Route Origin Authorization
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138382e302f32322d3232203d3e2033393730.roa
File: 34352e3133322e3138382e302f32322d3232203d3e2033393730.roa (raw, json)
Hash identifier: 88AWLhHld8IPZmM7tEgVRWomCt5hmAe0t/kotEEUMHE=
Subject key identifier: F5:EF:97:B9:96:CF:25:DA:03:1B:E1:F7:A7:4F:77:29:4C:77:2C:25
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 4F467B723251BB38CD19C980A1601BBE351F93EE
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138382e302f32322d3232203d3e2033393730.roa
Signing time: Thu 09 Jan 2025 17:16:37 +0000
ROA not before: Thu 09 Jan 2025 17:11:37 +0000
ROA not after: Thu 08 Jan 2026 17:16:37 +0000
asID: 3970
IP address blocks: 45.132.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 Jan 2025 12:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:46:7b:72:32:51:bb:38:cd:19:c9:80:a1:60:1b:be:35:1f:93:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Jan 9 17:11:37 2025 GMT
Not After : Jan 8 17:16:37 2026 GMT
Subject: CN=F5EF97B996CF25DA031BE1F7A74F77294C772C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:30:e1:e7:3c:0b:a9:35:28:9d:28:8d:fb:
08:4d:37:24:c5:5c:0d:95:2f:6b:7c:5d:d3:90:18:
63:02:61:e9:75:09:67:e0:c3:b3:c9:7e:7c:da:d7:
8d:b7:00:87:65:37:24:2b:be:2d:e9:55:65:d5:bb:
22:4a:f2:4f:70:1b:f9:1a:49:78:bd:37:c1:c5:bf:
1e:73:cf:93:dd:74:f6:f3:f3:9f:70:48:4e:92:69:
c5:51:a3:63:93:b3:62:78:4c:a5:4c:f4:3c:19:5c:
4a:d1:6f:cf:f0:0d:c3:c0:c7:e7:7b:e5:16:d4:25:
e6:d1:ec:e6:a4:59:30:bf:9f:ed:d0:56:6e:cf:3d:
6f:b2:b4:12:3d:39:0a:40:ec:32:8e:65:dd:a7:f7:
97:b9:c7:4b:e4:96:25:9d:f8:b6:76:4f:74:ca:05:
53:ac:e6:fb:63:20:eb:40:82:c3:29:5f:dc:24:32:
c6:07:ba:61:05:00:67:a7:34:ac:f2:1f:e7:b7:8b:
4c:bf:a1:76:6e:49:9c:6e:d3:02:00:fd:0c:64:ba:
f4:59:06:20:96:69:87:e1:21:6b:d8:74:2f:e8:97:
70:7c:62:6b:10:d5:2b:ec:92:0b:6d:be:f9:49:c1:
92:83:d3:bd:7c:7c:c2:b0:a4:7b:31:36:77:49:77:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EF:97:B9:96:CF:25:DA:03:1B:E1:F7:A7:4F:77:29:4C:77:2C:25
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138382e302f32322d3232203d3e2033393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:f9:62:df:4c:7f:de:26:cb:f2:06:99:fe:56:74:a2:76:8e:
ad:c8:3c:d3:d6:a7:64:ae:11:81:75:7d:0e:7f:99:ce:3b:46:
6d:aa:d1:1b:93:ab:b6:6a:a1:67:33:29:1d:8c:ab:4f:8f:4c:
59:a3:2f:12:68:89:6d:15:d0:b3:e8:9d:31:02:62:cf:cf:b5:
47:be:3e:6f:e4:96:d5:26:60:79:56:fc:08:28:7f:fe:e0:70:
67:73:32:ea:60:67:26:5d:74:a7:1d:52:5a:15:4a:c6:52:01:
b9:cd:ef:23:47:da:94:f8:fb:e2:1b:b2:92:d8:85:a7:6a:45:
78:01:1d:3c:fa:51:74:6b:4f:84:12:91:27:ba:68:04:b5:af:
6e:dd:17:34:f9:4f:27:43:43:44:02:c5:a4:e5:05:e0:da:d6:
67:2e:48:9b:a6:d6:cb:67:0c:39:6e:81:97:fa:0d:c1:d9:e4:
0c:0a:91:9b:48:2c:5b:5c:c6:c1:e5:9b:71:ca:b2:69:47:ca:
69:2f:f2:d1:f1:b1:0a:ff:f8:c1:b4:04:93:01:08:de:84:04:
fd:15:5c:63:92:fa:07:c2:95:1c:54:0a:b3:0f:58:a1:bd:8b:
9b:e4:4f:e4:49:97:68:8d:8f:3e:21:54:aa:2d:8c:91:04:f8:
f9:d0:25:a4
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIUT0Z7cjJRuzjNGcmAoWAbvjUfk+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx
MjIzNkU5MjAeFw0yNTAxMDkxNzExMzdaFw0yNjAxMDgxNzE2MzdaMDMxMTAvBgNV
BAMTKEY1RUY5N0I5OTZDRjI1REEwMzFCRTFGN0E3NEY3NzI5NEM3NzJDMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/DDh5zwLqTUonSiN+whNNyTF
XA2VL2t8XdOQGGMCYel1CWfgw7PJfnza1423AIdlNyQrvi3pVWXVuyJK8k9wG/ka
SXi9N8HFvx5zz5PddPbz859wSE6SacVRo2OTs2J4TKVM9DwZXErRb8/wDcPAx+d7
5RbUJebR7OakWTC/n+3QVm7PPW+ytBI9OQpA7DKOZd2n95e5x0vkliWd+LZ2T3TK
BVOs5vtjIOtAgsMpX9wkMsYHumEFAGenNKzyH+e3i0y/oXZuSZxu0wIA/QxkuvRZ
BiCWaYfhIWvYdC/ol3B8YmsQ1SvskgttvvlJwZKD0718fMKwpHsxNndJd8pDAgMB
AAGjggHaMIIB1jAdBgNVHQ4EFgQU9e+XuZbPJdoDG+H3p093KUx3LCUwHwYDVR0j
BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj
b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5
Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn
Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j
ZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9rcmlsbC5y
Zy5uZXQvcmVwby9ycGtpLWJlYWNvbnMtY2EvMC8zNDM1MmUzMTMzMzIyZTMxMzgz
ODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMzMzkzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYS8
MA0GCSqGSIb3DQEBCwUAA4IBAQDi+WLfTH/eJsvyBpn+VnSido6tyDzT1qdkrhGB
dX0Of5nOO0ZtqtEbk6u2aqFnMykdjKtPj0xZoy8SaIltFdCz6J0xAmLPz7VHvj5v
5JbVJmB5VvwIKH/+4HBnczLqYGcmXXSnHVJaFUrGUgG5ze8jR9qU+PviG7KS2IWn
akV4AR08+lF0a0+EEpEnumgEta9u3Rc0+U8nQ0NEAsWk5QXg2tZnLkibptbLZww5
boGX+g3B2eQMCpGbSCxbXMbB5ZtxyrJpR8ppL/LR8bEK//jBtASTAQjehAT9FVxj
kvoHwpUcVAqzD1ihvYub5E/kSZdojY8+IVSqLYyRBPj50CWk
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:42:52 2025 by rpki-client