Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/IsXd9l9Cw1RJNkTBT7Pxi-CcL-s.roa
File: IsXd9l9Cw1RJNkTBT7Pxi-CcL-s.roa (raw, json)
Hash identifier: lrE3WzwzFmQNsU9p6sTjpahhUm8tmKGOP9loaMBcI9c=
Subject key identifier: 22:C5:DD:F6:5F:42:C3:54:49:36:44:C1:4F:B3:F1:8B:E0:9C:2F:EB
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 019888
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/IsXd9l9Cw1RJNkTBT7Pxi-CcL-s.roa
Signing time: Fri 18 Apr 2025 22:53:10 +0000
ROA not before: Fri 18 Apr 2025 22:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 17:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104584 (0x19888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 18 22:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22C5DDF65F42C354493644C14FB3F18BE09C2FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:88:d9:18:00:92:29:93:eb:ce:08:64:5d:48:
6f:47:93:98:e7:b0:57:8c:2b:15:2f:85:e6:dc:df:
66:05:3c:00:3a:fd:fd:69:18:f3:64:e5:97:5a:ee:
49:f3:35:9b:fd:a8:3a:93:cd:83:25:43:22:8f:26:
06:ee:81:19:f7:18:e4:3a:ce:d0:f5:c3:38:4a:f1:
3d:19:27:2b:72:83:1d:26:1c:d4:a3:62:26:c5:ad:
f7:1e:f8:b7:a2:da:b1:cb:e8:ef:88:fa:f4:83:f9:
e4:7f:6e:00:b8:10:2c:98:94:e2:66:4b:d2:5c:e2:
16:1e:ef:5f:51:32:2e:5f:9c:5d:8a:fa:b9:85:a8:
4f:7f:47:ec:48:86:b1:32:11:26:dd:3d:73:bf:ef:
10:15:b6:6d:2f:22:07:02:f7:16:01:34:20:5e:d1:
c8:52:83:d5:36:9e:37:d6:76:5d:0c:6b:d9:c1:35:
46:04:9d:47:79:c7:c6:b8:ce:fc:59:c5:fd:bf:cb:
42:cc:73:ee:b1:a0:7a:72:c6:ed:c2:a4:8b:a6:0d:
80:59:d9:24:9c:aa:65:01:06:e4:d1:d0:af:81:1f:
bc:a6:8b:ae:f9:7e:06:44:89:43:0d:ac:14:4e:30:
5d:51:f7:f0:b6:09:34:a3:c7:7f:b7:82:1d:6a:b5:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:DD:F6:5F:42:C3:54:49:36:44:C1:4F:B3:F1:8B:E0:9C:2F:EB
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/IsXd9l9Cw1RJNkTBT7Pxi-CcL-s.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.7.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4c:ab:5b:33:af:62:c0:70:27:f0:9a:b8:df:60:1a:56:9c:
7e:23:4a:9d:6f:ea:19:65:fb:6d:62:43:f5:77:ad:b7:2a:ba:
09:9d:e1:8a:52:fb:72:15:d0:82:71:ac:ce:aa:11:8d:d3:81:
b8:06:e3:0a:63:26:66:29:e1:6a:9e:e6:17:5a:ad:f0:5f:23:
94:e2:2a:5d:f7:d6:b0:bf:39:c3:24:e2:3f:a3:64:bb:ad:e9:
4b:30:ec:ff:b8:72:f4:a3:3e:c4:06:c0:79:d1:88:69:90:3d:
3d:0b:17:8d:f7:94:25:f5:44:aa:ce:90:e8:79:bf:e0:dd:b5:
be:60:a2:38:25:0e:8a:95:17:e3:bd:a3:ac:b5:2b:34:08:c0:
d1:73:b5:5b:e5:3d:5a:0f:24:d6:1d:89:55:d0:89:4b:f7:6a:
c3:7d:3e:cc:e7:7e:15:bd:2d:f9:6d:f5:91:56:b3:32:7c:d1:
51:a4:f5:d6:19:98:03:63:5a:90:16:93:b9:f3:bc:14:f5:ce:
ad:7a:40:c2:5b:b7:07:63:54:13:36:09:cc:91:d9:2a:56:ee:
20:2a:3b:6a:33:22:09:91:9f:cf:bc:51:7c:f9:53:1b:23:59:
e8:ab:bc:ce:6d:72:fa:8a:57:98:67:d8:94:bb:41:30:e7:00:
89:e6:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:16:38 2025 by rpki-client