Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/exYCqfKr6i4rOX0SQiXaX7k6cYQ.roa
File: exYCqfKr6i4rOX0SQiXaX7k6cYQ.roa (raw, json)
Hash identifier: 6O3BWLE+k08UGCJKY+DkzBkvrCRcV7QIFjvzkGMBhFY=
Subject key identifier: 7B:16:02:A9:F2:AB:EA:2E:2B:39:7D:12:42:25:DA:5F:B9:3A:71:84
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01988D
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/exYCqfKr6i4rOX0SQiXaX7k6cYQ.roa
Signing time: Fri 18 Apr 2025 22:53:14 +0000
ROA not before: Fri 18 Apr 2025 22:53:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203274
IP address blocks: 198.133.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 17:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104589 (0x1988d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 18 22:53:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7B1602A9F2ABEA2E2B397D124225DA5FB93A7184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:d3:8d:ab:58:2a:1f:e3:dc:8c:7b:28:e2:
b4:3d:56:10:34:57:bb:11:86:b6:fa:1b:76:25:61:
34:ad:99:b7:07:2a:1b:64:94:93:0b:ca:61:e4:e3:
b9:00:cd:7e:c9:c1:0f:4f:39:69:40:5f:52:c8:07:
95:5e:03:2f:45:77:61:ed:5a:9d:8d:f8:de:f8:28:
62:33:98:06:01:4f:55:06:a5:86:ee:af:af:36:5e:
9a:6b:0d:1f:1b:ec:74:c3:e2:a1:13:cf:7d:64:7c:
2c:35:25:56:81:39:6d:ee:81:c5:eb:3f:62:e5:2b:
89:21:7b:dc:97:40:0f:0d:f9:79:3f:08:3a:1c:bf:
4d:4a:e4:fc:99:f9:00:47:29:ad:d0:b5:91:44:7e:
3b:91:36:7d:1c:a9:2d:dc:fb:a7:cf:08:a8:19:c6:
38:6f:92:60:df:34:98:bc:a3:99:67:e0:ae:96:4e:
4a:67:6f:b2:03:88:80:44:64:8d:7d:64:d6:9a:6d:
f0:b4:6e:52:c8:67:23:38:2d:fe:c2:cd:56:e8:19:
42:5e:50:e7:f7:dc:fd:29:c0:0a:99:d7:5e:79:d9:
f6:a9:01:31:58:39:40:01:bc:43:6c:01:9a:76:94:
1f:d4:95:c2:47:0e:5e:a8:68:f2:99:e2:45:fa:8c:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:16:02:A9:F2:AB:EA:2E:2B:39:7D:12:42:25:DA:5F:B9:3A:71:84
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/exYCqfKr6i4rOX0SQiXaX7k6cYQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.133.206.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6d:2d:97:17:60:1c:d6:ad:ba:4b:70:28:38:9d:91:09:b9:
cb:af:b6:f9:d5:3d:fc:55:30:f3:78:19:4f:4e:b3:2a:9f:6c:
dd:f6:71:e7:40:98:44:77:62:96:c2:e5:b3:a1:7f:ae:f0:4c:
4d:da:cd:b5:4f:68:73:2f:51:09:8f:56:6c:f9:e2:6f:dd:e1:
18:60:3d:85:39:ee:87:4e:36:f2:de:c5:98:d4:27:27:e1:cd:
9d:97:39:92:ce:5d:c5:37:94:5b:55:25:8f:83:c8:91:92:0b:
99:ef:23:1f:87:f8:88:e1:29:0a:db:30:10:89:93:1c:c6:13:
7e:5b:f7:ea:b0:da:e4:0b:63:6e:80:0e:52:77:cc:b0:9a:f2:
19:25:ea:05:f9:39:e8:8f:e6:a5:02:8a:1e:1b:a4:c5:92:0a:
14:fd:41:83:d7:94:ce:ca:9e:c3:c2:bb:00:c4:ba:a2:17:8b:
88:8e:3b:5c:7e:e9:09:7e:62:41:d2:01:8b:d1:3e:82:7e:00:
3a:ab:3e:79:9d:61:d1:ed:2c:88:10:23:b3:c1:74:cb:d8:09:
4c:98:46:74:ee:1f:6d:ac:2a:b4:ac:5c:ba:79:94:b0:8c:42:
b7:04:da:68:0a:35:38:46:81:9c:d6:72:5f:65:d8:b2:01:4c:
68:6c:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:21:00 2025 by rpki-client