Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/F0kOwkDWdbDEixeg4OO_Uf-P7ok.roa
File: F0kOwkDWdbDEixeg4OO_Uf-P7ok.roa (raw, json)
Hash identifier: 6hewErpzDpkCKDeMc5rc2xkh1phbwu89aht7UiBQU0Y=
Subject key identifier: 17:49:0E:C2:40:D6:75:B0:C4:8B:17:A0:E0:E3:BF:51:FF:8F:EE:89
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 019885
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/F0kOwkDWdbDEixeg4OO_Uf-P7ok.roa
Signing time: Fri 18 Apr 2025 22:53:08 +0000
ROA not before: Fri 18 Apr 2025 22:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3130
IP address blocks: 198.180.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 17:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104581 (0x19885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 18 22:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17490EC240D675B0C48B17A0E0E3BF51FF8FEE89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:e2:70:1e:ac:1f:87:48:97:47:b3:9f:0c:
0d:f1:9d:10:81:ab:e2:e5:75:de:2b:30:be:e2:ce:
fe:18:bb:67:2e:2c:25:c5:7e:6a:b7:ac:fe:43:fa:
46:ec:71:d8:21:c7:41:5a:60:51:07:bc:07:b2:53:
8f:2f:e3:e8:63:67:2a:75:a5:70:69:71:40:ec:23:
3c:2b:1c:2f:76:28:53:a0:4c:ad:de:fb:c2:9d:60:
00:16:ec:7d:8f:4a:5d:50:4a:12:d2:08:83:22:90:
f7:50:a6:6c:6c:2b:bb:aa:af:bc:4a:28:92:5f:89:
bf:bd:14:d6:3c:d8:92:b1:4b:89:0a:19:1a:5b:39:
3a:e3:f1:5b:9f:3e:9c:40:7b:96:39:6f:1a:3c:20:
6f:18:0b:7c:8b:5a:63:de:1b:f9:c9:b4:ce:3b:b2:
c9:fb:6e:1b:01:1a:91:66:c1:a2:1e:cf:c6:67:3e:
a7:c5:53:39:4f:3c:aa:06:2a:c6:18:38:6d:b6:52:
e4:d7:b1:7c:f2:5c:11:a0:c0:f9:24:16:8b:2e:64:
3e:8d:44:54:37:a4:9e:57:98:05:ac:d2:6d:5f:e9:
6c:fb:6a:9f:01:72:b7:6a:cd:ac:cd:4b:27:b4:d1:
cb:52:65:79:45:b8:d8:c1:78:19:71:09:91:ed:fb:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:0E:C2:40:D6:75:B0:C4:8B:17:A0:E0:E3:BF:51:FF:8F:EE:89
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/F0kOwkDWdbDEixeg4OO_Uf-P7ok.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b7:61:01:fd:45:ec:c2:2e:36:d4:66:a2:8f:bc:ba:a3:d3:
63:76:2c:7d:bc:bd:92:ed:0e:c6:31:3d:a6:74:25:71:d0:08:
ee:95:18:fa:ca:47:63:04:33:4c:2b:c6:e1:cc:5d:5a:0c:67:
a2:f9:45:cb:a9:cc:bc:90:c5:97:0c:01:28:79:a5:e0:ba:39:
cb:9e:b6:0b:dc:41:18:ec:c2:c8:3b:72:7d:fb:14:a7:ca:a1:
63:8e:1d:de:4e:16:b8:5d:dc:e4:c8:2b:d8:b7:5f:5d:10:47:
c7:0f:49:7d:58:7e:ac:48:27:0f:fe:20:78:c5:93:fc:7b:93:
48:7a:a2:7d:59:66:da:63:f7:4c:3f:be:c6:77:b2:c1:7b:5e:
8f:ed:88:0b:b3:58:8f:70:30:10:dd:c5:23:80:0d:c9:11:79:
96:30:ff:2c:3a:f0:88:d6:ff:bc:4d:b7:d0:0b:b2:70:91:e0:
4f:4f:c0:30:00:eb:a3:81:2d:8c:7a:17:e4:b1:41:8d:8b:26:
33:50:6e:75:7f:3a:50:cb:fd:89:d4:57:12:27:b8:6d:ae:22:
74:70:32:74:82:69:ed:d3:40:5c:72:4d:58:e1:ae:ca:84:b6:
9f:99:ac:5b:00:16:5b:0a:66:84:16:80:58:c9:84:29:be:d4:
49:f6:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:28:07 2025 by rpki-client