Route Origin Authorization
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138382e302f32322d3234203d3e2033393730.roa
File: 34352e3133322e3138382e302f32322d3234203d3e2033393730.roa (raw, json)
Hash identifier: w1isDKVN0a69Qn+Voa9xJMT5c1n+dNgnhn82kE3z6RE=
Subject key identifier: DF:1D:EC:45:2C:EA:F2:75:8D:14:D1:AD:51:AB:9C:87:A3:94:4C:93
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 7F712BA4A77AFBC7C2788A72B3B925E00BCF10F9
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138382e302f32322d3234203d3e2033393730.roa
Signing time: Mon 13 Jan 2025 12:58:00 +0000
ROA not before: Mon 13 Jan 2025 12:53:00 +0000
ROA not after: Mon 12 Jan 2026 12:58:00 +0000
asID: 3970
IP address blocks: 45.132.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 15:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:71:2b:a4:a7:7a:fb:c7:c2:78:8a:72:b3:b9:25:e0:0b:cf:10:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Jan 13 12:53:00 2025 GMT
Not After : Jan 12 12:58:00 2026 GMT
Subject: CN=DF1DEC452CEAF2758D14D1AD51AB9C87A3944C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:68:1b:e5:8f:44:71:75:d6:5c:b9:14:d9:
8f:e7:da:e2:db:d9:18:c0:60:e5:f9:83:f5:9a:74:
f7:d4:73:18:17:99:b2:e4:64:b7:e5:de:e1:13:b1:
92:39:9f:5b:d5:d1:c2:b8:b3:ee:41:a2:34:0b:da:
a4:90:6f:ed:9c:49:99:a0:b3:36:e1:4d:60:6e:bd:
5a:71:c3:ae:cf:1d:9a:7e:70:5c:79:f7:0c:6b:c9:
53:07:40:b5:08:5c:1b:6a:20:d1:06:a7:ed:3f:d0:
af:42:d2:eb:87:3d:cb:80:78:ea:3a:78:fb:6d:21:
1c:f2:86:e5:5d:c2:0d:fb:f4:0b:a1:a7:30:f6:c1:
bd:92:c4:f1:7e:c7:22:5a:e2:eb:2c:e1:66:a4:03:
f1:16:34:5e:e4:14:0f:e3:6b:2d:d6:72:14:df:c8:
61:d2:c8:b8:f9:84:7a:74:fa:f5:65:8d:6b:3a:f6:
99:12:95:4b:cd:bd:2c:90:2c:7d:ec:53:ca:33:9d:
5d:58:db:ca:a6:e5:2e:3b:da:9b:83:ba:e1:c2:9e:
98:8f:4d:b5:b7:91:52:b4:11:a5:05:27:7b:4f:da:
84:c9:b0:ef:12:d5:e6:7f:51:5f:64:f0:c9:16:02:
78:04:a5:d5:54:ed:6b:45:fb:17:bf:e9:21:07:db:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1D:EC:45:2C:EA:F2:75:8D:14:D1:AD:51:AB:9C:87:A3:94:4C:93
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138382e302f32322d3234203d3e2033393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
97:b6:74:17:dd:4e:43:98:97:a3:06:54:50:a2:06:12:f4:8e:
a9:5c:8c:bb:f4:34:ae:57:d2:f3:2b:7c:c7:d9:a3:7e:c8:03:
d8:fc:f9:18:a0:62:23:3d:3b:1b:21:bc:35:dd:63:32:d0:ef:
ed:e6:83:9c:0b:56:7d:b0:26:0c:7e:00:71:19:e7:cf:ed:a9:
33:6a:19:f9:84:4b:ae:f9:e4:b4:3a:5c:34:35:2b:14:b8:76:
ff:e2:3d:6b:be:57:41:8d:d2:13:3e:ca:08:69:89:f4:5a:09:
4b:1f:33:93:e7:cd:d2:b3:7c:ac:58:b9:c6:b1:28:eb:e5:82:
81:81:81:27:77:f4:d9:c1:81:8c:27:30:e8:1e:a4:0c:0d:56:
96:5c:f9:58:0f:e3:60:ab:b2:1c:72:c3:c1:19:ba:07:e4:54:
dd:ee:b3:da:af:e7:e4:49:71:7f:81:d2:9e:ee:15:c4:28:45:
b3:6c:5c:96:bd:9a:a8:e9:4e:d3:55:18:55:b4:39:84:d6:3b:
b5:1d:f9:42:67:38:74:3a:98:31:82:b3:bf:76:23:4f:6a:bd:
7f:fa:73:7d:36:6a:c2:29:aa:78:c4:fa:b2:dd:bd:84:79:b9:
97:38:1e:88:57:b3:60:26:36:a3:db:db:7a:4f:50:dd:7e:e3:
b1:5d:4f:78
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIUf3ErpKd6+8fCeIpys7kl4AvPEPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx
MjIzNkU5MjAeFw0yNTAxMTMxMjUzMDBaFw0yNjAxMTIxMjU4MDBaMDMxMTAvBgNV
BAMTKERGMURFQzQ1MkNFQUYyNzU4RDE0RDFBRDUxQUI5Qzg3QTM5NDRDOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcmgb5Y9EcXXWXLkU2Y/n2uLb
2RjAYOX5g/WadPfUcxgXmbLkZLfl3uETsZI5n1vV0cK4s+5BojQL2qSQb+2cSZmg
szbhTWBuvVpxw67PHZp+cFx59wxryVMHQLUIXBtqINEGp+0/0K9C0uuHPcuAeOo6
ePttIRzyhuVdwg379AuhpzD2wb2SxPF+xyJa4uss4WakA/EWNF7kFA/jay3WchTf
yGHSyLj5hHp0+vVljWs69pkSlUvNvSyQLH3sU8oznV1Y28qm5S472puDuuHCnpiP
TbW3kVK0EaUFJ3tP2oTJsO8S1eZ/UV9k8MkWAngEpdVU7WtF+xe/6SEH23EzAgMB
AAGjggHaMIIB1jAdBgNVHQ4EFgQU3x3sRSzq8nWNFNGtUauch6OUTJMwHwYDVR0j
BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj
b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5
Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn
Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j
ZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9rcmlsbC5y
Zy5uZXQvcmVwby9ycGtpLWJlYWNvbnMtY2EvMC8zNDM1MmUzMTMzMzIyZTMxMzgz
ODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMzMzkzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYS8
MA0GCSqGSIb3DQEBCwUAA4IBAQCXtnQX3U5DmJejBlRQogYS9I6pXIy79DSuV9Lz
K3zH2aN+yAPY/PkYoGIjPTsbIbw13WMy0O/t5oOcC1Z9sCYMfgBxGefP7akzahn5
hEuu+eS0Olw0NSsUuHb/4j1rvldBjdITPsoIaYn0WglLHzOT583Ss3ysWLnGsSjr
5YKBgYEnd/TZwYGMJzDoHqQMDVaWXPlYD+Ngq7IccsPBGboH5FTd7rPar+fkSXF/
gdKe7hXEKEWzbFyWvZqo6U7TVRhVtDmE1ju1HflCZzh0OpgxgrO/diNPar1/+nN9
NmrCKap4xPqy3b2EebmXOB6IV7NgJjaj29t6T1DdfuOxXU94
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:45:09 2025 by rpki-client