Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GakHl0o6kVw8WFSxIx4OIfH4NUw.roa
File: GakHl0o6kVw8WFSxIx4OIfH4NUw.roa (raw, json)
Hash identifier: 5RT7QoxB0bY11m+VLTbhYFzzk76rfc6pBhbTyluDgAI=
Subject key identifier: 19:A9:07:97:4A:3A:91:5C:3C:58:54:B1:23:1E:0E:21:F1:F8:35:4C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197C5C85EBF7A4CEC9F20DBF498BA1123A6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GakHl0o6kVw8WFSxIx4OIfH4NUw.roa
Signing time: Tue 01 Jul 2025 11:38:52 +0000
ROA not before: Tue 01 Jul 2025 11:38:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.226.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.3.0/24 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.6.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.24.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.54.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.124.0/24 maxlen: 24
151.242.125.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.156.0/24 maxlen: 24
151.242.157.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.143.0/24 maxlen: 24
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.215.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.244.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/17 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 04:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:c8:5e:bf:7a:4c:ec:9f:20:db:f4:98:ba:11:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 11:38:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19a907974a3a915c3c5854b1231e0e21f1f8354c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:36:31:d1:28:91:d5:28:6f:9e:07:49:b8:
2a:9a:83:f0:9b:15:42:5b:3b:13:b5:63:41:c9:6b:
e9:7c:8b:dc:53:d6:13:dc:a7:29:6b:1c:2c:77:9a:
3b:40:a1:f7:1d:f8:ca:47:41:93:61:6f:25:4e:d4:
86:f7:02:6c:87:af:10:32:5a:20:77:ac:6b:09:d0:
aa:98:2e:b2:e8:a2:0e:db:f1:35:0b:42:e1:f9:79:
f6:d3:56:b1:ca:da:24:46:75:fa:52:10:82:23:6b:
1c:09:75:7b:8d:63:3e:5a:86:02:9c:47:ab:0b:31:
a7:69:a3:4c:40:ee:a8:8e:7e:0e:0d:0e:46:97:82:
67:c7:c2:72:66:77:f3:d9:89:af:5a:e0:67:d2:fc:
36:17:95:73:a3:84:19:e7:fd:aa:c3:46:7d:1f:1e:
00:99:5d:fa:c4:f2:f8:8a:b9:89:f6:6b:a0:c8:a2:
00:db:4b:c9:90:37:71:17:8f:d2:30:f3:c9:32:ed:
ac:aa:62:d5:ac:f7:84:38:b8:01:ec:de:fa:fc:9d:
6d:67:45:9b:7a:c2:d4:39:0d:1b:09:4f:b6:13:18:
92:7c:c8:e3:f9:43:d9:00:b3:5b:d4:d9:ee:22:84:
f0:a3:bc:77:2f:6e:f2:86:86:7d:d9:c2:0d:99:f8:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:07:97:4A:3A:91:5C:3C:58:54:B1:23:1E:0E:21:F1:F8:35:4C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GakHl0o6kVw8WFSxIx4OIfH4NUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.210.0/24
37.202.212.0/23
151.240.2.0/23
151.240.8.0/24
151.240.16.0/24
151.240.76.0/24
151.240.82.0/24
151.240.89.0/24
151.240.110.0/24
151.240.112.0-151.240.117.255
151.240.124.0/23
151.240.145.0-151.240.155.255
151.240.157.0/24
151.240.160.0/24
151.240.163.0/24
151.240.165.0/24
151.240.171.0/24
151.240.173.0/24
151.240.205.0/24
151.240.226.0-151.240.228.255
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.253.255
151.241.0.0/16
151.242.3.0-151.242.4.255
151.242.6.0/24
151.242.14.0/23
151.242.17.0/24
151.242.20.0/24
151.242.24.0/24
151.242.32.0/24
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.73.0-151.242.77.255
151.242.81.0/24
151.242.84.0/24
151.242.91.0/24
151.242.103.0/24
151.242.108.0/24
151.242.111.0/24
151.242.124.0/23
151.242.132.0/24
151.242.139.0/24
151.242.156.0/23
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.35.0/24
151.243.44.0/22
151.243.83.0/24
151.243.100.0/22
151.243.113.0/24
151.243.123.0-151.243.124.255
151.243.136.0/22
151.243.143.0/24
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.168.0/24
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/22
151.243.217.0/24
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.237.0-151.243.239.255
151.243.242.0/24
151.243.244.0/24
151.243.247.0/24
151.244.70.0/24
151.244.126.0/24
151.244.128.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
65:70:d7:95:1a:bc:05:2e:8f:c0:58:9f:e6:58:b7:e2:9d:9f:
d6:73:bd:64:1f:35:46:d9:68:d7:59:ca:a5:0a:f7:b2:c2:83:
71:ba:1f:8c:1b:f6:7b:96:b6:d1:b8:08:07:6c:46:f6:4f:57:
b8:9c:05:fe:03:91:35:20:f9:1d:8f:fe:a9:81:a4:45:83:95:
c1:4e:0a:7d:d3:e5:61:7d:e7:df:9d:10:b1:f0:5c:95:64:ab:
5a:54:c3:10:e9:cf:12:eb:d3:98:7a:2d:89:39:31:30:a5:b8:
85:ba:ce:ec:16:0b:1b:2f:08:9b:ab:3c:77:7f:a1:2c:c4:a6:
77:39:73:61:ee:bb:29:9d:c3:34:8a:40:bb:3e:88:4d:15:cf:
0c:4e:71:7d:da:a8:85:d5:4e:10:02:4d:d4:39:d3:a8:c7:24:
44:58:53:9f:8f:25:56:ef:38:cf:19:f3:19:82:35:4c:59:60:
32:db:6e:fa:b1:be:2c:b2:82:0d:e7:9c:9e:3e:6e:a1:27:3a:
00:84:0f:4f:d1:8b:06:f2:9a:2d:d5:e5:be:bb:19:0f:08:0c:
ea:bb:1c:75:60:c7:63:96:ed:74:20:d2:7e:44:e6:fb:07:76:
f8:5a:b8:64:31:1d:8e:ea:87:a1:b3:26:d9:0f:f8:8c:65:a9:
dc:bc:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:14:28 2025 by rpki-client