Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/sVBeottZ_FB0siHuotaNV4GjxII.roa
File: sVBeottZ_FB0siHuotaNV4GjxII.roa (raw, json)
Hash identifier: 9EpRm3DgOyaTjobNnmDUnc3RCG6iVhtAY+sdFu9qQRE=
Subject key identifier: B1:50:5E:A2:DB:59:FC:50:74:B2:21:EE:A2:D6:8D:57:81:A3:C4:82
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: E9B5
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/sVBeottZ_FB0siHuotaNV4GjxII.roa
Signing time: Fri 30 Sep 2022 03:24:07 +0000
ROA not before: Fri 30 Sep 2022 03:24:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203274
IP address blocks: 198.133.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59829 (0xe9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Sep 30 03:24:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=B1505EA2DB59FC5074B221EEA2D68D5781A3C482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b1:0d:59:a4:c3:15:fa:98:b7:07:11:d6:a1:
99:fb:c7:b4:f9:c9:29:62:f4:b6:8e:54:a5:ff:d2:
9c:31:9f:c0:80:97:cb:1c:c5:25:f9:dd:a8:25:04:
51:c6:cf:0d:cc:3e:c0:da:4a:b8:92:98:bb:97:ed:
66:07:fb:7f:d1:54:05:9d:88:91:cb:f7:20:47:75:
ce:42:43:d6:b5:37:50:2c:e1:c8:67:cf:81:ee:5e:
0a:0c:ba:86:82:05:29:4c:29:08:23:37:fe:a3:4b:
cf:77:1a:89:95:67:dc:c9:0b:9e:13:7c:23:a5:bc:
02:12:c9:cd:ad:54:c7:ab:f5:37:f4:a4:d1:56:82:
56:63:41:88:47:60:17:20:6f:3f:e9:67:4b:07:f5:
f8:0a:f0:2f:7b:08:cc:b2:82:ab:db:ba:94:5a:49:
eb:95:fb:6e:00:cd:04:bd:3a:85:02:90:65:ed:b5:
c7:97:1e:01:83:6c:23:76:9f:64:1c:96:4f:27:bd:
f1:19:79:28:11:d5:27:d8:50:66:87:5b:c1:00:e2:
9d:f8:35:fb:3e:d5:20:ae:2c:0b:02:3f:c8:80:83:
a1:a4:63:37:77:fc:c5:13:94:91:ec:b2:90:2f:87:
18:f4:ac:40:50:08:0c:3e:ad:a7:f1:38:ae:5c:85:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:5E:A2:DB:59:FC:50:74:B2:21:EE:A2:D6:8D:57:81:A3:C4:82
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/sVBeottZ_FB0siHuotaNV4GjxII.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.133.206.0/24
Signature Algorithm: sha256WithRSAEncryption
94:39:a3:99:e7:a4:23:96:2b:f6:1a:3d:60:a9:41:ad:a4:9b:
ff:5a:ef:07:b7:8c:f7:70:c1:55:d3:a0:7b:5b:73:de:53:2e:
f4:66:94:58:fb:2b:4b:77:d2:9c:16:46:3f:15:69:ce:67:ba:
f3:3f:dd:ff:fe:21:d3:87:f0:d5:75:39:37:1e:17:a7:9d:1f:
21:5b:f2:d9:25:1b:1f:96:ec:38:10:9f:6e:45:9b:5e:e0:6d:
9e:96:d8:0c:a9:11:8b:32:f4:2d:f9:2f:da:27:7e:2b:e2:b0:
e5:28:56:16:33:93:25:6e:5c:1b:ba:1a:62:a4:73:ca:36:90:
f6:c9:0a:6c:e2:be:91:a9:72:4e:cd:a2:6c:dd:ca:6d:74:cb:
35:7d:b1:7b:da:fa:31:de:bd:ea:c1:3f:64:31:41:b6:34:a3:
ed:07:2f:93:30:f3:d2:b5:df:0d:aa:e4:63:17:83:9f:e1:c0:
c0:8a:ff:9d:03:14:97:38:c7:e5:80:92:25:2b:bf:9b:f1:93:
5a:9c:16:84:60:e9:42:5a:d8:ff:54:27:44:42:0b:46:93:de:
b3:d1:77:ce:6f:6b:c7:12:2b:99:97:a4:bc:40:a8:5b:34:08:
60:0b:08:dd:a7:94:15:8d:4b:af:10:52:b0:17:2c:8c:0f:f4:
3e:7c:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org