Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PJ8u2NI7MLdSV6x3iZHpcrniW1o.roa
File: PJ8u2NI7MLdSV6x3iZHpcrniW1o.roa (raw, json)
Hash identifier: 2EkMxXP6gHegeCXIaz71aHvF2TtPkuZlOYzpWHxGiCU=
Subject key identifier: 3C:9F:2E:D8:D2:3B:30:B7:52:57:AC:77:89:91:E9:72:B9:E2:5B:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01981319ED5161618577E399F001A00CAF03
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PJ8u2NI7MLdSV6x3iZHpcrniW1o.roa
Signing time: Wed 16 Jul 2025 11:58:42 +0000
ROA not before: Wed 16 Jul 2025 11:58:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.203.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.242.133.0/24 maxlen: 24
151.242.136.0/23 maxlen: 24
151.242.144.0/23 maxlen: 24
151.242.155.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.242.0/24 maxlen: 24
151.242.252.0/23 maxlen: 24
151.242.252.0/24 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.243.252.0/23 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.60.0/22 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Jul 2025 11:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:19:ed:51:61:61:85:77:e3:99:f0:01:a0:0c:af:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 11:58:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c9f2ed8d23b30b75257ac778991e972b9e25b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:61:f1:8f:1c:31:5a:f8:e1:88:87:dc:d9:
5f:62:ce:1e:87:23:1f:cc:df:ca:c4:80:77:f8:7e:
99:2b:bb:37:47:f0:b8:6c:31:99:c8:ee:52:ff:41:
c9:f2:9b:ad:2d:4a:61:53:93:29:ff:cf:70:87:ea:
b2:81:27:f0:02:6d:74:3b:77:ff:5d:da:80:9b:f8:
4b:bc:e2:e2:c8:5c:67:fe:b7:14:b7:8b:e8:e1:f9:
80:e0:f1:84:9e:91:32:a5:8d:da:05:37:5d:2e:7c:
be:78:17:58:dc:fc:a0:99:b8:40:da:8e:7b:11:c2:
2b:2c:26:6e:46:85:08:38:27:c2:3a:67:a6:8c:99:
77:b9:3b:6b:83:b2:24:42:61:8b:77:32:51:98:23:
08:68:63:fa:94:5c:81:c3:38:b2:28:b3:44:7b:8f:
6c:47:ff:d6:38:8b:69:03:b3:d5:d0:d8:07:2d:c5:
58:dc:2e:7b:f7:67:12:26:fc:63:60:2a:23:31:e3:
2b:c6:3a:55:09:3b:66:60:79:13:82:07:e0:6b:3c:
ea:a4:f1:4b:36:a7:00:cb:1b:06:4f:71:56:39:d6:
c7:be:92:fd:0a:e3:7c:ed:36:7d:53:e9:10:12:32:
3f:de:65:bd:bf:bc:2a:c6:1c:77:85:74:a0:98:26:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:2E:D8:D2:3B:30:B7:52:57:AC:77:89:91:E9:72:B9:E2:5B:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PJ8u2NI7MLdSV6x3iZHpcrniW1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.203.0/24
37.202.212.0/23
151.240.2.0/24
151.240.16.0/24
151.240.75.0/24
151.240.77.0/24
151.240.82.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0/23
151.240.124.0/23
151.240.145.0/24
151.240.147.0/24
151.240.150.0-151.240.155.255
151.240.157.0/24
151.240.163.0/24
151.240.173.0/24
151.240.228.0/24
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.250.255
151.240.255.0-151.241.255.255
151.242.20.0/24
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.128.0/24
151.242.133.0/24
151.242.136.0/23
151.242.144.0/23
151.242.155.0/24
151.242.192.0/20
151.242.224.0/22
151.242.242.0/24
151.242.252.0/23
151.243.16.0/20
151.243.35.0-151.243.36.255
151.243.44.0/22
151.243.83.0/24
151.243.100.0/22
151.243.107.0/24
151.243.110.0/24
151.243.113.0/24
151.243.123.0/24
151.243.136.0/22
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/23
151.243.217.0/24
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.237.0-151.243.239.255
151.243.242.0/24
151.243.247.0-151.243.253.255
151.244.56.0/24
151.244.58.0/24
151.244.70.0/24
151.244.88.0/24
151.244.126.0/24
151.244.128.0/18
151.245.0.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
a8:27:4f:88:0e:26:58:8e:27:03:f3:78:1f:20:1a:66:98:33:
58:76:13:83:be:9a:f5:0b:2a:84:bb:4b:68:da:00:04:74:e0:
71:b5:60:0c:6b:30:6a:44:39:09:53:d8:61:95:45:fd:be:86:
ed:d7:30:40:2c:16:fe:33:6c:35:07:27:b4:d8:78:75:c1:e5:
e2:7b:26:a5:20:72:f8:be:c8:14:7f:3c:94:a4:37:4e:e7:7a:
1f:de:53:0c:e6:36:72:8e:ef:c2:ea:a3:c4:e7:c6:37:90:b1:
a5:de:44:df:df:6e:1e:c8:56:12:59:32:c6:e9:52:7e:17:66:
88:a7:43:6e:53:3d:74:d0:46:92:4e:bd:d8:fd:c9:18:22:7c:
55:4a:77:b2:1a:f2:94:42:fe:2a:2e:b3:1c:36:91:ed:e7:b2:
9f:03:30:07:ae:5c:74:1a:07:b9:f4:01:99:d0:10:fc:87:9d:
cc:33:07:41:55:a4:c3:99:8c:bf:cb:92:ec:54:9c:cd:f2:73:
2a:aa:38:e3:61:5d:72:ef:cd:d2:ac:99:2f:46:30:d5:94:95:
b4:d0:f8:73:2d:3f:9e:56:96:3c:5c:a3:09:0a:e1:de:f0:c9:
ba:ac:81:98:f1:db:54:d1:af:94:04:b8:77:d7:33:c9:04:5c:
77:fa:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:13:47 2025 by rpki-client