Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/-dysu_mFSAgk8UG73lP7ttRD7_c.roa
File: -dysu_mFSAgk8UG73lP7ttRD7_c.roa (raw, json)
Hash identifier: bHO0wWFbo3kk1jXTRogzpJ2rwljz3nlRTXeD00HsRIE=
Subject key identifier: F9:DC:AC:BB:F9:85:48:08:24:F1:41:BB:DE:53:FB:B6:D4:43:EF:F7
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 019889
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/-dysu_mFSAgk8UG73lP7ttRD7_c.roa
Signing time: Fri 18 Apr 2025 22:53:11 +0000
ROA not before: Fri 18 Apr 2025 22:53:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 20 Apr 2025 17:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104585 (0x19889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 18 22:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=F9DCACBBF985480824F141BBDE53FBB6D443EFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:ca:03:40:81:75:a4:f4:73:4b:d9:f4:30:
23:93:83:35:7d:9d:d6:39:5f:2c:08:51:00:df:18:
27:83:2d:81:24:a1:95:87:54:47:ab:48:1e:e3:5a:
bd:12:8d:03:87:cc:2d:73:e2:b0:dd:6d:e1:4a:dc:
da:74:dd:a4:37:36:d5:d2:4a:03:ed:30:1b:9c:17:
80:90:65:95:a9:1a:4f:42:fa:84:1e:12:8c:b7:6a:
1e:ec:b3:8f:d0:02:4d:46:aa:95:1f:b3:d9:45:cf:
04:04:75:ca:57:c7:20:94:23:9e:33:36:b9:36:61:
4c:89:d1:c0:b4:00:ec:73:17:3b:31:27:84:01:2b:
a9:05:4d:a2:30:8e:c8:9e:46:17:86:60:80:7a:ab:
20:ed:23:e9:2a:8d:f3:db:ce:32:c0:75:4f:ef:5a:
3c:d7:25:7c:eb:e9:55:0f:f4:41:a3:2c:8f:14:28:
39:24:b6:ff:b9:68:2e:a0:13:95:ec:c2:8f:86:71:
f4:47:77:24:04:5c:1b:70:b2:8a:d2:34:2e:6c:1a:
d7:6b:3f:bf:ac:84:71:70:31:a9:08:1b:fe:e0:b7:
d4:5c:40:8e:c0:ea:9a:04:ba:91:18:7b:43:d4:a9:
84:c8:5d:8e:fb:04:3a:cc:0e:82:8a:6b:0e:2d:04:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DC:AC:BB:F9:85:48:08:24:F1:41:BB:DE:53:FB:B6:D4:43:EF:F7
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/-dysu_mFSAgk8UG73lP7ttRD7_c.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.0.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:e7:96:49:a0:f5:50:71:56:28:94:b8:d4:d0:eb:a6:b7:1b:
1a:10:6e:58:d3:92:81:a1:15:64:09:cd:86:5b:59:a2:4f:0e:
76:a1:ee:0c:90:c0:02:b0:1f:45:45:b4:5a:46:95:13:42:3a:
d6:e8:c6:8e:c9:18:da:d3:a2:ee:22:37:d4:db:36:be:05:ad:
fd:2d:44:e8:e1:2b:a9:1b:e6:66:d6:7e:8d:0d:cf:c5:9f:63:
79:a5:35:14:28:2f:2e:0c:1c:08:11:3e:35:99:87:cd:2e:06:
50:fe:59:d6:45:36:6c:9d:8c:fd:e1:dc:ad:50:5e:42:cc:a4:
d2:78:2c:a9:db:36:e7:94:05:25:14:6a:8d:43:62:c9:f6:be:
ab:09:73:34:25:1e:fe:c9:06:e1:85:5b:10:b6:03:0e:d4:4c:
2f:7d:a9:04:82:54:13:c7:d2:ab:70:57:ce:ae:b8:a8:b5:2b:
cc:36:34:7b:bb:ed:a6:0f:bc:85:da:d7:13:d1:03:d0:75:f6:
a0:18:d7:f6:e5:8f:ed:44:2f:39:a0:db:26:7f:2f:fa:87:61:
86:5e:a3:d5:f0:f7:01:bb:b7:24:09:57:ca:ce:f6:4d:e9:da:
d3:5d:28:16:cf:08:f2:40:f5:5a:df:33:5c:36:bc:96:94:0c:
87:50:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:07:10 2025 by rpki-client