Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2qAdbeVkZvcJvGkBATdqJJntEbE.roa
File:                     2qAdbeVkZvcJvGkBATdqJJntEbE.roa (raw, json)
Hash identifier:          N3kiJlEqs+SxhkeAhCXiNa4Qzh31hAYbc6500BhpvJs=
Subject key identifier:   DA:A0:1D:6D:E5:64:66:F7:09:BC:69:01:01:37:6A:24:99:ED:11:B1
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0196D5878553619F29472379A15D0CF7527F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2qAdbeVkZvcJvGkBATdqJJntEbE.roa
Signing time:             Thu 15 May 2025 19:59:10 +0000
ROA not before:           Thu 15 May 2025 19:59:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        151.240.0.0/24 maxlen: 24
                          151.240.1.0/24 maxlen: 24
                          151.240.2.0/24 maxlen: 24
                          151.240.3.0/24 maxlen: 24
                          151.240.4.0/24 maxlen: 24
                          151.240.5.0/24 maxlen: 24
                          151.240.6.0/24 maxlen: 24
                          151.240.7.0/24 maxlen: 24
                          151.240.8.0/24 maxlen: 24
                          151.240.9.0/24 maxlen: 24
                          151.240.10.0/24 maxlen: 24
                          151.240.11.0/24 maxlen: 24
                          151.240.12.0/24 maxlen: 24
                          151.240.13.0/24 maxlen: 24
                          151.240.14.0/24 maxlen: 24
                          151.240.15.0/24 maxlen: 24
                          151.240.16.0/24 maxlen: 24
                          151.240.17.0/24 maxlen: 24
                          151.240.18.0/24 maxlen: 24
                          151.240.19.0/24 maxlen: 24
                          151.240.20.0/24 maxlen: 24
                          151.240.21.0/24 maxlen: 24
                          151.240.22.0/24 maxlen: 24
                          151.240.23.0/24 maxlen: 24
                          151.240.24.0/24 maxlen: 24
                          151.240.25.0/24 maxlen: 24
                          151.240.26.0/24 maxlen: 24
                          151.240.27.0/24 maxlen: 24
                          151.240.30.0/24 maxlen: 24
                          151.240.31.0/24 maxlen: 24
                          151.240.32.0/24 maxlen: 24
                          151.240.33.0/24 maxlen: 24
                          151.240.34.0/24 maxlen: 24
                          151.240.35.0/24 maxlen: 24
                          151.240.36.0/24 maxlen: 24
                          151.240.37.0/24 maxlen: 24
                          151.240.38.0/24 maxlen: 24
                          151.240.39.0/24 maxlen: 24
                          151.240.40.0/24 maxlen: 24
                          151.240.41.0/24 maxlen: 24
                          151.240.42.0/24 maxlen: 24
                          151.240.60.0/24 maxlen: 24
                          151.240.61.0/24 maxlen: 24
                          151.240.68.0/24 maxlen: 24
                          151.240.69.0/24 maxlen: 24
                          151.240.70.0/24 maxlen: 24
                          151.240.71.0/24 maxlen: 24
                          151.240.72.0/24 maxlen: 24
                          151.240.73.0/24 maxlen: 24
                          151.240.74.0/24 maxlen: 24
                          151.240.75.0/24 maxlen: 24
                          151.240.76.0/24 maxlen: 24
                          151.240.77.0/24 maxlen: 24
                          151.240.78.0/24 maxlen: 24
                          151.240.79.0/24 maxlen: 24
                          151.240.80.0/24 maxlen: 24
                          151.240.81.0/24 maxlen: 24
                          151.240.82.0/24 maxlen: 24
                          151.240.83.0/24 maxlen: 24
                          151.240.84.0/24 maxlen: 24
                          151.240.85.0/24 maxlen: 24
                          151.240.86.0/24 maxlen: 24
                          151.240.87.0/24 maxlen: 24
                          151.240.88.0/24 maxlen: 24
                          151.240.89.0/24 maxlen: 24
                          151.240.90.0/24 maxlen: 24
                          151.240.96.0/24 maxlen: 24
                          151.240.97.0/24 maxlen: 24
                          151.240.98.0/24 maxlen: 24
                          151.240.99.0/24 maxlen: 24
                          151.240.100.0/24 maxlen: 24
                          151.240.110.0/24 maxlen: 24
                          151.240.116.0/24 maxlen: 24
                          151.240.117.0/24 maxlen: 24
                          151.240.126.0/24 maxlen: 24
                          151.240.127.0/24 maxlen: 24
                          151.240.128.0/24 maxlen: 24
                          151.240.129.0/24 maxlen: 24
                          151.240.130.0/24 maxlen: 24
                          151.240.131.0/24 maxlen: 24
                          151.240.132.0/24 maxlen: 24
                          151.240.133.0/24 maxlen: 24
                          151.240.134.0/24 maxlen: 24
                          151.240.135.0/24 maxlen: 24
                          151.240.136.0/24 maxlen: 24
                          151.240.137.0/24 maxlen: 24
                          151.240.138.0/24 maxlen: 24
                          151.240.139.0/24 maxlen: 24
                          151.240.140.0/24 maxlen: 24
                          151.240.141.0/24 maxlen: 24
                          151.240.142.0/24 maxlen: 24
                          151.240.143.0/24 maxlen: 24
                          151.240.144.0/24 maxlen: 24
                          151.240.145.0/24 maxlen: 24
                          151.240.146.0/24 maxlen: 24
                          151.240.147.0/24 maxlen: 24
                          151.240.148.0/24 maxlen: 24
                          151.240.149.0/24 maxlen: 24
                          151.240.150.0/24 maxlen: 24
                          151.240.151.0/24 maxlen: 24
                          151.240.152.0/24 maxlen: 24
                          151.240.153.0/24 maxlen: 24
                          151.240.154.0/24 maxlen: 24
                          151.240.156.0/24 maxlen: 24
                          151.240.157.0/24 maxlen: 24
                          151.240.158.0/24 maxlen: 24
                          151.240.159.0/24 maxlen: 24
                          151.240.160.0/24 maxlen: 24
                          151.240.161.0/24 maxlen: 24
                          151.240.162.0/24 maxlen: 24
                          151.240.163.0/24 maxlen: 24
                          151.240.164.0/24 maxlen: 24
                          151.240.165.0/24 maxlen: 24
                          151.240.166.0/24 maxlen: 24
                          151.240.167.0/24 maxlen: 24
                          151.240.168.0/24 maxlen: 24
                          151.240.169.0/24 maxlen: 24
                          151.240.170.0/24 maxlen: 24
                          151.240.171.0/24 maxlen: 24
                          151.240.172.0/24 maxlen: 24
                          151.240.173.0/24 maxlen: 24
                          151.240.174.0/24 maxlen: 24
                          151.240.175.0/24 maxlen: 24
                          151.240.176.0/24 maxlen: 24
                          151.240.177.0/24 maxlen: 24
                          151.240.178.0/24 maxlen: 24
                          151.240.179.0/24 maxlen: 24
                          151.240.180.0/24 maxlen: 24
                          151.240.181.0/24 maxlen: 24
                          151.240.182.0/24 maxlen: 24
                          151.240.183.0/24 maxlen: 24
                          151.240.184.0/24 maxlen: 24
                          151.240.185.0/24 maxlen: 24
                          151.240.186.0/24 maxlen: 24
                          151.240.187.0/24 maxlen: 24
                          151.240.188.0/24 maxlen: 24
                          151.240.189.0/24 maxlen: 24
                          151.240.190.0/24 maxlen: 24
                          151.240.191.0/24 maxlen: 24
                          151.240.192.0/24 maxlen: 24
                          151.240.193.0/24 maxlen: 24
                          151.240.194.0/24 maxlen: 24
                          151.240.195.0/24 maxlen: 24
                          151.240.196.0/24 maxlen: 24
                          151.240.197.0/24 maxlen: 24
                          151.240.198.0/24 maxlen: 24
                          151.240.199.0/24 maxlen: 24
                          151.240.200.0/24 maxlen: 24
                          151.240.201.0/24 maxlen: 24
                          151.240.202.0/24 maxlen: 24
                          151.240.203.0/24 maxlen: 24
                          151.240.204.0/24 maxlen: 24
                          151.240.205.0/24 maxlen: 24
                          151.240.206.0/24 maxlen: 24
                          151.240.207.0/24 maxlen: 24
                          151.240.208.0/24 maxlen: 24
                          151.240.209.0/24 maxlen: 24
                          151.240.210.0/24 maxlen: 24
                          151.240.211.0/24 maxlen: 24
                          151.240.212.0/24 maxlen: 24
                          151.240.213.0/24 maxlen: 24
                          151.240.214.0/24 maxlen: 24
                          151.240.215.0/24 maxlen: 24
                          151.240.216.0/24 maxlen: 24
                          151.240.217.0/24 maxlen: 24
                          151.240.218.0/24 maxlen: 24
                          151.240.219.0/24 maxlen: 24
                          151.240.220.0/24 maxlen: 24
                          151.240.221.0/24 maxlen: 24
                          151.240.222.0/24 maxlen: 24
                          151.240.223.0/24 maxlen: 24
                          151.240.224.0/24 maxlen: 24
                          151.240.225.0/24 maxlen: 24
                          151.240.229.0/24 maxlen: 24
                          151.240.233.0/24 maxlen: 24
                          151.240.234.0/24 maxlen: 24
                          151.240.235.0/24 maxlen: 24
                          151.240.236.0/24 maxlen: 24
                          151.240.237.0/24 maxlen: 24
                          151.240.238.0/24 maxlen: 24
                          151.240.240.0/24 maxlen: 24
                          151.240.241.0/24 maxlen: 24
                          151.240.242.0/24 maxlen: 24
                          151.240.243.0/24 maxlen: 24
                          151.240.244.0/24 maxlen: 24
                          151.240.245.0/24 maxlen: 24
                          151.240.246.0/24 maxlen: 24
                          151.240.247.0/24 maxlen: 24
                          151.240.248.0/24 maxlen: 24
                          151.240.249.0/24 maxlen: 24
                          151.240.250.0/24 maxlen: 24
                          151.240.251.0/24 maxlen: 24
                          151.240.252.0/24 maxlen: 24
                          151.240.253.0/24 maxlen: 24
                          151.240.254.0/24 maxlen: 24
                          151.240.255.0/24 maxlen: 24
                          151.243.45.0/24 maxlen: 24
                          151.243.89.0/24 maxlen: 24
                          151.244.2.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 20 May 2025 05:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d5:87:85:53:61:9f:29:47:23:79:a1:5d:0c:f7:52:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: May 15 19:59:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=daa01d6de56466f709bc690101376a2499ed11b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:46:07:79:da:d4:3f:e5:5a:67:93:bc:84:
                    e7:35:84:49:52:8e:7b:94:24:64:a5:78:fa:2c:93:
                    a5:9d:e4:69:33:8c:d9:35:66:4f:6a:a1:72:b3:90:
                    89:e2:df:f7:22:d0:1b:e4:62:14:9c:58:c8:90:7a:
                    78:5d:10:c1:20:ac:40:b1:29:d0:9c:8c:ca:49:cc:
                    34:0a:5d:44:7d:26:a7:e1:f0:e5:85:0e:2a:52:30:
                    79:08:45:9c:ed:21:dc:df:b3:0c:2e:8f:2d:00:ce:
                    cf:36:07:80:2b:cb:41:2d:a0:48:80:31:41:80:a3:
                    b3:ed:99:3b:14:50:67:38:75:9d:c7:1e:c6:f6:0b:
                    8f:99:ad:b3:d8:60:26:b7:b8:6d:4a:f1:5a:8a:97:
                    db:b1:ad:a3:17:e3:bc:24:e3:14:07:1e:59:ab:17:
                    b0:e7:ef:9e:2a:52:c0:f9:be:73:5a:d7:28:06:a8:
                    94:7c:31:1d:fb:39:7d:e7:94:32:d7:2d:d1:89:5a:
                    49:88:3c:00:60:6c:98:6f:01:e5:97:69:81:e6:bb:
                    91:16:34:cb:16:14:68:37:20:d4:5e:9d:57:1a:8c:
                    c3:07:c0:38:01:1f:b6:ab:90:b4:67:36:fd:9c:16:
                    a9:f6:09:0a:dd:90:9a:a6:f0:13:2c:a1:aa:dd:ad:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A0:1D:6D:E5:64:66:F7:09:BC:69:01:01:37:6A:24:99:ED:11:B1
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2qAdbeVkZvcJvGkBATdqJJntEbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.240.0.0-151.240.27.255
                  151.240.30.0-151.240.42.255
                  151.240.60.0/23
                  151.240.68.0-151.240.90.255
                  151.240.96.0-151.240.100.255
                  151.240.110.0/24
                  151.240.116.0/23
                  151.240.126.0-151.240.154.255
                  151.240.156.0-151.240.225.255
                  151.240.229.0/24
                  151.240.233.0-151.240.238.255
                  151.240.240.0/20
                  151.243.45.0/24
                  151.243.89.0/24
                  151.244.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:62:6a:39:3b:61:36:08:f6:e1:24:1c:f1:09:7e:78:2c:4f:
         e0:6d:87:e2:04:9e:9b:f9:73:08:d9:94:e8:24:1e:1d:cb:15:
         98:64:ec:fc:79:d2:fe:a5:a5:3f:91:38:b5:6b:1a:de:46:61:
         fd:cb:eb:39:7e:8a:99:e2:5a:ac:13:a8:5f:09:37:d5:3d:ab:
         bd:30:25:7a:d4:ce:d6:1b:7d:16:92:01:4f:bb:28:d4:70:9e:
         70:95:23:c9:09:ab:37:56:5e:de:6d:52:59:22:b1:bf:9b:ef:
         03:58:90:a6:85:93:87:3a:b2:ad:5e:49:ce:66:39:0d:d0:8a:
         88:13:e9:ce:ed:26:f2:76:11:bc:9e:80:21:35:b7:e3:88:47:
         0c:96:2e:8b:40:a5:1a:e4:c8:6e:a1:ef:52:3f:25:34:6a:0d:
         52:a4:b9:78:5e:0a:75:1e:7a:64:e2:c1:84:49:4b:0d:dc:a1:
         68:28:42:0b:69:30:2b:c3:8a:8c:c0:e4:b0:20:05:cd:18:2e:
         a8:dd:e4:b4:99:7f:51:ca:af:a1:c5:f3:10:f4:77:de:26:08:
         ec:8f:f6:d7:8b:5e:06:93:6d:54:4b:25:ca:e9:ff:67:f6:f0:
         36:db:d5:b6:29:63:1c:8f:c8:7c:92:2d:95:79:df:79:70:7c:
         14:85:f7:37
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZbVh4VTYZ8pRyN5oV0M91J/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTE1MTk1OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWEwMWQ2ZGU1NjQ2NmY3MDliYzY5MDEwMTM3NmEyNDk5ZWQxMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r1GB3na1D/lWmeTvITnNYRJUo57
lCRkpXj6LJOlneRpM4zZNWZPaqFys5CJ4t/3ItAb5GIUnFjIkHp4XRDBIKxAsSnQ
nIzKScw0Cl1EfSan4fDlhQ4qUjB5CEWc7SHc37MMLo8tAM7PNgeAK8tBLaBIgDFB
gKOz7Zk7FFBnOHWdxx7G9guPma2z2GAmt7htSvFaipfbsa2jF+O8JOMUBx5Zqxew
5++eKlLA+b5zWtcoBqiUfDEd+zl955Qy1y3RiVpJiDwAYGyYbwHll2mB5ruRFjTL
FhRoNyDUXp1XGozDB8A4AR+2q5C0Zzb9nBap9gkK3ZCapvATLKGq3a2RnQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFNqgHW3lZGb3CbxpAQE3aiSZ7RGxMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMnFBZGJlVmtadmNKdkdrQkFUZHFKSm50RWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzCBmAQCAAEwgZEwCwMD
BJfwAwQCl/AYMAwDBAGX8B4DBACX8CoDBAGX8DwwDAMEApfwRAMEAJfwWjAMAwQF
l/BgAwQAl/BkAwQAl/BuAwQBl/B0MAwDBAGX8H4DBACX8JowDAMEApfwnAMEAZfw
4AMEAJfw5TAMAwQAl/DpAwQAl/DuAwQEl/DwAwQAl/MtAwQAl/NZAwQAl/QCMA0G
CSqGSIb3DQEBCwUAA4IBAQBnYmo5O2E2CPbhJBzxCX54LE/gbYfiBJ6b+XMI2ZTo
JB4dyxWYZOz8edL+paU/kTi1axreRmH9y+s5foqZ4lqsE6hfCTfVPau9MCV61M7W
G30WkgFPuyjUcJ5wlSPJCas3Vl7ebVJZIrG/m+8DWJCmhZOHOrKtXknOZjkN0IqI
E+nO7SbydhG8noAhNbfjiEcMli6LQKUa5Mhuoe9SPyU0ag1SpLl4Xgp1Hnpk4sGE
SUsN3KFoKEILaTArw4qMwOSwIAXNGC6o3eS0mX9Ryq+hxfMQ9HfeJgjsj/bXi14G
k21USyXK6f9n9vA229W2KWMcj8h8ki2Ved95cHwUhfc3
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:07:51 2025 by rpki-client