Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/okQXkvC6FwalAw5bCFh4FofR14g.roa
File: okQXkvC6FwalAw5bCFh4FofR14g.roa (raw, json)
Hash identifier: 42qje/6m5+DQ/RNylxMCzwKt9K1SweLXCF+kRK1Qay4=
Subject key identifier: A2:44:17:92:F0:BA:17:06:A5:03:0E:5B:08:58:78:16:87:D1:D7:88
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D495980757F38E1D7913D6E431091E24
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/okQXkvC6FwalAw5bCFh4FofR14g.roa
Signing time: Fri 04 Jul 2025 08:37:42 +0000
ROA not before: Fri 04 Jul 2025 08:37:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Jul 2025 06:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:95:98:07:57:f3:8e:1d:79:13:d6:e4:31:09:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 4 08:37:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2441792f0ba1706a5030e5b0858781687d1d788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:09:ad:3a:0c:5d:3e:71:24:e5:d2:6d:6f:
97:1e:89:96:63:fe:d9:ad:46:2e:09:8b:96:e2:4b:
da:e5:a5:1a:71:ee:de:51:16:dc:04:9d:f5:b0:eb:
ba:43:5c:9e:40:b1:21:8a:33:0d:a7:59:0f:f7:0c:
59:eb:b0:7b:85:7c:28:7e:51:31:1f:71:59:d5:bb:
18:6c:4f:ab:5a:91:22:e6:7f:fe:66:0b:f5:48:59:
50:e7:cc:db:94:2d:e2:e1:8b:b2:b2:31:05:5b:1a:
6b:97:c4:ef:fb:94:da:bb:87:92:f1:af:6b:73:2d:
d7:18:08:7f:91:1a:da:c1:03:9e:84:c1:73:2e:8a:
92:d0:1b:60:76:9a:5c:ee:4f:22:56:e3:8e:af:6d:
fa:29:a9:69:22:66:11:3a:ba:77:71:c6:ed:8e:1f:
ed:25:ca:7d:cb:2a:da:72:0d:88:5e:75:15:5f:9f:
73:69:eb:11:4a:46:d5:6b:75:02:20:89:0b:f9:85:
e4:20:3a:10:d8:39:d6:30:1f:63:69:92:4f:81:ea:
05:2f:86:4c:27:a6:32:9b:56:d2:3d:8f:f4:43:c0:
d5:96:b6:6e:32:3a:67:9d:24:fe:d0:7d:82:e6:d6:
69:ed:6b:98:32:27:d3:90:80:85:b5:c3:5b:aa:ee:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:17:92:F0:BA:17:06:A5:03:0E:5B:08:58:78:16:87:D1:D7:88
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/okQXkvC6FwalAw5bCFh4FofR14g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.2.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
151.244.134.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c7:2d:4d:62:28:80:d1:d2:d8:88:2b:df:c2:03:f4:37:45:
ea:33:ee:f9:2e:5c:a8:2b:72:46:1e:3d:5b:4c:4c:33:fb:dc:
58:1a:75:8f:4d:3c:bc:8e:d6:b5:be:b7:e7:66:4a:76:21:bc:
54:12:fc:65:cd:5a:28:82:ef:52:0c:0c:b8:81:da:02:a4:d5:
dd:66:e8:82:fc:ed:a6:1f:14:7b:28:28:0c:56:fa:b2:fd:5c:
0f:dd:82:49:a2:6f:a1:11:a7:97:ea:9f:89:5e:96:87:dd:1c:
48:97:6b:6d:0c:bb:2c:2d:f0:ac:8e:af:b8:35:cd:c9:d1:84:
0e:5a:13:a2:9b:5f:a1:b7:76:3e:8d:4c:60:65:38:2a:da:26:
73:c1:60:01:39:ef:77:7b:f0:3f:7d:ca:25:f5:4e:7d:26:f7:
b0:4d:9b:4f:17:0a:6a:6b:00:02:8d:ce:43:fd:56:b8:11:8c:
27:de:71:74:64:7b:85:f4:02:87:1a:96:a3:18:f8:39:40:a1:
df:f6:73:2f:ef:9b:5b:72:af:76:0e:ab:7d:94:eb:e5:dc:07:
8d:aa:55:ed:b6:52:d5:fd:20:fa:ff:75:84:c0:fb:c2:f1:4f:
2f:81:a1:f4:cc:17:72:03:6b:6f:9d:82:cf:dc:b5:cc:27:13:
52:57:a7:e1
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgISAZfUlZgHV/OOHXkT1uQxCR4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA0MDgzNzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjQ0MTc5MmYwYmExNzA2YTUwMzBlNWIwODU4NzgxNjg3ZDFkNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipYJrToMXT5xJOXSbW+XHomWY/7Z
rUYuCYuW4kva5aUace7eURbcBJ31sOu6Q1yeQLEhijMNp1kP9wxZ67B7hXwoflEx
H3FZ1bsYbE+rWpEi5n/+Zgv1SFlQ58zblC3i4YuysjEFWxprl8Tv+5Tau4eS8a9r
cy3XGAh/kRrawQOehMFzLoqS0Btgdppc7k8iVuOOr236KalpImYROrp3ccbtjh/t
Jcp9yyracg2IXnUVX59zaesRSkbVa3UCIIkL+YXkIDoQ2DnWMB9jaZJPgeoFL4ZM
J6Yym1bSPY/0Q8DVlrZuMjpnnST+0H2C5tZp7WuYMifTkICFtcNbqu72iwIDAQAB
o4ICqjCCAqYwHQYDVR0OBBYEFKJEF5LwuhcGpQMOWwhYeBaH0deIMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb2tRWGt2QzZGd2FsQXc1YkNGaDRGb2ZSMTRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAAl
yt8DBACX8AIDBAKX8AQwDAMEAJfwCwMEApfwGDAMAwQBl/AeAwQAl/AqAwQBl/A8
MAwDBAKX8EQDBACX8FoDBAKX8GAwDAMEAZfwfgMEAJfwmjAMAwQCl/CcAwQBl/Dg
AwQAl/DlMAwDBACX8OkDBACX8O4DBACX8PADBACX8PgDBAGX8P4DBACX8y0DBAGX
81gDBACX9AIDBACX9IYwDQYJKoZIhvcNAQELBQADggEBAIHHLU1iKIDR0tiIK9/C
A/Q3Reoz7vkuXKgrckYePVtMTDP73FgadY9NPLyO1rW+t+dmSnYhvFQS/GXNWiiC
71IMDLiB2gKk1d1m6IL87aYfFHsoKAxW+rL9XA/dgkmib6ERp5fqn4lelofdHEiX
a20Muywt8KyOr7g1zcnRhA5aE6KbX6G3dj6NTGBlOCraJnPBYAE573d78D99yiX1
Tn0m97BNm08XCmprAAKNzkP9VrgRjCfecXRke4X0AocalqMY+DlAod/2cy/vm1ty
r3YOq32U6+XcB42qVe22UtX9IPr/dYTA+8LxTy+BofTMF3IDa2+dgs/ctcwnE1JX
p+E=
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:58:14 2025 by rpki-client