Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/zBw3pNSFJDf09s3zF-IoAHXJRUE.roa
File: zBw3pNSFJDf09s3zF-IoAHXJRUE.roa (raw, json)
Hash identifier: Vw7VxjTYLqcONjybGdYEm9OIjBh0VWYjIppAS4lM3Os=
Subject key identifier: CC:1C:37:A4:D4:85:24:37:F4:F6:CD:F3:17:E2:28:00:75:C9:45:41
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01988A
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/zBw3pNSFJDf09s3zF-IoAHXJRUE.roa
Signing time: Fri 18 Apr 2025 22:53:12 +0000
ROA not before: Fri 18 Apr 2025 22:53:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3130
IP address blocks: 192.83.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 17:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104586 (0x1988a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 18 22:53:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CC1C37A4D4852437F4F6CDF317E2280075C94541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:f0:d6:1e:22:75:5f:fe:78:45:14:e9:16:
92:64:5e:38:0a:e9:73:71:2f:a5:00:d2:d3:61:87:
c6:57:47:ba:ef:48:cf:af:76:e2:32:9f:3a:62:75:
a1:c8:ee:54:99:5d:8b:71:3a:49:22:2e:7f:28:d7:
6a:15:d0:71:15:f2:c0:72:af:cd:4d:a7:d2:3d:c5:
6e:25:01:71:7a:71:82:b0:46:d8:15:e3:f6:c2:29:
a9:6c:dd:a8:ae:c0:57:eb:5d:52:1d:13:2f:2d:86:
f2:94:7f:cf:14:6b:b0:68:91:6e:98:e7:6e:74:c2:
4b:86:d6:ce:53:a8:7a:f7:30:29:f9:8b:f4:57:96:
75:81:75:fd:81:70:bc:42:db:df:1f:3c:d4:8f:1c:
13:ae:fb:28:56:3a:dc:15:04:80:52:b3:b9:f4:38:
3a:80:c8:ad:30:b4:97:0b:be:4b:f1:64:5a:ae:82:
87:c6:ae:c6:f1:f6:60:1d:ce:0d:39:fd:43:ae:8f:
10:7c:0a:d7:99:70:62:35:5d:70:0e:d0:15:01:fa:
04:f5:ca:22:15:f9:3d:c6:64:2f:67:92:c8:15:05:
8c:98:26:59:ee:4a:50:8c:b5:30:9c:89:5b:d8:d6:
31:f9:66:d1:db:dd:65:7f:e9:ed:9d:b2:33:e1:6c:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:37:A4:D4:85:24:37:F4:F6:CD:F3:17:E2:28:00:75:C9:45:41
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/zBw3pNSFJDf09s3zF-IoAHXJRUE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2b:03:3b:21:fc:8f:eb:2e:3e:6a:e2:da:02:98:9b:77:8a:
b8:2f:8c:42:61:13:67:5e:88:d0:60:b6:c2:b9:07:b8:86:82:
bb:c5:5d:f1:b8:0d:a5:e2:8f:73:4b:bc:08:dc:69:28:80:d4:
89:15:fb:f9:5e:62:3d:59:a1:f9:23:9e:24:65:0f:02:80:cf:
0d:09:4b:16:cd:5b:85:f3:6a:e8:5b:e7:dd:45:32:96:42:fa:
ac:87:6a:2b:a0:a5:c7:21:31:38:e8:b9:c0:9b:e0:c7:da:58:
7b:7f:6a:ff:f2:2f:52:c0:a7:8d:44:6e:56:31:78:ec:bb:a4:
ba:b7:60:ef:0a:b6:15:4e:42:59:bb:13:74:51:15:6e:fc:41:
d9:a0:b9:e3:ba:84:19:a2:7b:17:3e:0d:25:ce:9f:19:ef:88:
82:d2:a4:66:c7:fe:fc:79:9d:f5:3c:75:84:b0:ae:6f:1b:7d:
58:3e:23:67:c8:f1:81:81:50:ed:22:9d:ff:3d:4c:a1:16:18:
93:f7:2f:45:37:18:54:ae:3b:bc:fd:33:b0:04:51:a8:d9:8e:
f6:6a:1e:77:bd:fe:6a:b9:f0:9e:b5:bc:43:0c:1d:e3:50:1b:
81:01:dd:71:e9:95:de:42:58:00:ab:d1:ac:3c:b2:3c:fa:f1:
88:11:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:03:53 2025 by rpki-client