Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q3W34EaUGoqsAZMVM5620Ot4RsY.roa
File: Q3W34EaUGoqsAZMVM5620Ot4RsY.roa (raw, json)
Hash identifier: 9reNNHvSLsMIRDzanBN8V4bCWFWovbug5a/6JQQajLY=
Subject key identifier: 43:75:B7:E0:46:94:1A:8A:AC:01:93:15:33:9E:B6:D0:EB:78:46:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197A15F36096EF70DF6A3D91FE3580771A6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q3W34EaUGoqsAZMVM5620Ot4RsY.roa
Signing time: Tue 24 Jun 2025 09:57:40 +0000
ROA not before: Tue 24 Jun 2025 09:57:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jun 2025 13:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:5f:36:09:6e:f7:0d:f6:a3:d9:1f:e3:58:07:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 09:57:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4375b7e046941a8aac019315339eb6d0eb7846c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:56:6e:8c:f3:b5:33:28:f9:f8:63:43:f6:
ec:84:e4:df:b7:19:78:45:5d:7c:95:92:82:b0:95:
b6:6b:b7:21:3a:7a:81:f0:65:09:da:30:44:84:df:
45:1e:d0:d0:6e:fc:73:f2:7d:3b:82:9c:13:c4:39:
5a:1d:36:87:34:e7:34:22:4d:b7:eb:a3:c7:2d:bd:
c6:38:26:e0:f7:45:91:85:8e:ce:68:ad:e7:1b:86:
95:e5:ef:96:4f:d1:7c:ee:76:29:bc:76:77:27:0a:
b3:69:b4:40:64:32:14:35:47:75:b3:04:6e:6b:23:
90:10:0c:a2:03:67:94:ca:f5:6f:eb:ab:18:af:31:
b8:ec:61:19:32:e5:8c:e2:c7:c3:71:05:35:94:9a:
49:12:f5:e8:e0:dc:02:32:e5:9a:5b:b3:d3:ce:75:
0b:ef:84:ba:a1:ba:f5:84:df:ce:02:a8:28:0b:cd:
1d:82:be:ea:73:ef:9a:a3:5d:c7:d0:bf:29:94:36:
c1:10:60:1e:a9:36:89:c9:48:93:34:46:97:61:63:
7b:55:ad:ed:2d:e9:35:16:f3:32:21:21:63:7d:0e:
47:70:36:19:56:e8:76:41:ad:6d:a6:c2:64:d5:91:
4f:b0:d7:30:c4:12:df:45:98:5a:4c:f3:f9:88:44:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:75:B7:E0:46:94:1A:8A:AC:01:93:15:33:9E:B6:D0:EB:78:46:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q3W34EaUGoqsAZMVM5620Ot4RsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.2.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.242.88.0/24
151.242.91.0/24
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a4:9b:54:7b:7c:a0:d3:ec:d4:17:3a:48:bf:3b:6e:ab:38:
9f:ba:cf:ac:24:83:66:5b:d2:9f:97:e5:c0:d6:d5:0d:07:6b:
e7:46:ec:31:0d:58:01:17:2d:a1:64:7d:72:f0:76:69:45:eb:
ac:a6:a9:27:da:87:0a:ef:ce:66:c8:7f:22:e6:30:00:d3:52:
a4:f2:3e:95:8d:cf:e0:b5:b6:df:a4:69:6d:05:b5:e2:0b:a2:
d5:df:ac:22:4a:2a:52:5b:71:e4:6b:bc:2a:14:c7:ae:d0:ea:
1f:51:59:3e:ef:c2:42:b3:9e:b3:fc:20:6b:91:65:a5:71:b1:
8c:18:c8:91:8e:e7:73:e9:40:c6:47:f8:d3:08:f6:e9:3d:5d:
27:3a:5e:b6:0e:1a:b0:0c:4d:7b:4b:a9:92:be:10:27:c6:19:
f6:b8:fd:cf:41:b3:4f:39:a7:39:9f:df:49:44:c9:12:cb:9a:
cc:d7:56:ff:cf:cf:b0:3b:b5:36:00:e8:24:6b:a0:3c:ad:26:
a6:a8:af:58:26:dc:4b:ca:74:9f:22:64:5f:48:c7:3b:4a:17:
a2:91:ce:a5:07:37:f2:99:7b:3b:9c:fe:05:92:ac:e2:e2:d1:
5a:6f:1c:0f:fe:f8:45:10:a2:d8:6d:52:e7:4f:71:23:85:d9:
f6:45:f4:14
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAZehXzYJbvcN9qPZH+NYB3GmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjI0MDk1NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mzc1YjdlMDQ2OTQxYThhYWMwMTkzMTUzMzllYjZkMGViNzg0NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunlWbozztTMo+fhjQ/bshOTftxl4
RV18lZKCsJW2a7chOnqB8GUJ2jBEhN9FHtDQbvxz8n07gpwTxDlaHTaHNOc0Ik23
66PHLb3GOCbg90WRhY7OaK3nG4aV5e+WT9F87nYpvHZ3JwqzabRAZDIUNUd1swRu
ayOQEAyiA2eUyvVv66sYrzG47GEZMuWM4sfDcQU1lJpJEvXo4NwCMuWaW7PTznUL
74S6obr1hN/OAqgoC80dgr7qc++ao13H0L8plDbBEGAeqTaJyUiTNEaXYWN7Va3t
Lek1FvMyISFjfQ5HcDYZVuh2Qa1tpsJk1ZFPsNcwxBLfRZhaTPP5iET6fwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFEN1t+BGlBqKrAGTFTOettDreEbGMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUTNXMzRFYVVHb3FzQVpNVk01NjIwT3Q0UnNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBAAl
yt8DBACX8AIDBAKX8AQwDAMEAJfwCwMEApfwGDAMAwQBl/AeAwQAl/AqAwQBl/A8
MAwDBAKX8EQDBACX8FoDBAKX8GAwDAMEAZfwfgMEAJfwmjAMAwQCl/CcAwQBl/Dg
AwQAl/DlMAwDBACX8OkDBACX8O4DBACX8PADBACX8PgDBAGX8P4DBACX8lgDBACX
8lsDBACX8y0DBAGX81gDBACX9AIwDQYJKoZIhvcNAQELBQADggEBADGkm1R7fKDT
7NQXOki/O26rOJ+6z6wkg2Zb0p+X5cDW1Q0Ha+dG7DENWAEXLaFkfXLwdmlF66ym
qSfahwrvzmbIfyLmMADTUqTyPpWNz+C1tt+kaW0FteILotXfrCJKKlJbceRrvCoU
x67Q6h9RWT7vwkKznrP8IGuRZaVxsYwYyJGO53PpQMZH+NMI9uk9XSc6XrYOGrAM
TXtLqZK+ECfGGfa4/c9Bs085pzmf30lEyRLLmszXVv/Pz7A7tTYA6CRroDytJqao
r1gm3EvKdJ8iZF9IxztKF6KRzqUHN/KZezuc/gWSrOLi0VpvHA/++EUQothtUudP
cSOF2fZF9BQ=
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:13:42 2025 by rpki-client