Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UFeIL0LpXQem0jkEUwiJ7NS5-EQ.roa
File: UFeIL0LpXQem0jkEUwiJ7NS5-EQ.roa (raw, json)
Hash identifier: nH3mJJHnzl2siGoAgRatupEEBngloi+ogUpG1/M1npM=
Subject key identifier: 50:57:88:2F:42:E9:5D:07:A6:D2:39:04:53:08:89:EC:D4:B9:F8:44
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197A7422ABCA164B16B5C633920AC841ADA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UFeIL0LpXQem0jkEUwiJ7NS5-EQ.roa
Signing time: Wed 25 Jun 2025 13:23:40 +0000
ROA not before: Wed 25 Jun 2025 13:23:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 12:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:42:2a:bc:a1:64:b1:6b:5c:63:39:20:ac:84:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 25 13:23:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5057882f42e95d07a6d23904530889ecd4b9f844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:a8:89:43:18:0d:28:07:89:f7:11:a2:74:
6d:8b:fe:5d:98:dd:74:ce:37:71:49:ef:91:6f:7c:
6c:f4:b8:40:1d:1a:24:ac:ab:98:89:36:6b:ce:db:
48:29:72:ca:64:f2:e2:20:30:3a:86:2b:01:88:5c:
9a:0c:37:ae:b5:d6:29:ec:69:1b:77:a8:02:14:f6:
a5:f6:2e:92:72:01:a8:69:9f:e9:10:f0:2f:2e:33:
59:1b:fd:7f:1e:db:54:49:bf:4d:ef:d2:01:13:05:
f9:0f:17:51:74:a5:73:37:87:10:d8:ad:d1:b5:3e:
19:fe:9b:9a:05:a1:1e:d3:6a:47:53:64:49:22:a3:
66:4a:e8:3b:60:bf:bc:1c:12:df:10:f2:ab:51:30:
ff:ad:77:f1:7f:07:2f:8a:f7:58:b0:b9:ac:b8:15:
c0:cd:94:f3:5d:60:04:bc:00:fb:26:dc:7f:70:e8:
d4:d0:35:16:0d:f9:f2:94:b8:c7:37:13:e6:05:b1:
f7:33:8c:c5:49:29:de:ab:a8:04:48:f9:8d:a8:09:
e4:f8:22:b8:35:34:99:cf:50:7d:8a:9f:3c:4b:ab:
99:2f:19:be:0a:8b:06:30:24:96:7e:66:ce:e0:cc:
f2:45:bf:3c:6c:db:fa:c3:d2:ea:9f:09:1c:5e:b1:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:88:2F:42:E9:5D:07:A6:D2:39:04:53:08:89:EC:D4:B9:F8:44
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UFeIL0LpXQem0jkEUwiJ7NS5-EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.2.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.241.1.0/24
151.242.88.0/24
151.242.91.0/24
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fc:c3:50:66:fc:fe:c6:ca:d8:36:15:1b:07:0a:1d:81:b7:
3f:1d:41:26:9e:65:b7:04:de:69:0f:b1:15:bf:8b:6d:0f:30:
f2:18:30:12:78:e3:1e:5a:1b:08:1a:75:80:75:7e:38:7f:fd:
df:fa:18:99:74:98:7a:1d:c8:d0:9d:65:37:05:ab:8b:a7:22:
ee:06:b1:46:10:d4:ca:b4:5a:d8:81:0a:c8:37:a8:f8:20:e0:
8a:24:ff:26:fb:33:aa:53:d9:e8:46:6c:63:03:21:ac:fd:08:
e4:13:b3:17:05:6c:ee:70:c7:f0:88:70:31:67:89:e1:df:81:
87:db:76:10:9f:37:93:72:0f:87:eb:51:bb:e1:bd:a7:53:34:
16:97:8d:b5:cb:28:43:6a:28:d6:fa:8e:1d:42:e7:3c:5f:11:
4c:20:41:74:2a:f4:88:a1:b3:15:e2:66:fc:c3:b7:e7:bf:15:
72:f8:be:d8:fd:08:53:54:a9:d3:3f:8a:06:a4:88:ee:2d:ba:
d7:40:fa:fb:03:25:b4:06:76:a4:e6:02:0a:20:53:b5:ba:61:
34:b3:1e:a5:a6:ae:4e:60:f9:56:3a:1d:fc:31:90:c5:5e:43:
cb:bf:1b:d5:bf:35:c7:9c:f6:39:1b:4d:49:e8:fe:13:bf:9a:
11:b2:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:38:39 2025 by rpki-client