Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cbaI9M8IpsXBq1-Sj9bdE4s3k3U.roa
File: cbaI9M8IpsXBq1-Sj9bdE4s3k3U.roa (raw, json)
Hash identifier: QGFB+nuTQJGF52RiUYCSMnxS3jlheK3El3YPVZO23aU=
Subject key identifier: 71:B6:88:F4:CF:08:A6:C5:C1:AB:5F:92:8F:D6:DD:13:8B:37:93:75
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FA8E25A4A74C9EE5C8A562B1C1B194B1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cbaI9M8IpsXBq1-Sj9bdE4s3k3U.roa
Signing time: Fri 11 Jul 2025 17:35:09 +0000
ROA not before: Fri 11 Jul 2025 17:35:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.155.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.95.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Jul 2025 09:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:8e:25:a4:a7:4c:9e:e5:c8:a5:62:b1:c1:b1:94:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 11 17:35:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71b688f4cf08a6c5c1ab5f928fd6dd138b379375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:80:2c:34:e1:88:a3:78:22:2e:d3:ad:02:
d9:7e:56:67:2b:95:ef:31:69:b4:0a:62:1c:d3:a6:
7a:88:f7:e5:9c:36:21:a0:fe:22:c6:e0:43:13:52:
1b:0b:b7:83:8d:a3:af:b8:82:8a:e4:9a:95:c3:05:
94:66:28:7b:1d:7e:2a:f7:9e:e9:69:fd:36:71:84:
76:47:3c:67:d3:06:ce:49:25:e6:b8:23:a7:ad:c2:
6c:bc:c8:9e:06:be:7e:d1:1a:fa:72:98:36:21:d3:
e2:ef:1f:07:f9:fa:59:c1:35:6e:d7:f4:1e:0e:66:
ed:b8:01:fd:34:da:29:22:3f:dd:20:3a:c0:79:06:
cc:76:1c:8f:1c:aa:ab:33:e5:c9:03:74:63:23:0a:
9a:50:9a:ef:01:05:f8:22:f2:ba:2b:9f:bc:82:29:
7c:cb:68:37:59:6f:14:d0:df:9e:cf:4f:e8:4b:57:
10:e3:79:df:71:6f:b2:20:74:17:93:6a:a6:71:10:
9e:f3:93:c2:af:37:52:fd:1f:b0:0b:29:7f:d6:95:
88:70:11:8c:98:d2:6e:fb:a9:b3:17:64:ea:90:7a:
70:c4:b1:65:d9:6c:6f:7b:9e:d7:44:b9:31:3f:c8:
39:ba:a8:23:cc:92:7c:ec:18:27:61:49:f1:c1:c2:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:88:F4:CF:08:A6:C5:C1:AB:5F:92:8F:D6:DD:13:8B:37:93:75
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cbaI9M8IpsXBq1-Sj9bdE4s3k3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.210.0/24
37.202.212.0/23
151.240.2.0/24
151.240.16.0/24
151.240.75.0-151.240.77.255
151.240.82.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0/23
151.240.124.0/23
151.240.145.0-151.240.147.255
151.240.150.0-151.240.155.255
151.240.157.0/24
151.240.160.0/24
151.240.163.0/24
151.240.165.0/24
151.240.173.0/24
151.240.205.0/24
151.240.228.0/24
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.250.255
151.240.255.0-151.241.255.255
151.242.19.0-151.242.21.255
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.84.0/24
151.242.132.0/24
151.242.155.0/24
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.35.0-151.243.36.255
151.243.44.0/22
151.243.83.0/24
151.243.95.0/24
151.243.100.0/22
151.243.107.0/24
151.243.110.0/24
151.243.113.0/24
151.243.123.0-151.243.124.255
151.243.136.0/22
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.168.0/24
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/23
151.243.217.0/24
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.237.0-151.243.239.255
151.243.242.0/24
151.243.247.0-151.243.251.255
151.244.56.0/24
151.244.58.0/24
151.244.70.0/24
151.244.88.0/24
151.244.126.0/24
151.244.128.0/18
151.245.0.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
17:f2:a0:cf:2a:64:ae:61:fe:7f:dc:4e:7f:d3:f6:95:78:43:
fe:57:f1:8d:40:3b:e2:40:2d:95:88:21:92:dd:0e:52:be:e8:
a6:f1:9e:af:e2:37:30:a8:ec:5d:ce:8f:b6:06:c4:8e:2a:b7:
94:d9:1a:f3:65:bc:7c:df:28:3f:36:90:e9:59:ab:59:b8:9b:
dc:6b:5c:17:90:5e:35:76:3c:0a:61:f3:ec:04:c9:64:a8:15:
19:83:b1:5c:8b:3a:9e:84:02:bd:c9:01:05:84:ec:92:55:43:
c1:10:d9:b2:76:b4:87:92:50:56:95:0f:29:96:e9:27:34:bf:
f5:c5:b7:05:71:da:aa:35:ec:62:16:15:cc:9e:1f:86:5b:82:
78:3e:01:41:80:fa:5f:85:69:ff:2d:7a:98:a6:6b:6a:de:b7:
8e:67:ab:9a:eb:36:ce:24:5f:64:39:93:eb:94:aa:0d:ce:dc:
66:7b:69:70:a6:95:37:f9:33:ba:57:5c:cb:c8:16:d6:7e:4f:
19:60:9c:f6:fc:7a:72:9d:c8:c9:af:e1:e8:5e:1b:7e:71:20:
e5:1d:86:38:fd:51:42:4e:0a:6a:82:93:7d:cf:2f:a3:a5:9e:
42:de:a1:81:8a:8f:b2:67:ac:f1:05:a9:15:c8:8d:32:1e:68:
05:1e:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:01:34 2025 by rpki-client