Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fBro_xzQDIvfg5fQXcRXLISEzZs.roa
File: fBro_xzQDIvfg5fQXcRXLISEzZs.roa (raw, json)
Hash identifier: VVsATiTKa+NbiqR2W1lBlsXAeA9CxqYPIy4Nnb6PHYc=
Subject key identifier: 7C:1A:E8:FF:1C:D0:0C:8B:DF:83:97:D0:5D:C4:57:2C:84:84:CD:9B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196706BBC90B80B2D793AD0757793947930
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fBro_xzQDIvfg5fQXcRXLISEzZs.roa
Signing time: Sat 26 Apr 2025 04:47:10 +0000
ROA not before: Sat 26 Apr 2025 04:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.50.0/24 maxlen: 24
151.243.97.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 04:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:6b:bc:90:b8:0b:2d:79:3a:d0:75:77:93:94:79:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 26 04:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1ae8ff1cd00c8bdf8397d05dc4572c8484cd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:94:15:8b:fd:0c:bb:65:9a:a2:c3:18:62:
97:69:e8:0c:93:42:47:26:cd:40:bf:e2:38:39:24:
83:1b:dd:92:e4:e5:34:c6:29:f5:09:9e:26:3b:3c:
5c:75:b5:08:ef:d7:50:7d:be:dc:49:2e:93:06:7d:
72:68:7c:7f:e9:c3:b3:55:cf:7e:90:0b:ec:0b:1b:
0b:8a:cf:6d:30:71:d4:2f:b7:c9:07:6c:03:87:df:
72:c2:89:ea:ff:92:7d:5a:6b:99:ed:57:8a:c0:45:
4b:95:b5:66:27:82:0e:3b:68:fb:65:2a:df:8d:a9:
75:b4:eb:0e:7e:08:be:87:26:9d:40:2e:ae:5a:6d:
cf:cd:5b:12:6f:b7:31:b2:e8:92:7b:ec:50:3f:de:
93:2a:6b:1e:11:65:52:cc:e1:59:9d:0e:ca:6e:de:
5a:97:cc:e3:f8:47:55:68:24:c7:73:54:f1:36:f5:
23:fc:57:6d:eb:d9:32:85:d1:30:a3:a0:20:25:68:
4e:82:f6:ce:33:51:94:be:ad:25:de:c3:45:44:c4:
5e:9c:3d:29:59:b5:4b:70:39:10:b0:cb:07:22:02:
63:a5:c7:d5:95:2f:29:12:dd:13:12:14:32:0f:39:
85:a8:76:25:68:55:69:24:99:b5:64:1e:6e:18:32:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1A:E8:FF:1C:D0:0C:8B:DF:83:97:D0:5D:C4:57:2C:84:84:CD:9B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fBro_xzQDIvfg5fQXcRXLISEzZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.242.50.0/24
151.243.97.0/24
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
16:18:b1:26:79:e6:33:88:0c:f2:0d:e9:f3:45:d2:cb:4f:7c:
c3:80:93:2c:02:b0:31:6f:c2:b8:8b:ad:0c:06:09:3b:f1:5f:
c7:b7:78:bd:8c:ec:76:49:2d:7e:4d:51:ff:a7:78:7c:be:0a:
2c:59:ae:fc:c3:3f:7c:6f:a1:e1:7e:30:74:73:d4:a9:d5:7d:
0c:a1:41:b7:55:6b:b2:47:e2:03:f2:ca:26:e2:2f:00:19:73:
98:54:7f:98:14:d8:0f:9c:c2:7f:b5:bc:12:85:e0:cd:cb:99:
05:df:ae:49:26:75:37:41:b2:8a:f3:b4:12:c2:2c:8d:5a:a8:
cd:f1:e1:98:04:49:7b:dc:e3:4c:b9:1d:fe:ad:e2:19:0d:00:
04:f7:65:58:06:2a:5e:16:f6:6d:04:ed:d9:d1:02:1a:60:81:
fd:d9:fb:96:13:1e:ef:c6:c1:2a:87:3e:64:dd:3c:fe:91:35:
9a:b1:d2:d1:b0:48:a4:99:91:a4:da:ad:93:6e:a6:bf:1b:22:
08:22:b2:41:f8:b8:7d:df:28:e9:a4:a2:8e:e8:04:22:d8:b2:
ed:52:72:56:de:1c:bc:c5:bc:f8:e1:72:66:85:61:68:ce:41:
1e:3b:49:9c:85:8f:4b:99:da:e1:65:be:cf:e3:c2:75:a3:b1:
0f:c1:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:57:06 2025 by rpki-client