Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A-L9lZiE8W5o7Rh-PQJl0ggC9lE.roa
File: A-L9lZiE8W5o7Rh-PQJl0ggC9lE.roa (raw, json)
Hash identifier: 8Olcyf5f7x+eaJIay1LpVG1m0INHoGtzmzXNAZjeY1k=
Subject key identifier: 03:E2:FD:95:98:84:F1:6E:68:ED:18:7E:3D:02:65:D2:08:02:F6:51
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1486BD4F05A43C0ECD5C84BD416E298
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A-L9lZiE8W5o7Rh-PQJl0ggC9lE.roa
Signing time: Fri 27 Jun 2025 12:06:42 +0000
ROA not before: Fri 27 Jun 2025 12:06:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.226.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.54.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.124.0/24 maxlen: 24
151.242.125.0/24 maxlen: 24
151.242.129.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.143.0/24 maxlen: 24
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.164.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.215.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.221.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.234.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.240.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/17 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:48:6b:d4:f0:5a:43:c0:ec:d5:c8:4b:d4:16:e2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 12:06:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03e2fd959884f16e68ed187e3d0265d20802f651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:c3:0a:af:fb:72:1b:16:02:ee:a3:28:39:
20:4b:a0:ba:23:79:53:ec:9a:10:f3:ab:be:a9:37:
b2:9d:92:0a:89:db:a5:a6:9f:93:54:3f:4a:44:d9:
f3:aa:6d:38:7e:37:10:b2:60:ea:fb:32:a0:81:69:
ca:ee:00:fc:3a:bf:5f:51:05:fb:04:2a:70:6b:01:
54:3d:f9:32:2c:5a:25:a7:59:38:b6:c4:96:49:8a:
74:4f:f5:5c:9a:d6:5f:67:67:df:44:cb:18:be:99:
3a:0c:c5:5d:8d:5b:ef:8a:11:c8:2c:25:45:1b:53:
d8:7b:b2:7b:6a:91:0a:e5:d9:9d:68:ac:a9:fa:6e:
1e:cf:80:ea:bd:88:62:4a:25:4d:b6:7a:41:4c:b9:
00:95:d3:ba:2c:77:0d:f9:10:5d:93:bb:1d:73:29:
d6:38:29:25:3c:ac:9a:61:9b:3e:66:c6:85:62:ce:
5e:4f:1a:30:81:df:64:e7:a6:6f:83:cf:bc:a0:57:
8d:ee:30:85:68:79:9a:b8:26:77:05:92:d9:69:74:
a6:46:c8:10:ec:68:d3:d7:41:46:2c:17:ce:6b:12:
43:6e:0b:11:80:ff:95:84:1c:02:a3:c8:0c:c4:a5:
dc:98:49:01:d4:2f:51:c8:ff:f9:ac:a2:56:42:bd:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E2:FD:95:98:84:F1:6E:68:ED:18:7E:3D:02:65:D2:08:02:F6:51
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A-L9lZiE8W5o7Rh-PQJl0ggC9lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.210.0/24
37.202.212.0/23
151.240.1.0-151.240.3.255
151.240.8.0/24
151.240.10.0/24
151.240.16.0/24
151.240.76.0/24
151.240.82.0/24
151.240.89.0/24
151.240.100.0/24
151.240.110.0/24
151.240.112.0-151.240.117.255
151.240.124.0/23
151.240.145.0-151.240.155.255
151.240.157.0/24
151.240.160.0/24
151.240.163.0/24
151.240.165.0/24
151.240.167.0/24
151.240.171.0/24
151.240.173.0/24
151.240.175.0/24
151.240.205.0/24
151.240.226.0-151.240.228.255
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.253.255
151.241.0.0/16
151.242.20.0/24
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.84.0/24
151.242.103.0/24
151.242.108.0/24
151.242.111.0/24
151.242.124.0/23
151.242.129.0/24
151.242.132.0/24
151.242.171.0/24
151.242.192.0/20
151.242.224.0/22
151.243.16.0/20
151.243.35.0/24
151.243.38.0/24
151.243.44.0/22
151.243.83.0/24
151.243.100.0/22
151.243.113.0/24
151.243.123.0-151.243.124.255
151.243.136.0/22
151.243.143.0/24
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.164.0/24
151.243.168.0/24
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/22
151.243.217.0/24
151.243.220.0/23
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.234.0/24
151.243.237.0-151.243.240.255
151.243.242.0/24
151.243.246.0/23
151.243.254.0/24
151.244.70.0/24
151.244.126.0/24
151.244.128.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
8d:0c:4b:8b:16:52:6a:8a:7c:bc:97:14:b4:54:2f:79:f4:d1:
81:4d:54:7c:0e:dd:37:de:cc:23:0d:4d:f3:d0:d4:65:14:77:
20:68:e4:59:70:bd:15:f3:a1:0f:b4:21:46:a7:18:45:76:f5:
ee:58:6e:76:d6:4e:17:04:fb:fb:dd:e5:b2:ed:80:d8:12:2a:
72:52:e5:8c:53:9e:d4:42:d4:87:6b:63:e1:27:7a:bc:b9:27:
dd:d0:28:f4:db:95:64:82:af:a1:e9:4b:47:5a:37:b3:44:59:
14:4c:e3:06:2f:2c:e2:99:22:78:f3:9f:84:7b:94:06:d3:04:
d0:69:08:1b:20:46:d7:37:8f:94:68:5d:a1:de:a6:2a:3a:bc:
8d:f3:0b:9d:cf:e8:a0:dc:8e:ec:1e:a9:48:43:db:6c:6c:5e:
d1:5d:24:3a:fa:02:d0:33:5e:ca:f1:08:c2:d3:b6:a3:cc:4a:
df:14:ee:64:07:9d:26:27:05:22:45:74:9c:6f:69:08:1a:a2:
63:d3:11:ad:e3:61:71:b3:30:55:08:45:63:87:45:c0:65:d5:
79:76:9f:b9:97:94:8b:f9:de:e4:13:9b:51:0b:1e:e0:6b:e8:
39:aa:99:21:49:f2:08:21:1a:ee:ed:ec:69:5a:0f:7d:06:19:
38:ef:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:16:01 2025 by rpki-client