Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QP-2Zt5KpfZ2U1ZlA2JETcmNZ8s.roa
File:                     QP-2Zt5KpfZ2U1ZlA2JETcmNZ8s.roa (raw, json)
Hash identifier:          v30zNHYHMQwICAag/42/S7pVF0QxEu+Xv5tWnOfv5L0=
Subject key identifier:   40:FF:B6:66:DE:4A:A5:F6:76:53:56:65:03:62:44:4D:C9:8D:67:CB
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0197E448C388F3306E41EAD8E219930C4657
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QP-2Zt5KpfZ2U1ZlA2JETcmNZ8s.roa
Signing time:             Mon 07 Jul 2025 09:47:43 +0000
ROA not before:           Mon 07 Jul 2025 09:47:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        37.202.223.0/24 maxlen: 24
                          151.240.4.0/24 maxlen: 24
                          151.240.5.0/24 maxlen: 24
                          151.240.6.0/24 maxlen: 24
                          151.240.7.0/24 maxlen: 24
                          151.240.11.0/24 maxlen: 24
                          151.240.12.0/24 maxlen: 24
                          151.240.13.0/24 maxlen: 24
                          151.240.14.0/24 maxlen: 24
                          151.240.15.0/24 maxlen: 24
                          151.240.16.0/24 maxlen: 24
                          151.240.17.0/24 maxlen: 24
                          151.240.18.0/24 maxlen: 24
                          151.240.19.0/24 maxlen: 24
                          151.240.20.0/24 maxlen: 24
                          151.240.21.0/24 maxlen: 24
                          151.240.22.0/24 maxlen: 24
                          151.240.23.0/24 maxlen: 24
                          151.240.24.0/24 maxlen: 24
                          151.240.25.0/24 maxlen: 24
                          151.240.26.0/24 maxlen: 24
                          151.240.27.0/24 maxlen: 24
                          151.240.30.0/24 maxlen: 24
                          151.240.31.0/24 maxlen: 24
                          151.240.32.0/24 maxlen: 24
                          151.240.33.0/24 maxlen: 24
                          151.240.34.0/24 maxlen: 24
                          151.240.35.0/24 maxlen: 24
                          151.240.36.0/24 maxlen: 24
                          151.240.37.0/24 maxlen: 24
                          151.240.38.0/24 maxlen: 24
                          151.240.39.0/24 maxlen: 24
                          151.240.40.0/24 maxlen: 24
                          151.240.41.0/24 maxlen: 24
                          151.240.42.0/24 maxlen: 24
                          151.240.60.0/24 maxlen: 24
                          151.240.61.0/24 maxlen: 24
                          151.240.68.0/24 maxlen: 24
                          151.240.69.0/24 maxlen: 24
                          151.240.70.0/24 maxlen: 24
                          151.240.71.0/24 maxlen: 24
                          151.240.72.0/24 maxlen: 24
                          151.240.73.0/24 maxlen: 24
                          151.240.74.0/24 maxlen: 24
                          151.240.76.0/24 maxlen: 24
                          151.240.78.0/24 maxlen: 24
                          151.240.79.0/24 maxlen: 24
                          151.240.80.0/24 maxlen: 24
                          151.240.81.0/24 maxlen: 24
                          151.240.82.0/24 maxlen: 24
                          151.240.83.0/24 maxlen: 24
                          151.240.84.0/24 maxlen: 24
                          151.240.85.0/24 maxlen: 24
                          151.240.86.0/24 maxlen: 24
                          151.240.87.0/24 maxlen: 24
                          151.240.88.0/24 maxlen: 24
                          151.240.89.0/24 maxlen: 24
                          151.240.90.0/24 maxlen: 24
                          151.240.96.0/24 maxlen: 24
                          151.240.97.0/24 maxlen: 24
                          151.240.98.0/24 maxlen: 24
                          151.240.99.0/24 maxlen: 24
                          151.240.126.0/24 maxlen: 24
                          151.240.127.0/24 maxlen: 24
                          151.240.128.0/24 maxlen: 24
                          151.240.129.0/24 maxlen: 24
                          151.240.130.0/24 maxlen: 24
                          151.240.131.0/24 maxlen: 24
                          151.240.132.0/24 maxlen: 24
                          151.240.133.0/24 maxlen: 24
                          151.240.134.0/24 maxlen: 24
                          151.240.135.0/24 maxlen: 24
                          151.240.136.0/24 maxlen: 24
                          151.240.137.0/24 maxlen: 24
                          151.240.138.0/24 maxlen: 24
                          151.240.139.0/24 maxlen: 24
                          151.240.140.0/24 maxlen: 24
                          151.240.141.0/24 maxlen: 24
                          151.240.142.0/24 maxlen: 24
                          151.240.143.0/24 maxlen: 24
                          151.240.144.0/24 maxlen: 24
                          151.240.145.0/24 maxlen: 24
                          151.240.146.0/24 maxlen: 24
                          151.240.147.0/24 maxlen: 24
                          151.240.148.0/24 maxlen: 24
                          151.240.149.0/24 maxlen: 24
                          151.240.150.0/24 maxlen: 24
                          151.240.151.0/24 maxlen: 24
                          151.240.152.0/24 maxlen: 24
                          151.240.153.0/24 maxlen: 24
                          151.240.154.0/24 maxlen: 24
                          151.240.156.0/24 maxlen: 24
                          151.240.157.0/24 maxlen: 24
                          151.240.158.0/24 maxlen: 24
                          151.240.159.0/24 maxlen: 24
                          151.240.160.0/24 maxlen: 24
                          151.240.161.0/24 maxlen: 24
                          151.240.162.0/24 maxlen: 24
                          151.240.163.0/24 maxlen: 24
                          151.240.164.0/24 maxlen: 24
                          151.240.165.0/24 maxlen: 24
                          151.240.166.0/24 maxlen: 24
                          151.240.167.0/24 maxlen: 24
                          151.240.168.0/24 maxlen: 24
                          151.240.169.0/24 maxlen: 24
                          151.240.170.0/24 maxlen: 24
                          151.240.171.0/24 maxlen: 24
                          151.240.172.0/24 maxlen: 24
                          151.240.173.0/24 maxlen: 24
                          151.240.174.0/24 maxlen: 24
                          151.240.175.0/24 maxlen: 24
                          151.240.176.0/24 maxlen: 24
                          151.240.177.0/24 maxlen: 24
                          151.240.178.0/24 maxlen: 24
                          151.240.179.0/24 maxlen: 24
                          151.240.180.0/24 maxlen: 24
                          151.240.181.0/24 maxlen: 24
                          151.240.182.0/24 maxlen: 24
                          151.240.183.0/24 maxlen: 24
                          151.240.184.0/24 maxlen: 24
                          151.240.185.0/24 maxlen: 24
                          151.240.186.0/24 maxlen: 24
                          151.240.187.0/24 maxlen: 24
                          151.240.188.0/24 maxlen: 24
                          151.240.189.0/24 maxlen: 24
                          151.240.190.0/24 maxlen: 24
                          151.240.191.0/24 maxlen: 24
                          151.240.192.0/24 maxlen: 24
                          151.240.193.0/24 maxlen: 24
                          151.240.194.0/24 maxlen: 24
                          151.240.195.0/24 maxlen: 24
                          151.240.196.0/24 maxlen: 24
                          151.240.197.0/24 maxlen: 24
                          151.240.198.0/24 maxlen: 24
                          151.240.199.0/24 maxlen: 24
                          151.240.200.0/24 maxlen: 24
                          151.240.201.0/24 maxlen: 24
                          151.240.202.0/24 maxlen: 24
                          151.240.203.0/24 maxlen: 24
                          151.240.204.0/24 maxlen: 24
                          151.240.205.0/24 maxlen: 24
                          151.240.206.0/24 maxlen: 24
                          151.240.207.0/24 maxlen: 24
                          151.240.208.0/24 maxlen: 24
                          151.240.209.0/24 maxlen: 24
                          151.240.210.0/24 maxlen: 24
                          151.240.211.0/24 maxlen: 24
                          151.240.212.0/24 maxlen: 24
                          151.240.213.0/24 maxlen: 24
                          151.240.214.0/24 maxlen: 24
                          151.240.215.0/24 maxlen: 24
                          151.240.216.0/24 maxlen: 24
                          151.240.217.0/24 maxlen: 24
                          151.240.218.0/24 maxlen: 24
                          151.240.219.0/24 maxlen: 24
                          151.240.220.0/24 maxlen: 24
                          151.240.221.0/24 maxlen: 24
                          151.240.222.0/24 maxlen: 24
                          151.240.223.0/24 maxlen: 24
                          151.240.224.0/24 maxlen: 24
                          151.240.225.0/24 maxlen: 24
                          151.240.229.0/24 maxlen: 24
                          151.240.233.0/24 maxlen: 24
                          151.240.234.0/24 maxlen: 24
                          151.240.235.0/24 maxlen: 24
                          151.240.236.0/24 maxlen: 24
                          151.240.237.0/24 maxlen: 24
                          151.240.238.0/24 maxlen: 24
                          151.240.240.0/24 maxlen: 24
                          151.240.248.0/24 maxlen: 24
                          151.240.254.0/24 maxlen: 24
                          151.240.255.0/24 maxlen: 24
                          151.243.45.0/24 maxlen: 24
                          151.243.88.0/24 maxlen: 24
                          151.243.89.0/24 maxlen: 24
                          151.244.2.0/24 maxlen: 24
                          151.244.4.0/24 maxlen: 24
                          151.244.134.0/24 maxlen: 24
                          151.244.187.0/24 maxlen: 24
                          151.244.216.0/22 maxlen: 24
                          151.244.250.0/23 maxlen: 24
                          151.244.252.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Fri 11 Jul 2025 17:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:e4:48:c3:88:f3:30:6e:41:ea:d8:e2:19:93:0c:46:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jul  7 09:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40ffb666de4aa5f6765356650362444dc98d67cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:04:79:83:a1:ee:46:df:4e:16:13:05:11:
                    33:e3:8e:3e:4e:ce:ae:cb:ce:49:76:29:c4:4e:12:
                    91:bb:99:4b:83:8d:88:97:0a:f3:bf:44:a2:08:14:
                    42:b3:9d:0c:68:76:62:cf:4c:75:c5:8a:d5:92:43:
                    97:3b:7d:39:7f:ed:70:42:d6:e2:2d:a9:a4:95:7e:
                    d9:a1:1e:65:ff:08:04:17:a0:6d:3b:29:77:54:ef:
                    99:24:9a:56:18:be:e7:b4:3e:88:d1:28:f1:60:dd:
                    65:c4:0e:d4:fd:a3:72:85:9f:81:30:9a:69:27:32:
                    03:df:a5:ed:6e:45:5b:c7:76:19:a3:29:8a:1a:11:
                    c8:d4:8a:20:7e:87:f8:51:f6:c8:55:82:7e:40:2d:
                    17:33:b3:75:5b:df:0e:8a:27:3f:b7:d9:62:e0:ae:
                    1d:12:b4:7b:0b:95:41:7a:7e:4d:92:4a:c1:c7:8e:
                    88:7d:f6:db:1c:13:d3:08:a6:94:a3:9c:91:e7:28:
                    a6:1a:b4:3e:98:57:69:e2:4e:be:63:4d:99:15:dc:
                    a7:80:b5:06:bb:7d:58:99:ee:d9:18:a5:1c:91:15:
                    ff:f0:12:d9:ba:35:45:c1:da:ad:e5:c0:10:57:96:
                    7c:62:3c:5b:0b:29:84:17:74:2e:e9:5a:7d:57:a3:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FF:B6:66:DE:4A:A5:F6:76:53:56:65:03:62:44:4D:C9:8D:67:CB
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QP-2Zt5KpfZ2U1ZlA2JETcmNZ8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.202.223.0/24
                  151.240.4.0/22
                  151.240.11.0-151.240.27.255
                  151.240.30.0-151.240.42.255
                  151.240.60.0/23
                  151.240.68.0-151.240.74.255
                  151.240.76.0/24
                  151.240.78.0-151.240.90.255
                  151.240.96.0/22
                  151.240.126.0-151.240.154.255
                  151.240.156.0-151.240.225.255
                  151.240.229.0/24
                  151.240.233.0-151.240.238.255
                  151.240.240.0/24
                  151.240.248.0/24
                  151.240.254.0/23
                  151.243.45.0/24
                  151.243.88.0/23
                  151.244.2.0/24
                  151.244.4.0/24
                  151.244.134.0/24
                  151.244.187.0/24
                  151.244.216.0/22
                  151.244.250.0-151.244.255.255

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:f1:58:45:41:63:02:e8:ae:af:15:5c:d5:d4:42:c1:3e:
         6a:d1:bf:75:69:e8:14:bd:ab:07:2a:aa:e1:08:3f:8a:4b:18:
         45:77:13:f6:55:5c:60:c3:32:69:a4:de:d4:0e:e3:ac:ef:21:
         e5:f9:27:fc:3e:81:1d:b4:be:ca:1d:0e:a8:38:2b:26:d6:d8:
         a8:b3:cb:51:3c:47:f6:6c:48:0d:d0:19:81:f9:97:92:ce:8b:
         0c:4f:18:18:34:e9:9b:1f:c8:51:5e:e9:79:52:b2:16:2b:b4:
         cc:9f:84:07:20:e9:4c:ae:91:ec:ba:d1:1d:b1:85:79:93:56:
         7d:73:27:9b:c0:b7:8d:37:60:a4:9f:17:f8:56:f6:18:0b:da:
         b3:6e:69:55:ef:25:f6:2e:e6:f5:81:c8:5a:06:dc:cf:2a:12:
         5d:95:e2:10:b8:ba:29:46:a4:df:03:b4:a9:01:d8:9f:06:dc:
         df:ff:cd:27:02:9d:91:dd:a8:61:5c:de:a5:37:5f:7b:cf:69:
         d8:e2:c1:e1:e3:9f:dc:68:cf:56:9d:4a:bf:3c:c7:80:0f:98:
         13:16:0f:12:36:a1:3d:cf:31:a4:4d:06:47:79:b4:65:2e:f7:
         be:85:d4:b0:8e:89:4e:b2:46:c3:36:07:e0:f8:e1:42:5f:c6:
         84:04:7f:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:43:19 2025 by rpki-client