Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bGCSo1z4UM2dIgmOsje2yWNax-g.roa
File: bGCSo1z4UM2dIgmOsje2yWNax-g.roa (raw, json)
Hash identifier: AOkniANRldvM4fMGDQDkXsc2COhoX6bV/WNBcSnlVZk=
Subject key identifier: 6C:60:92:A3:5C:F8:50:CD:9D:22:09:8E:B2:37:B6:C9:63:5A:C7:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197EE55C20CBD01A758FECB1CAB6D47E69C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bGCSo1z4UM2dIgmOsje2yWNax-g.roa
Signing time: Wed 09 Jul 2025 08:38:07 +0000
ROA not before: Wed 09 Jul 2025 08:38:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.3.0/24 maxlen: 24
151.242.6.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.155.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.95.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Jul 2025 13:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:55:c2:0c:bd:01:a7:58:fe:cb:1c:ab:6d:47:e6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 08:38:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c6092a35cf850cd9d22098eb237b6c9635ac7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:34:1e:52:38:aa:e8:e4:e0:dd:57:d9:0c:
ab:92:83:a8:a5:84:eb:b2:da:01:c0:78:08:40:32:
66:97:7a:04:ba:92:a3:6c:38:8f:01:f0:b8:06:c3:
b1:7d:71:cd:ba:9a:12:65:29:31:02:94:78:c2:4d:
5d:b5:7e:a5:ab:79:d5:64:49:37:83:67:1d:c9:5b:
91:0d:41:a4:ba:c2:3f:06:d5:ec:ed:aa:fc:4f:67:
93:ed:55:86:11:f1:c1:20:9c:4d:55:8f:ee:3e:55:
4f:85:42:5e:83:6d:fb:41:32:49:c6:72:d5:f7:96:
7c:56:7b:c5:b1:c5:6b:5b:66:54:c9:84:2d:c5:03:
9a:1d:c6:60:16:45:28:18:28:65:9c:dc:2c:63:92:
b9:2d:af:9b:0a:34:56:54:da:cf:8a:9f:10:70:30:
3e:61:9a:28:2e:f1:a2:85:3b:9a:1c:47:7a:7a:b5:
07:94:2d:31:03:f8:e8:8a:f6:c7:94:bb:e9:6b:7a:
6f:26:65:c9:7e:c2:ac:f8:34:eb:99:a6:f7:b4:f6:
f9:c3:22:92:52:95:7b:3b:d4:27:c1:5f:aa:c5:f8:
04:eb:c1:cb:3f:34:a0:f5:ec:0e:8c:5b:bb:29:b0:
e0:a7:0e:19:c8:3a:06:f8:12:67:a9:ef:8d:95:ad:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:92:A3:5C:F8:50:CD:9D:22:09:8E:B2:37:B6:C9:63:5A:C7:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bGCSo1z4UM2dIgmOsje2yWNax-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.210.0/24
37.202.212.0/23
151.240.2.0/24
151.240.16.0/24
151.240.75.0-151.240.77.255
151.240.82.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0/23
151.240.124.0/23
151.240.145.0-151.240.147.255
151.240.150.0-151.240.155.255
151.240.157.0/24
151.240.160.0/24
151.240.163.0/24
151.240.165.0/24
151.240.173.0/24
151.240.205.0/24
151.240.228.0/24
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.251.255
151.241.0.0/16
151.242.3.0/24
151.242.6.0/24
151.242.19.0-151.242.21.255
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.73.0/24
151.242.75.0/24
151.242.81.0/24
151.242.84.0/24
151.242.103.0/24
151.242.132.0/24
151.242.155.0/24
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.35.0-151.243.36.255
151.243.44.0/22
151.243.83.0/24
151.243.95.0/24
151.243.100.0/22
151.243.107.0/24
151.243.110.0/24
151.243.113.0/24
151.243.123.0-151.243.124.255
151.243.136.0/22
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.168.0/24
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0-151.243.214.255
151.243.217.0/24
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.237.0-151.243.239.255
151.243.242.0/24
151.243.247.0-151.243.251.255
151.244.56.0/24
151.244.58.0/24
151.244.70.0/24
151.244.88.0/24
151.244.126.0/24
151.244.128.0/18
151.245.0.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
a7:54:16:b7:bb:50:2c:10:71:e4:b1:74:2e:84:0b:1b:89:05:
41:b2:13:34:84:00:59:b8:26:0b:44:17:ad:db:13:24:cf:54:
67:b2:b0:54:87:50:de:4f:d8:3d:02:43:5b:10:c8:aa:68:75:
9f:ac:46:59:9c:41:83:65:86:a4:4c:21:d0:9b:78:d1:41:c6:
aa:68:69:59:1d:87:29:5e:13:3f:14:0e:d3:a4:cf:71:89:d0:
a8:6b:52:bd:ba:2d:60:04:82:e2:ab:fd:30:f3:4b:36:56:bc:
c9:c7:a2:f7:fb:20:18:8f:21:15:90:b9:2b:a9:24:89:32:7e:
b7:24:6c:6a:ef:1b:4e:5a:80:5d:ce:e3:a6:d6:a5:d7:3d:95:
33:f5:a2:83:2b:63:01:85:27:31:b7:f6:c4:0c:0c:9c:0f:48:
bd:ea:5f:d1:23:e3:a7:e4:98:7e:98:80:aa:13:20:fe:3a:5a:
df:c3:0c:d5:e2:f8:4b:14:d7:3c:18:be:0f:42:1e:98:f0:76:
5f:94:b6:4a:52:c2:f3:aa:40:52:5c:7f:b3:2d:5f:3a:cd:a4:
02:de:f7:1e:78:78:49:65:a6:6e:b0:03:80:66:4e:21:d8:5f:
6f:35:c8:5d:50:55:3a:c8:f3:21:17:b9:27:b4:92:9c:2d:80:
00:5d:77:03
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgISAZfuVcIMvQGnWP7LHKttR+acMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA5MDgzODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzYwOTJhMzVjZjg1MGNkOWQyMjA5OGViMjM3YjZjOTYzNWFjN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxk0HlI4qujk4N1X2QyrkoOopYTr
stoBwHgIQDJml3oEupKjbDiPAfC4BsOxfXHNupoSZSkxApR4wk1dtX6lq3nVZEk3
g2cdyVuRDUGkusI/BtXs7ar8T2eT7VWGEfHBIJxNVY/uPlVPhUJeg237QTJJxnLV
95Z8VnvFscVrW2ZUyYQtxQOaHcZgFkUoGChlnNwsY5K5La+bCjRWVNrPip8QcDA+
YZooLvGihTuaHEd6erUHlC0xA/joivbHlLvpa3pvJmXJfsKs+DTrmab3tPb5wyKS
UpV7O9QnwV+qxfgE68HLPzSg9ewOjFu7KbDgpw4ZyDoG+BJnqe+Nla1qLQIDAQAB
o4IETjCCBEowHQYDVR0OBBYEFGxgkqNc+FDNnSIJjrI3tsljWsfoMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYkdDU28xejRVTTJkSWdtT3NqZTJ5V05heC1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICYgYIKwYBBQUHAQcBAf8EggJRMIICTTCCAkkEAgABMIIC
QQMEACXKwQMEACXK0gMEASXK1AMEAJfwAgMEAJfwEDAMAwQAl/BLAwQBl/BMAwQA
l/BSAwQAl/BZMAwDBASX8HADBAGX8HQDBAGX8HgDBAGX8HwwDAMEAJfwkQMEApfw
kDAMAwQBl/CWAwQCl/CYAwQAl/CdAwQAl/CgAwQAl/CjAwQAl/ClAwQAl/CtAwQA
l/DNAwQAl/DkMAwDBAGX8OYDBACX8OgDBACX8O8wDAMEAJfw8QMEA5fw8DAMAwQA
l/D5AwQCl/D4AwMAl/EDBACX8gMDBACX8gYwDAMEAJfyEwMEAZfyFDAMAwQAl/Iz
AwQDl/IwAwQAl/JAAwQAl/JJAwQAl/JLAwQAl/JRAwQAl/JUAwQAl/JnAwQAl/KE
AwQAl/KbAwQEl/LAAwQCl/LgAwQBl/L8AwQEl/MQMAwDBACX8yMDBACX8yQDBAKX
8ywDBACX81MDBACX818DBAKX82QDBACX82sDBACX824DBACX83EwDAMEAJfzewME
AJfzfAMEApfziAMEAJfzljAMAwQAl/OdAwQAl/OeAwQAl/OoAwQAl/OtAwQAl/Ov
AwQAl/PIAwQCl/PMMAwDBAKX89QDBACX89YDBACX89kDBACX89wDBACX898DBACX
8+IwDAMEAJfz5QMEA5fz4DAMAwQAl/PtAwQEl/PgAwQAl/PyMAwDBACX8/cDBAKX
8/gDBACX9DgDBACX9DoDBACX9EYDBACX9FgDBACX9H4DBAaX9IAwCgMDAJf1AwMD
l/AwDQYJKoZIhvcNAQELBQADggEBAKdUFre7UCwQceSxdC6ECxuJBUGyEzSEAFm4
JgtEF63bEyTPVGeysFSHUN5P2D0CQ1sQyKpodZ+sRlmcQYNlhqRMIdCbeNFBxqpo
aVkdhyleEz8UDtOkz3GJ0KhrUr26LWAEguKr/TDzSzZWvMnHovf7IBiPIRWQuSup
JIkyfrckbGrvG05agF3O46bWpdc9lTP1ooMrYwGFJzG39sQMDJwPSL3qX9Ej46fk
mH6YgKoTIP46Wt/DDNXi+EsU1zwYvg9CHpjwdl+UtkpSwvOqQFJcf7MtXzrNpALe
9x54eEllpm6wA4BmTiHYX281yF1QVTrI8yEXuSe0kpwtgABddwM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:25 2025 by rpki-client