Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/B2uvWiwKQ5-yyAW-MI_sBhdkiDo.roa
File: B2uvWiwKQ5-yyAW-MI_sBhdkiDo.roa (raw, json)
Hash identifier: RKqryNzLxViUjGi3oNUYHYd30rmHYmKwp18gtIlCjaM=
Subject key identifier: 07:6B:AF:5A:2C:0A:43:9F:B2:C8:05:BE:30:8F:EC:06:17:64:88:3A
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 019887
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/B2uvWiwKQ5-yyAW-MI_sBhdkiDo.roa
Signing time: Fri 18 Apr 2025 22:53:09 +0000
ROA not before: Fri 18 Apr 2025 22:53:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199518
IP address blocks: 198.180.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 17:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104583 (0x19887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 18 22:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076BAF5A2C0A439FB2C805BE308FEC061764883A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:72:b9:67:09:ac:15:6f:03:ac:48:3d:93:6a:
f5:02:8f:51:33:40:5c:31:c6:f0:fe:2c:ce:b7:bb:
63:0c:47:17:70:f9:96:ed:1e:ef:68:79:66:a3:db:
b2:55:4f:13:bd:85:13:3d:67:98:3a:b5:68:58:b4:
e8:cf:ca:c1:a0:5f:5f:40:6b:1a:3e:3f:a4:ff:4a:
6a:94:52:26:60:d7:96:a1:be:5f:6a:ea:bd:43:16:
7f:0a:50:57:f0:16:b1:31:61:71:a5:6b:c2:e3:46:
90:1f:f2:16:13:3c:25:32:e4:7d:13:38:5e:4a:62:
ae:ed:70:00:a3:35:0c:d1:4b:2f:a5:12:9f:42:c2:
15:ae:40:77:87:2f:b9:2c:95:1d:69:d5:21:9b:05:
78:dd:14:f0:63:8a:80:31:0f:77:d6:59:40:ee:06:
3a:5d:4f:bf:d9:c6:c7:41:29:48:a0:7a:b4:54:d3:
8f:78:82:0f:33:fe:c1:4f:6e:27:f9:12:c1:36:3c:
13:8d:3f:e3:5e:8d:d2:c4:50:ad:72:15:55:22:99:
c3:b5:1a:7e:b9:0e:9a:e1:9c:a0:17:00:de:f4:cd:
9f:0a:42:a9:b6:11:bb:f8:9d:03:95:43:84:f5:52:
1a:f2:e8:c5:73:bc:af:c3:97:09:a3:d7:14:30:4a:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6B:AF:5A:2C:0A:43:9F:B2:C8:05:BE:30:8F:EC:06:17:64:88:3A
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/B2uvWiwKQ5-yyAW-MI_sBhdkiDo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e1:2f:3b:9a:8a:01:63:d6:ff:40:f5:19:b9:7a:4e:10:bc:
f6:24:a1:0c:5b:31:33:18:58:f5:f5:0f:e7:53:3a:bf:92:92:
65:44:69:cb:1e:0b:f5:27:fb:e8:3b:22:d3:a4:95:1e:58:3b:
c4:c3:68:da:02:52:19:7f:7c:2b:3f:2e:1e:06:dd:c6:0b:1d:
90:b8:4d:37:11:05:5b:5e:ea:3e:ff:61:7e:2f:43:a6:a6:bf:
26:e3:54:6a:3c:d6:dc:61:3c:d9:22:c9:f6:79:73:9a:bc:99:
1b:d0:52:71:58:bc:54:20:b6:1e:cf:d3:0d:f9:96:ef:05:14:
01:61:74:b0:83:b6:9a:11:67:26:92:eb:11:02:47:44:e0:29:
59:db:e1:bb:2f:11:8f:f8:33:f1:6a:d7:3f:5b:66:69:12:fa:
60:34:38:6b:bf:33:ca:bf:15:2f:a2:ee:4e:c3:1f:55:94:ed:
2f:56:91:42:cd:98:72:56:ec:0f:a4:43:d9:48:fe:66:2d:87:
25:3e:06:22:9f:59:44:aa:ee:7b:53:6e:60:87:f1:22:3e:66:
d2:bb:96:d5:71:d4:8a:f5:fa:1c:38:db:d0:7c:45:ef:22:67:
1d:79:11:a6:1c:c1:61:58:84:81:10:c5:9d:ee:73:97:83:c8:
c0:ee:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:39:44 2025 by rpki-client