Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ys2icnQZFNgrLd4uirDVvr_oAz8.roa
File: ys2icnQZFNgrLd4uirDVvr_oAz8.roa (raw, json)
Hash identifier: gAEMMhwiE6Mxr/57wJHrOTk/kFoURsi1U7BF5txm/XM=
Subject key identifier: CA:CD:A2:72:74:19:14:D8:2B:2D:DE:2E:8A:B0:D5:BE:BF:E8:03:3F
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01988B
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ys2icnQZFNgrLd4uirDVvr_oAz8.roa
Signing time: Fri 18 Apr 2025 22:53:13 +0000
ROA not before: Fri 18 Apr 2025 22:53:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3927
IP address blocks: 198.180.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 17:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104587 (0x1988b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 18 22:53:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CACDA272741914D82B2DDE2E8AB0D5BEBFE8033F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:bd:9f:25:f1:b2:bf:0c:78:1b:dd:7f:d5:
f8:13:63:68:0b:64:0d:be:71:d4:68:af:19:5a:26:
57:55:1b:c4:79:f7:ee:24:a1:65:2a:4f:d7:4a:fe:
3e:35:ed:5b:cd:af:77:2f:bb:da:6a:ff:37:13:11:
80:70:a5:85:35:24:6b:4b:d8:92:54:f8:10:70:de:
86:8d:00:59:33:93:25:03:33:a4:af:7b:99:c8:f3:
fa:89:ff:bf:6c:eb:9a:c9:d7:16:50:4b:5e:59:98:
a4:a4:b7:ac:5c:5d:fd:2d:74:57:07:de:f0:24:47:
65:c9:64:4f:a9:e6:a8:16:18:2f:4e:00:55:fc:f5:
f9:73:66:a6:0f:d8:61:9a:04:28:e3:93:2a:4a:b4:
38:30:98:77:46:2d:d6:28:78:76:d7:66:4c:17:0c:
b0:21:52:6e:bf:77:31:22:7c:22:40:09:36:90:3d:
bf:22:33:44:75:f2:71:3e:27:3d:a1:f1:09:0f:42:
ac:c9:d6:bb:a6:89:86:d7:55:b1:74:3d:1d:a5:04:
3b:fd:1d:52:51:06:77:a5:0e:a7:f3:d9:ed:f0:83:
80:38:0d:80:13:74:8e:a9:40:83:2b:fa:e7:c2:20:
83:d9:50:dc:6b:b8:48:ab:c3:08:82:57:c4:96:4f:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:A2:72:74:19:14:D8:2B:2D:DE:2E:8A:B0:D5:BE:BF:E8:03:3F
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ys2icnQZFNgrLd4uirDVvr_oAz8.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
198.180.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a8:10:b3:0c:79:37:00:3e:f5:62:99:87:99:32:d3:dc:3c:
b8:6a:dd:07:d3:5d:0b:d9:44:3c:82:13:34:c4:c3:37:d6:6c:
bb:0d:8f:c8:fa:7d:c8:2a:ad:b5:19:6d:05:36:5d:8b:2c:d0:
61:69:12:1b:ef:70:d0:bd:e1:c4:36:3d:a6:b2:5c:13:a5:38:
06:07:1c:95:1d:91:b9:14:f0:b5:1f:94:fc:88:93:9e:b1:ce:
f2:b0:08:5c:6a:f3:81:16:88:52:d7:3c:b2:a0:91:16:6f:0a:
fa:97:78:5f:58:84:35:a7:1e:1c:38:c1:03:6b:bf:2d:94:ce:
b5:59:7a:8b:5e:d7:ac:1d:0c:7e:62:b0:73:17:f8:fa:93:2d:
be:d3:9e:6a:f6:34:37:a4:4a:05:43:55:5b:d7:38:ba:4b:73:
ba:71:c3:0d:6e:a1:b5:d9:46:43:fd:03:91:36:10:39:d4:03:
b5:a8:81:f7:6b:4d:5e:45:af:86:47:35:9d:e7:90:e9:63:f7:
32:88:6c:5b:a7:d0:87:64:1b:b4:1a:f3:0e:90:0f:aa:db:82:
8f:b3:64:4d:00:14:39:16:66:77:4e:e0:6d:38:dd:e0:39:73:
bf:9a:4d:d3:77:92:da:3b:ce:85:4a:99:95:e8:7d:76:7a:87:
78:f0:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:04:05 2025 by rpki-client