Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MZZQBXQzNbUYhHla5jqPsSCxUbA.roa
File: MZZQBXQzNbUYhHla5jqPsSCxUbA.roa (raw, json)
Hash identifier: w79l/4CNR7lUQIUB16zbrE5F1dBmyYBCRdRTSqTUfDA=
Subject key identifier: 31:96:50:05:74:33:35:B5:18:84:79:5A:E6:3A:8F:B1:20:B1:51:B0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FDFC22D74FB7C5948BB4DA41923ABF0F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MZZQBXQzNbUYhHla5jqPsSCxUbA.roa
Signing time: Sat 12 Jul 2025 09:34:09 +0000
ROA not before: Sat 12 Jul 2025 09:34:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.155.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.194.0/24 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.242.252.0/24 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Jul 2025 11:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:fc:22:d7:4f:b7:c5:94:8b:b4:da:41:92:3a:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 12 09:34:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31965005743335b51884795ae63a8fb120b151b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:17:56:17:cc:fc:1c:70:3e:8e:f5:5b:7a:85:
34:86:57:80:08:f6:5d:33:6b:7c:50:16:3d:ee:03:
5c:f3:86:b0:01:a8:d7:62:29:e1:6c:d3:ed:02:63:
dc:23:f7:4e:c7:92:2a:58:bd:90:93:a0:22:31:ed:
59:8f:9f:89:2c:69:11:26:32:03:66:9a:ac:e0:13:
ee:d5:01:01:2c:26:97:33:4c:dc:91:6f:6b:0e:d8:
c1:65:4b:90:2b:cd:9d:3e:4d:6b:9e:5f:a1:fd:67:
1e:3a:dc:a8:07:19:86:4e:10:94:b8:66:50:f2:79:
12:e4:25:03:e0:82:46:7e:5d:b3:1e:0a:50:ee:92:
4d:ad:b3:41:aa:a3:d0:5b:d5:2b:d5:ce:5e:6f:ca:
13:8d:ad:38:f7:ca:b7:d9:40:06:4a:29:94:3f:6a:
00:82:91:91:ec:7f:e6:bb:13:33:00:88:09:83:ba:
34:5d:ae:b9:85:06:91:dc:48:02:89:7a:96:1a:9a:
2b:b2:e5:c6:c1:d2:27:28:41:46:63:d2:ae:19:35:
77:e9:7d:9b:7c:35:82:41:8c:c7:d0:ac:83:d4:26:
b6:80:2d:fb:4f:45:a2:37:67:bd:da:b3:e9:78:02:
e8:63:98:82:91:3c:53:1a:6b:3a:1b:1c:51:67:63:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:50:05:74:33:35:B5:18:84:79:5A:E6:3A:8F:B1:20:B1:51:B0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MZZQBXQzNbUYhHla5jqPsSCxUbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.210.0/24
37.202.212.0/23
151.240.2.0/24
151.240.16.0/24
151.240.75.0/24
151.240.77.0/24
151.240.82.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0/23
151.240.124.0/23
151.240.145.0/24
151.240.147.0/24
151.240.150.0-151.240.155.255
151.240.157.0/24
151.240.160.0/24
151.240.163.0/24
151.240.173.0/24
151.240.228.0/24
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.250.255
151.240.255.0-151.241.255.255
151.242.20.0/23
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.84.0/24
151.242.132.0/24
151.242.155.0/24
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.35.0-151.243.36.255
151.243.44.0/22
151.243.83.0/24
151.243.100.0/22
151.243.107.0/24
151.243.110.0/24
151.243.113.0/24
151.243.123.0-151.243.124.255
151.243.136.0/22
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/23
151.243.217.0/24
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.237.0-151.243.239.255
151.243.242.0/24
151.243.247.0-151.243.251.255
151.244.56.0/24
151.244.58.0/24
151.244.70.0/24
151.244.88.0/24
151.244.126.0/24
151.244.128.0/18
151.245.0.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
54:80:97:7e:e3:ef:38:9f:34:1a:f3:e3:c9:fd:4a:44:45:9c:
ff:59:a6:e7:90:17:64:d8:db:b3:02:a6:c5:50:0f:c6:a4:84:
1a:78:81:83:12:8a:b5:4f:48:58:ec:11:59:db:1b:2c:65:3d:
2a:9b:4b:2c:02:c0:0d:fd:c5:7a:07:0c:8c:6e:36:5b:09:10:
62:c1:27:3b:af:7b:39:04:e6:c1:bb:83:63:5b:08:ad:a5:65:
99:32:ca:d7:78:b4:11:55:44:9f:59:1e:15:59:2d:53:70:ae:
9f:67:ca:9f:cf:a6:da:72:2b:80:14:6d:26:7c:8f:5d:61:aa:
55:26:97:e7:88:16:35:ff:bf:3c:4e:a9:51:9a:b9:c8:63:06:
24:c2:08:3d:54:13:d9:1a:44:dd:c3:30:ef:c2:7a:0a:3f:f5:
c1:5c:5b:c7:61:92:80:45:3f:48:f1:ed:38:d6:22:17:8d:05:
83:d2:64:e8:a4:64:9c:65:e4:d0:91:2a:4b:e0:c8:e4:61:9c:
84:e5:43:22:cf:17:88:3e:7e:bb:f4:f5:5b:7b:84:c1:7f:ed:
b7:c7:30:e4:53:63:8a:32:21:bf:0c:81:88:21:fb:fd:46:c4:
fc:d3:cb:1f:20:71:11:5c:2e:86:7f:44:d0:7c:ae:31:32:c8:
65:9f:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:38:00 2025 by rpki-client