Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9UphuxOA-D3O4pqS-G628V3aQ5k.roa
File: 9UphuxOA-D3O4pqS-G628V3aQ5k.roa (raw, json)
Hash identifier: S4cJgXqXWEsFg/+Ki+bqOby8qS2+lKXTJ8HOfyzPG/I=
Subject key identifier: F5:4A:61:BB:13:80:F8:3D:CE:E2:9A:92:F8:6E:B6:F1:5D:DA:43:99
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FA8C51110AA6F1BD503A4B303B27B635
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9UphuxOA-D3O4pqS-G628V3aQ5k.roa
Signing time: Fri 11 Jul 2025 17:33:09 +0000
ROA not before: Fri 11 Jul 2025 17:33:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.134.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
151.244.216.0/22 maxlen: 24
151.244.250.0/23 maxlen: 24
151.244.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Jul 2025 09:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:8c:51:11:0a:a6:f1:bd:50:3a:4b:30:3b:27:b6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 11 17:33:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f54a61bb1380f83dcee29a92f86eb6f15dda4399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:17:4e:aa:2d:d1:ba:45:e1:dd:64:e4:49:
a8:8a:b9:f6:92:a5:a4:14:6c:08:58:7b:2c:64:44:
be:66:93:ec:11:85:b1:fa:bb:8b:6b:0a:f0:2d:68:
a9:9c:05:b3:b3:7c:9a:e9:f1:17:5a:28:bc:61:4d:
50:98:e1:42:dc:f5:bb:1a:92:d9:29:7c:9a:97:43:
bd:a3:fe:7c:92:8c:bd:ec:e3:13:6d:c9:a4:8e:cc:
1d:0a:dd:72:88:0a:c6:e2:6a:ad:09:9b:f5:cb:f1:
c1:2d:d9:d5:80:29:a1:f3:9a:65:07:16:04:9c:67:
75:8e:91:61:fd:61:4b:a7:ae:9b:a4:48:0d:ce:56:
db:23:4a:c6:a8:7c:ef:08:3d:21:61:fe:f0:b8:9b:
58:03:ab:a7:9d:20:cc:f4:f3:9a:9d:dc:ab:ee:a9:
95:bb:0c:d6:8d:f8:46:47:8b:3d:6a:09:ae:b8:32:
bf:99:75:4a:51:dd:70:60:4f:9a:60:c7:ba:91:02:
f7:2c:50:64:af:9e:cb:ef:ab:d9:e1:6b:61:81:81:
ca:50:9d:73:c3:01:04:c0:97:64:69:8f:69:ae:3f:
3c:31:3a:4f:75:bb:e2:0e:d0:c6:c6:f4:01:0d:83:
87:ce:fa:f7:a5:54:7f:dd:08:a6:76:cb:6c:ae:f7:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:61:BB:13:80:F8:3D:CE:E2:9A:92:F8:6E:B6:F1:5D:DA:43:99
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9UphuxOA-D3O4pqS-G628V3aQ5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.74.255
151.240.76.0/24
151.240.78.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
151.244.4.0/24
151.244.134.0/24
151.244.187.0/24
151.244.216.0/22
151.244.250.0-151.244.255.255
Signature Algorithm: sha256WithRSAEncryption
aa:69:cc:aa:b5:48:fa:b5:4c:9b:6b:b6:48:2d:35:23:74:09:
83:f6:17:b2:0e:b6:0c:1e:52:9b:e2:f9:87:1b:a3:f3:23:91:
90:b7:bc:d6:c6:c7:ac:63:24:9d:dc:31:57:4d:08:94:70:69:
6c:45:f6:cd:f7:d9:f5:2b:82:a0:0b:f5:e5:0a:9b:11:a3:97:
e3:7b:28:e1:0e:90:51:34:eb:70:f7:b8:01:7d:85:3e:20:44:
72:5c:1a:53:03:9a:55:65:ba:b1:63:5c:3b:32:f1:4d:bd:5d:
c5:a3:17:98:5e:85:87:bb:19:79:1c:23:4c:53:f2:d5:75:5e:
35:d5:a8:cc:0b:26:8b:2e:a5:53:d3:9a:22:f0:b9:cd:a1:66:
83:f7:d2:53:74:e9:c1:09:d9:0e:33:d3:31:00:03:ed:39:8c:
42:b2:dd:f9:6d:05:59:2e:67:26:5f:53:fb:71:4c:c3:bc:1a:
4b:ef:b7:6c:32:63:0a:18:19:3c:e6:71:4f:d7:c4:96:b6:80:
4a:fa:bf:9c:dc:05:da:2e:f5:26:f3:ea:3c:5e:b7:f7:e4:52:
5b:fc:4e:f0:e5:fc:71:2e:4e:f8:c6:3c:d6:17:46:ee:37:fa:
8b:53:6c:2c:01:17:6f:49:8c:88:4d:08:f1:fa:09:a1:52:0c:
84:00:05:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:38 2025 by rpki-client