Route Origin Authorization
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138392e302f32342d3234203d3e2033393730.roa
File: 34352e3133322e3138392e302f32342d3234203d3e2033393730.roa (raw, json)
Hash identifier: 0MDwZDj7jdneJOynVRcXmLLAvXOa/2WrAV5Go8b8aH0=
Subject key identifier: 19:C1:33:B4:A0:F3:40:E0:FE:E3:40:19:FC:53:31:BC:2F:DD:1D:A3
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 61F1157FD6E2D7A692B57C4E16526B9769A3A601
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138392e302f32342d3234203d3e2033393730.roa
Signing time: Fri 06 Jun 2025 13:24:14 +0000
ROA not before: Fri 06 Jun 2025 13:19:14 +0000
ROA not after: Fri 05 Jun 2026 13:24:14 +0000
asID: 3970
IP address blocks: 45.132.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 13:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f1:15:7f:d6:e2:d7:a6:92:b5:7c:4e:16:52:6b:97:69:a3:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Jun 6 13:19:14 2025 GMT
Not After : Jun 5 13:24:14 2026 GMT
Subject: CN=19C133B4A0F340E0FEE34019FC5331BC2FDD1DA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:46:e3:a3:7d:29:32:c5:fc:2e:f7:d5:1d:
20:b3:79:ed:00:76:58:28:6e:d3:de:a1:f0:7d:da:
03:fe:55:81:bf:af:9e:2e:c4:4e:2a:b7:5f:1d:6d:
78:86:56:28:df:89:42:82:42:a8:24:44:c0:28:ee:
69:73:ff:6f:eb:90:5d:91:22:d6:6a:08:2e:58:90:
f3:10:2f:b1:5f:46:f3:dd:1d:84:c0:0e:57:be:53:
0e:00:8f:7a:45:8d:db:5b:72:9b:57:12:20:76:65:
54:02:be:4f:3f:ec:40:0f:e8:85:1d:50:ef:4a:5c:
47:48:ed:be:e7:32:86:24:9d:f1:c2:73:b9:6c:99:
45:ce:df:23:fd:1e:38:13:69:c6:bc:aa:1f:2b:05:
89:6a:5a:3e:a9:67:b4:49:7e:be:27:19:af:b8:08:
36:da:0c:9c:41:a7:cb:ca:4e:f0:6b:a2:03:b4:e4:
f1:0c:0b:f8:ef:c4:5f:96:67:8f:3c:1d:7c:45:02:
d9:f1:d8:cf:a7:46:03:17:88:0b:86:8e:70:c4:27:
dc:d8:8e:49:4c:47:55:8c:58:96:6d:b0:c6:de:20:
09:04:e7:0e:e7:82:ea:6f:93:1c:71:c2:61:0f:6f:
f4:2b:1a:6f:94:ed:3d:bf:af:2f:2b:e7:7e:6d:54:
d9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C1:33:B4:A0:F3:40:E0:FE:E3:40:19:FC:53:31:BC:2F:DD:1D:A3
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3138392e302f32342d3234203d3e2033393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3e:1f:6a:de:ae:b6:5f:57:5d:f1:de:97:25:d2:fd:0f:1d:
cf:42:e3:d6:fa:97:82:16:f8:d4:86:db:2e:a6:1b:fb:95:f3:
c6:84:f1:0f:d7:4f:10:e9:6d:c5:59:e9:ea:2f:f5:69:ba:59:
7f:28:a9:6b:53:bc:12:ee:41:e4:49:b3:9f:4e:83:87:51:44:
15:53:6f:fa:01:dc:fb:d3:b1:f7:d7:e9:5f:52:9f:83:cd:24:
bf:a9:63:33:94:54:05:8c:39:9d:71:ea:1f:30:68:88:2d:bd:
d1:d6:a2:72:91:fc:00:0e:b3:af:50:69:70:4a:30:d9:c9:86:
74:32:f8:ef:29:b5:68:6f:9e:61:4d:83:bf:30:ec:df:5b:23:
c7:9b:66:78:a3:41:dd:6f:c8:cd:06:08:d4:b2:9b:73:49:06:
2c:d1:81:92:c2:77:ae:1b:08:f4:03:ca:1d:1c:8f:ac:f1:00:
64:4a:36:d7:6c:29:ce:a2:b0:69:6f:51:a9:bf:6b:4a:b1:2e:
48:70:f1:79:30:76:ca:eb:e3:3f:cb:bd:5c:9a:17:a0:39:cc:
cc:61:7d:35:38:38:ee:aa:db:02:ee:21:0f:6f:3d:34:37:66:
9b:22:90:d2:f2:81:f9:4a:21:af:f1:26:97:f4:81:0b:eb:08:
44:59:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:55:27 2025 by rpki-client