Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iZ5mdwhDQIgt2V1qf1okkHQt_1I.roa
File: iZ5mdwhDQIgt2V1qf1okkHQt_1I.roa (raw, json)
Hash identifier: +ydFH+sRiIbGkWskc3g+It1bU+oqSA5zsppxGdBi+OE=
Subject key identifier: 89:9E:66:77:08:43:40:88:2D:D9:5D:6A:7F:5A:24:90:74:2D:FF:52
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01981D54FDB8902A18B62C68FE90943CC281
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iZ5mdwhDQIgt2V1qf1okkHQt_1I.roa
Signing time: Fri 18 Jul 2025 11:39:25 +0000
ROA not before: Fri 18 Jul 2025 11:39:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.203.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.232.0/21 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.44.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.133.0/24 maxlen: 24
151.242.136.0/23 maxlen: 24
151.242.144.0/23 maxlen: 24
151.242.155.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.242.252.0/24 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.150.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.206.0/23 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.242.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.243.252.0/23 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
151.244.123.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.24.0/23 maxlen: 24
151.245.28.0/23 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.128.0/17 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Jul 2025 07:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:54:fd:b8:90:2a:18:b6:2c:68:fe:90:94:3c:c2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 18 11:39:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=899e6677084340882dd95d6a7f5a2490742dff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:77:bd:d1:06:bb:e1:2c:8e:80:fd:15:e2:
73:2f:ae:fd:b1:93:4a:77:6f:77:7a:9f:72:ac:05:
ed:cf:43:29:df:8e:dc:cc:b6:64:f6:67:1d:08:a5:
a2:9a:c0:a3:13:9e:86:3f:d4:3d:9b:9d:56:fb:02:
4b:8a:8d:1f:2f:f0:db:cf:cd:a6:17:d0:a7:46:26:
e9:7f:63:58:44:dd:ab:47:58:f2:da:19:f5:33:26:
ce:94:f2:70:0b:6b:f3:2c:7b:9b:05:df:7c:f8:ae:
a0:16:15:b5:ac:5f:ce:47:e2:f6:07:0f:99:fe:6d:
09:a0:04:d4:e7:7c:2d:0a:27:43:49:df:61:a0:26:
1c:72:81:ca:a4:26:35:eb:24:a5:0a:5d:03:e0:83:
92:49:a7:dc:43:74:35:93:f6:91:b3:88:70:99:f7:
20:e8:f9:08:cd:d7:ed:2b:9b:41:b3:62:c7:f4:45:
72:97:d3:3e:c1:7b:54:e8:23:cf:3f:5b:fe:98:c9:
5c:0c:ff:29:60:35:9f:f7:f7:a2:53:b0:a3:e1:3a:
ba:b6:38:2f:b7:ef:9c:c6:f6:3a:61:bd:db:14:d8:
ef:8b:7b:71:50:73:9e:45:80:f8:05:6d:7f:92:0a:
d4:86:67:05:a8:f1:fc:55:40:03:8e:90:6b:a5:4c:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:66:77:08:43:40:88:2D:D9:5D:6A:7F:5A:24:90:74:2D:FF:52
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iZ5mdwhDQIgt2V1qf1okkHQt_1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.203.0/24
37.202.212.0/23
151.240.2.0/24
151.240.16.0/24
151.240.75.0/24
151.240.77.0/24
151.240.82.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0/23
151.240.124.0/23
151.240.145.0/24
151.240.147.0/24
151.240.150.0-151.240.155.255
151.240.157.0/24
151.240.163.0/24
151.240.173.0/24
151.240.228.0/24
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.250.255
151.240.255.0-151.241.255.255
151.242.20.0/24
151.242.44.0/24
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.133.0/24
151.242.136.0/23
151.242.144.0/23
151.242.155.0/24
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.35.0-151.243.36.255
151.243.44.0/22
151.243.83.0/24
151.243.100.0/22
151.243.107.0/24
151.243.110.0/24
151.243.113.0/24
151.243.123.0/24
151.243.136.0/22
151.243.150.0/24
151.243.157.0-151.243.158.255
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/23
151.243.217.0/24
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.237.0-151.243.239.255
151.243.242.0/24
151.243.247.0-151.243.253.255
151.244.56.0/24
151.244.58.0/24
151.244.70.0/24
151.244.88.0/24
151.244.109.0/24
151.244.123.0/24
151.244.126.0/24
151.244.128.0/18
151.245.0.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
3e:eb:80:6d:04:64:12:17:2f:70:41:6a:e4:02:68:a1:f2:e8:
b3:9b:fe:cc:e6:aa:9e:b4:33:d6:83:5e:1d:f6:e2:3a:dc:90:
12:10:5e:ba:58:9d:67:3e:6a:64:06:40:23:73:0b:67:45:9c:
31:f4:56:c1:b6:f1:91:bf:56:68:09:17:5e:04:f0:8b:b9:5f:
fe:cd:11:72:69:37:4d:3d:19:f1:d0:d7:0b:39:e9:09:4a:41:
ac:86:e0:11:c8:1c:bb:d6:7f:f0:a0:e6:14:c6:58:fe:d8:50:
e8:f4:20:4c:c7:b5:0f:62:05:64:b9:01:43:ab:5a:db:c1:d4:
5a:3d:10:ec:67:6c:f8:49:f0:d2:b9:06:db:87:10:ca:6a:29:
e8:57:c0:40:4c:8a:fc:7e:69:70:94:dd:60:46:cf:7a:88:d1:
9b:26:fe:29:c7:0d:d1:63:16:57:19:88:ab:ca:55:7a:f3:11:
04:5a:77:c5:c2:89:3f:c8:f2:09:f8:02:d5:23:d0:01:81:04:
11:23:4d:b1:b6:a2:bd:bf:e4:7d:2c:3a:e3:39:90:37:3e:3a:
32:31:f0:69:b1:ee:8d:ef:90:91:60:75:cf:0f:ef:ad:19:1a:
7e:53:e3:10:f2:8f:0f:2e:b6:6f:b7:ec:cf:be:55:bc:89:40:
88:22:5a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:35:33 2025 by rpki-client