Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OLIdtS9M2m-7XU5sh0m32w-4X2M.roa
File: OLIdtS9M2m-7XU5sh0m32w-4X2M.roa (raw, json)
Hash identifier: w82caq0EfmsHLsf8NyZdGzSGyI3SpOQ/b99Jg/DgDaw=
Subject key identifier: 38:B2:1D:B5:2F:4C:DA:6F:BB:5D:4E:6C:87:49:B7:DB:0F:B8:5F:63
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D24369AA619B701ED84D563D9354C1CB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OLIdtS9M2m-7XU5sh0m32w-4X2M.roa
Signing time: Thu 03 Jul 2025 21:48:42 +0000
ROA not before: Thu 03 Jul 2025 21:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.226.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.3.0/24 maxlen: 24
151.242.6.0/24 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.24.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.54.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.156.0/24 maxlen: 24
151.242.157.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.143.0/24 maxlen: 24
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.215.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.244.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/17 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Jul 2025 08:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:43:69:aa:61:9b:70:1e:d8:4d:56:3d:93:54:c1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 3 21:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38b21db52f4cda6fbb5d4e6c8749b7db0fb85f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:f9:90:82:5c:76:a1:85:b7:a1:60:83:03:
e8:c3:53:f7:bc:2b:ef:01:eb:32:f4:f6:83:23:d5:
76:2b:67:30:eb:8d:45:6c:af:6c:87:bc:74:61:b3:
53:49:6d:8b:0a:4d:c4:b9:34:08:f5:e8:e7:4d:6d:
22:a2:35:44:e5:5f:ef:5d:31:d2:da:85:60:ce:8f:
cd:23:a2:84:0b:cd:2d:43:73:4a:bc:26:65:8a:17:
f0:2b:30:c3:bd:2f:3a:48:c8:82:3c:2a:e2:e8:a0:
ab:1b:ac:40:d0:4f:fe:3a:d7:31:ea:66:15:82:c5:
db:90:93:36:c0:87:95:b1:e6:29:10:1b:68:39:50:
3e:87:d5:90:cd:df:77:71:00:25:4a:8e:93:00:28:
be:4b:04:a5:47:19:2f:da:ee:90:f8:85:7a:89:13:
22:c3:c2:8d:af:56:b8:7d:62:78:69:c8:f6:9d:76:
a5:b7:c0:b7:23:c7:56:dc:ee:dc:6d:99:d6:d5:b7:
68:c8:df:e8:e8:9b:7f:94:d4:70:90:19:35:86:1b:
49:44:e1:16:40:12:91:15:ac:52:14:1b:ad:c1:3c:
57:ef:86:fc:a6:f0:4c:f8:8e:be:ec:6b:5c:eb:fe:
6b:aa:a5:3d:67:96:ea:72:86:5d:04:29:41:76:f8:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:1D:B5:2F:4C:DA:6F:BB:5D:4E:6C:87:49:B7:DB:0F:B8:5F:63
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OLIdtS9M2m-7XU5sh0m32w-4X2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.210.0/24
37.202.212.0/23
151.240.2.0/24
151.240.8.0/24
151.240.16.0/24
151.240.76.0/23
151.240.82.0/24
151.240.89.0/24
151.240.110.0/24
151.240.112.0-151.240.117.255
151.240.124.0/23
151.240.145.0-151.240.155.255
151.240.157.0/24
151.240.160.0/24
151.240.163.0/24
151.240.165.0/24
151.240.171.0/24
151.240.173.0/24
151.240.205.0/24
151.240.226.0-151.240.228.255
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.253.255
151.241.0.0/16
151.242.3.0/24
151.242.6.0/24
151.242.15.0/24
151.242.20.0/24
151.242.24.0/24
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.73.0-151.242.77.255
151.242.81.0/24
151.242.84.0/24
151.242.91.0/24
151.242.103.0/24
151.242.108.0/24
151.242.111.0/24
151.242.132.0/24
151.242.156.0/23
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.35.0/24
151.243.44.0/22
151.243.83.0/24
151.243.100.0/22
151.243.113.0/24
151.243.123.0-151.243.124.255
151.243.136.0/22
151.243.143.0/24
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.168.0/24
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/22
151.243.217.0/24
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.237.0-151.243.239.255
151.243.242.0/24
151.243.244.0/24
151.243.247.0/24
151.244.3.0/24
151.244.70.0/24
151.244.126.0/24
151.244.128.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
26:7b:41:e8:97:d4:8d:86:e3:85:1c:52:39:aa:4a:73:a0:70:
e7:26:97:05:49:10:bd:ac:e9:b9:2c:b9:cb:56:dd:e3:db:c4:
b2:bb:a7:a3:8a:aa:c1:99:cb:e6:55:5f:11:48:06:68:a0:0b:
60:6b:c8:6a:d2:ff:07:7b:9b:dc:79:9b:12:79:03:6b:a5:2c:
08:4a:08:c0:8f:33:88:91:52:0f:ff:43:c0:d5:4f:84:f8:a7:
18:aa:ae:cd:0f:f4:0e:3f:f9:3e:76:18:06:10:9e:95:b5:7b:
95:53:11:1e:66:a6:5e:82:23:34:b5:02:4c:98:e4:92:69:ef:
3e:68:1e:a5:06:36:ac:1c:00:04:64:26:7c:10:6b:44:01:98:
05:7d:80:01:74:6b:d4:fe:70:21:f8:3d:b5:f2:fa:12:d1:e5:
51:52:59:61:77:df:db:3b:02:e6:18:03:10:e3:cf:31:16:cb:
82:21:fb:b9:a2:20:c6:06:b0:d7:91:8c:b8:58:84:f2:34:6f:
34:b4:c4:0a:fb:d9:1a:d2:2a:05:72:9d:50:ad:09:88:b2:5e:
43:a1:b8:c0:40:45:3b:1f:db:e3:c2:ba:9b:01:ca:27:79:79:
f9:4f:3e:26:e0:a2:60:bd:4d:a9:a0:4a:40:79:ba:9d:76:e1:
1d:95:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:18 2025 by rpki-client