Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BJRm6SVP2kTqXJUJjl23AOe9fog.roa
File: BJRm6SVP2kTqXJUJjl23AOe9fog.roa (raw, json)
Hash identifier: lLFotAenU4G9JG62pU5yPRgA5aox/80cvZWbjUQSowM=
Subject key identifier: 04:94:66:E9:25:4F:DA:44:EA:5C:95:09:8E:5D:B7:00:E7:BD:7E:88
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197C08F8EC2DAEFBBABD6F608FF3565BF43
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BJRm6SVP2kTqXJUJjl23AOe9fog.roa
Signing time: Mon 30 Jun 2025 11:18:43 +0000
ROA not before: Mon 30 Jun 2025 11:18:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Jul 2025 07:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:8f:8e:c2:da:ef:bb:ab:d6:f6:08:ff:35:65:bf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 30 11:18:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=049466e9254fda44ea5c95098e5db700e7bd7e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:00:69:db:d6:77:64:fb:44:1a:0c:7d:e4:
78:bb:f3:64:d9:ea:a4:8c:c9:c5:0e:4f:b9:e1:df:
c3:a7:18:ec:54:40:04:45:0c:91:93:be:7f:39:0e:
09:3f:24:ca:25:a5:c6:c7:78:96:77:d2:b4:89:de:
c1:c9:02:6a:6a:36:21:19:b3:e0:7c:d9:1b:e8:22:
c6:be:e6:68:c9:21:bd:00:49:35:3e:e8:ed:ac:14:
c8:a3:a5:13:57:17:37:a4:3d:e6:44:5d:86:cc:3c:
14:25:f8:07:a6:bb:b0:01:33:a4:0d:c6:69:a9:20:
4c:69:55:1f:1d:20:cc:ae:20:b0:4c:07:f2:37:df:
94:25:bd:c1:88:56:3e:3d:73:2e:96:fc:9f:6b:e5:
b5:59:30:1c:65:10:fb:00:39:ad:7a:f8:c8:02:06:
32:22:cb:6d:6b:3c:62:a2:0c:27:e1:c1:fa:02:50:
f7:6f:c2:08:28:f6:7d:09:62:53:e8:55:4c:dd:12:
ee:33:e4:60:a8:69:46:e2:dd:5a:cd:cd:90:f4:f3:
49:7d:ef:b0:a6:89:de:bc:d4:23:69:f4:44:e7:32:
82:41:f6:75:5c:16:47:83:00:ff:b5:53:4e:0f:36:
3f:b7:85:50:df:b5:24:71:b0:e7:34:f4:85:38:09:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:94:66:E9:25:4F:DA:44:EA:5C:95:09:8E:5D:B7:00:E7:BD:7E:88
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BJRm6SVP2kTqXJUJjl23AOe9fog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.2.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.241.1.0/24
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
Signature Algorithm: sha256WithRSAEncryption
53:16:16:26:a0:4e:6d:b5:eb:17:63:91:53:37:18:6f:ca:d8:
38:31:53:8e:db:27:47:c0:3a:11:b6:54:63:9f:9a:fd:f0:90:
7f:61:e3:7f:0b:8e:25:b6:58:45:8f:40:0a:05:02:35:ba:19:
e8:8a:88:03:1d:f6:c2:1c:80:5a:4c:0c:6e:82:58:bf:9f:ff:
bc:6b:aa:26:04:c6:e4:8a:e9:d9:2c:30:ac:ab:e0:7b:6f:3b:
35:2c:11:46:b8:f5:4e:cf:9a:48:07:04:47:3f:d8:c7:3c:06:
1a:a3:2d:8b:e3:f6:d9:8b:fe:34:35:75:e3:d9:45:0d:0d:ea:
2a:03:69:51:9b:25:c4:aa:74:d5:23:7f:6c:99:ca:3a:06:50:
b4:cd:78:e0:1a:50:7e:2c:78:84:99:3d:d3:10:f3:3c:1a:08:
bf:be:03:f3:5e:5c:63:d3:17:e9:55:49:ef:02:25:da:1b:52:
a8:c6:41:cb:ee:24:99:fc:2a:07:1d:58:c8:bf:f8:cd:b8:88:
3a:0d:86:b1:2d:0a:cd:8b:6a:6a:b0:8f:06:bf:7c:b9:34:16:
d1:b2:9e:14:c6:f2:7b:31:05:94:3b:c2:a8:fe:df:2a:b3:30:
bb:ad:98:6a:ee:1e:1e:ff:19:b9:f8:95:28:9e:d9:31:eb:76:
4c:79:05:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:07 2025 by rpki-client