Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_3mq7DNewHibyqu33wo5ZTiQ2pU.roa
File: _3mq7DNewHibyqu33wo5ZTiQ2pU.roa (raw, json)
Hash identifier: 1bbmo6QuWZYB/xThaMLrUM+OZT0MiXhbmowUWFILyE8=
Subject key identifier: FF:79:AA:EC:33:5E:C0:78:9B:CA:AB:B7:DF:0A:39:65:38:90:DA:95
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D959FD4B119774D53E9C5D40F565EEFB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_3mq7DNewHibyqu33wo5ZTiQ2pU.roa
Signing time: Sat 05 Jul 2025 06:50:42 +0000
ROA not before: Sat 05 Jul 2025 06:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.134.0/24 maxlen: 24
151.244.250.0/23 maxlen: 24
151.244.252.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Jul 2025 11:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:59:fd:4b:11:97:74:d5:3e:9c:5d:40:f5:65:ee:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff79aaec335ec0789bcaabb7df0a39653890da95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:45:21:29:eb:9c:ca:3d:99:68:e2:0e:da:
de:75:32:92:30:6c:fb:23:58:f4:6a:20:98:37:4b:
a3:6c:01:d5:a4:cc:4b:c7:74:0c:44:3b:c7:8c:df:
10:e9:86:d2:c6:9f:74:f7:07:d5:eb:8a:5d:0f:5b:
a4:95:61:c4:77:7e:35:a6:57:c8:2d:ce:aa:45:0d:
5a:f7:36:dd:0b:fd:4d:a9:49:53:db:92:69:4c:fa:
1b:5b:9a:f3:f5:72:ec:6d:42:79:54:52:49:7f:34:
ce:80:08:c8:f0:be:8c:28:a4:ef:29:4a:36:ed:00:
44:2a:e2:55:57:b0:93:62:60:c3:74:70:2a:25:23:
09:d7:1e:2c:8b:e1:02:49:9e:e5:d0:62:1b:c4:c9:
5a:3d:fb:69:c9:3e:35:7c:0a:41:59:05:a8:41:b9:
42:37:7a:60:f4:78:23:3f:15:07:fe:bb:d7:34:cd:
7e:78:07:74:72:2a:2a:4c:1b:7b:6d:ef:61:39:5f:
fb:1a:af:10:df:30:b0:05:ec:7f:d2:e4:b5:76:03:
55:d9:2c:a8:58:34:8b:86:87:a4:e8:21:28:97:23:
b1:67:57:21:5a:0f:a1:29:89:c7:55:eb:ed:3f:97:
0a:32:b7:7b:6c:c1:a6:b1:78:78:67:71:08:11:69:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:79:AA:EC:33:5E:C0:78:9B:CA:AB:B7:DF:0A:39:65:38:90:DA:95
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_3mq7DNewHibyqu33wo5ZTiQ2pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.2.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.76.255
151.240.78.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
151.244.134.0/24
151.244.250.0-151.244.255.255
Signature Algorithm: sha256WithRSAEncryption
af:b2:f8:6f:fc:d0:dc:cd:c4:be:ff:44:a7:88:15:dd:c9:ae:
0e:ab:f5:7b:02:4c:fe:6e:3b:49:d1:17:c1:be:f7:c3:ea:a0:
e4:90:34:e4:d7:d6:8d:cc:0c:47:d1:cc:97:fc:98:0c:cd:92:
a7:f4:15:6d:8a:8b:54:03:f6:e7:b6:1b:73:4e:e7:0f:23:25:
09:30:f5:75:30:d5:84:24:3b:9e:a3:27:ff:66:b2:b5:fd:b5:
f1:f1:75:1e:86:c8:d8:3d:24:ea:e0:17:52:33:e8:6d:88:2b:
ac:da:7f:ad:31:53:8e:30:7f:6c:e2:75:dd:f0:b6:bb:45:10:
0a:c3:7d:6a:f9:3d:8a:8a:ac:7f:9c:0f:68:e7:2f:69:9f:b4:
6f:72:59:dd:d0:40:e2:82:9e:90:38:d6:32:0d:a7:3f:f6:6d:
3a:b7:d3:05:9d:73:88:99:90:05:48:a0:a9:8b:6b:3b:91:6e:
56:32:c6:c5:4d:93:bd:1a:16:a7:bd:14:ec:2d:88:7e:f3:67:
93:9f:18:69:29:e9:11:93:15:34:e8:ec:41:85:6e:bb:9b:e8:
78:1e:72:62:b0:8f:1f:91:bc:f0:52:76:75:af:96:7f:bb:08:
54:d4:08:04:24:94:5a:48:6a:95:d2:3f:cd:44:5f:9e:c7:66:
76:0a:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:13 2025 by rpki-client