2:3d:0f:a9:53:b9:31:
43:4a:c4:d7:17:c6:0b:e9:58:95:ae:0d:a5:00:32:
6e:a1:06:75:d8:71:64:ab:71:6e:d5:09:89:9c:68:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5E:58:47:BB:1D:90:D2:BE:6D:19:8B:9C:4E:53:13:1F:E8:F7:8D
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/jl5YR7sdkNK-bRmLnE5TEx_o940.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.133.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6b:8a:56:98:2a:7e:5a:aa:a6:87:32:4b:57:ff:23:1a:48:
58:53:11:e4:3f:22:c4:50:d5:95:57:b4:8c:4d:ea:b2:44:cc:
6d:de:2f:7c:76:9a:dc:ef:ec:6b:e9:ee:3a:80:0c:37:5b:20:
03:8e:50:58:b1:42:ff:cc:e4:7e:52:bd:ff:8e:f6:7d:85:0a:
86:dc:a1:fa:70:3b:85:e8:dc:90:62:89:94:3d:30:4c:24:26:
f2:ff:a0:f3:7a:0b:28:fd:41:80:b2:e5:2d:8a:8c:8b:99:ab:
92:6b:95:f1:1a:90:3b:4c:08:0f:14:8c:84:e6:28:ee:28:70:
95:0a:2a:ce:5e:61:7f:20:a9:38:a4:70:4c:e8:e0:42:3f:e5:
27:3e:82:12:1d:ab:70:1b:12:7a:f6:5c:e3:1a:46:2f:e7:1e:
21:26:14:e4:43:5d:57:a9:29:4b:60:ff:69:10:f8:7f:76:bc:
0f:ba:0c:d7:b8:e9:56:36:a1:c5:bb:6c:1f:74:17:67:74:01:
97:00:52:c8:ff:25:a0:78:d4:a2:5c:64:25:e1:c2:32:d5:76:
93:5e:1d:ff:48:00:2a:7f:12:89:23:20:9b:61:fb:ed:2b:b0:
33:e3:9e:2e:09:7b:a3:aa:d4:b0:f2:e4:00:d3:a4:e8:86:47:
d7:82:62:75
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIDAJ+nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjEwODI5
MjMzNzU2WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4RTVFNTg0N0JCMUQ5
MEQyQkU2RDE5OEI5QzRFNTMxMzFGRThGNzhEMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn2DcmmR0YZbuJo4TH/Yd1D5riUVldVH7OzU+qy2ghhP/ic2o
dOSyCCIHQYnM99lJdh0t97he2E2N0f+7XI2om9vH5USZapatvEzhdZwQ8Y065lRJ
aNfSHZFN9qU9+CNqFJHNcfsYGgFDGPQg4pix0UPOe25PKj0iyWovWg0cK7zors5R
ke3PAUuYVKKyL0mTCuhHOSPBX9X7Sydtwe6lACM/2iHhzokqgdI7IcL6HmG7mjSl
VFTzIr9C8w9quFMsAoT4BvvoWG09KZLEAKdWEpLdpFNmy7qDKMI9D6lTuTFDSsTX
F8YL6ViVrg2lADJuoQZ12HFkq3Fu1QmJnGhTnwIDAQABo4IB1DCCAdAwHQYDVR0O
BBYEFI5eWEe7HZDSvm0Zi5xOUxMf6PeNMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBigYI
KwYBBQUHAQsEfjB8MEsGCCsGAQUFBzALhj9yc3luYzovL2NhLnJnLm5ldC9ycGtp
L1JHbmV0LU9VL2psNVlSN3Nka05LLWJSbUxuRTVURXhfbzk0MC5yb2EwLQYIKwYB
BQUHMA2GIWh0dHBzOi8vY2EucmcubmV0L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMaFzjANBgkqhkiG9w0BAQsFAAOCAQEAb2uK
VpgqflqqpocyS1f/IxpIWFMR5D8ixFDVlVe0jE3qskTMbd4vfHaa3O/sa+nuOoAM
N1sgA45QWLFC/8zkflK9/472fYUKhtyh+nA7hejckGKJlD0wTCQm8v+g83oLKP1B
gLLlLYqMi5mrkmuV8RqQO0wIDxSMhOYo7ihwlQoqzl5hfyCpOKRwTOjgQj/lJz6C
Eh2rcBsSevZc4xpGL+ceISYU5ENdV6kpS2D/aRD4f3a8D7oM17jpVjahxbtsH3QX
Z3QBlwBSyP8loHjUolxkJeHCMtV2k14d/0gAKn8SiSMgm2H77SuwM+OeLgl7o6rU
sPLkANOk6IZH14JidQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org