Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2qi0fHVPJIvgIewaqlFkwq1n0hM.roa
File: 2qi0fHVPJIvgIewaqlFkwq1n0hM.roa (raw, json)
Hash identifier: dZE42hDa5wjvxxuoNGbM8nKylQPSzWdyYnVv8T45XEU=
Subject key identifier: DA:A8:B4:7C:75:4F:24:8B:E0:21:EC:1A:AA:51:64:C2:AD:67:D2:13
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019637D64230F1081E49C8153A13FFB2B8D5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2qi0fHVPJIvgIewaqlFkwq1n0hM.roa
Signing time: Tue 15 Apr 2025 05:05:10 +0000
ROA not before: Tue 15 Apr 2025 05:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 151.240.0.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.240.29.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.43.0/24 maxlen: 24
151.240.44.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.240.46.0/24 maxlen: 24
151.240.47.0/24 maxlen: 24
151.240.48.0/24 maxlen: 24
151.240.49.0/24 maxlen: 24
151.240.50.0/24 maxlen: 24
151.240.51.0/24 maxlen: 24
151.240.52.0/24 maxlen: 24
151.240.53.0/24 maxlen: 24
151.240.54.0/24 maxlen: 24
151.240.55.0/24 maxlen: 24
151.240.56.0/24 maxlen: 24
151.240.57.0/24 maxlen: 24
151.240.58.0/24 maxlen: 24
151.240.59.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.62.0/24 maxlen: 24
151.240.63.0/24 maxlen: 24
151.240.64.0/24 maxlen: 24
151.240.65.0/24 maxlen: 24
151.240.66.0/24 maxlen: 24
151.240.67.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.91.0/24 maxlen: 24
151.240.92.0/24 maxlen: 24
151.240.93.0/24 maxlen: 24
151.240.94.0/24 maxlen: 24
151.240.95.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.240.101.0/24 maxlen: 24
151.240.102.0/24 maxlen: 24
151.240.103.0/24 maxlen: 24
151.240.104.0/24 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.106.0/24 maxlen: 24
151.240.107.0/24 maxlen: 24
151.240.108.0/24 maxlen: 24
151.240.109.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.111.0/24 maxlen: 24
151.240.112.0/24 maxlen: 24
151.240.113.0/24 maxlen: 24
151.240.114.0/24 maxlen: 24
151.240.115.0/24 maxlen: 24
151.240.116.0/24 maxlen: 24
151.240.117.0/24 maxlen: 24
151.240.118.0/24 maxlen: 24
151.240.119.0/24 maxlen: 24
151.240.120.0/24 maxlen: 24
151.240.121.0/24 maxlen: 24
151.240.122.0/24 maxlen: 24
151.240.123.0/24 maxlen: 24
151.240.124.0/24 maxlen: 24
151.240.125.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.226.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.190.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:d6:42:30:f1:08:1e:49:c8:15:3a:13:ff:b2:b8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 15 05:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daa8b47c754f248be021ec1aaa5164c2ad67d213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:63:c7:5c:6c:23:44:ea:25:21:75:50:93:
07:0a:a7:55:17:57:b2:1b:e4:81:e3:f5:f0:e3:06:
fb:56:99:53:32:7e:36:31:24:29:8e:e2:bc:72:b7:
e7:61:9b:01:8d:95:6c:61:30:77:92:89:72:f6:97:
eb:b4:fc:c4:91:56:39:17:87:36:05:f9:f7:d8:57:
39:68:58:6f:3d:3a:4f:e7:d6:e2:87:36:67:19:27:
d7:bb:58:6f:8b:2b:28:3b:86:7c:0b:1a:f4:f0:22:
ea:11:89:f0:e5:67:c6:de:48:bf:4b:eb:d9:53:cf:
1a:70:47:10:e6:bd:bb:4c:ed:46:39:b5:22:ba:99:
24:10:83:9b:a7:2f:c3:13:54:5d:eb:fc:e6:6d:f6:
6e:d1:4e:bf:7f:9a:e2:74:ed:4b:62:72:c3:e4:f4:
b2:c7:9c:84:f4:68:10:d6:71:4b:6e:2b:20:19:a0:
b7:16:e1:93:14:6c:fa:9c:38:84:db:47:67:e1:e1:
f1:45:38:52:49:bd:5a:c8:b9:fe:d3:6b:bf:1d:72:
f7:23:a4:78:ed:75:9e:cf:ce:97:a2:74:44:1e:5c:
f7:08:f7:e7:4c:e5:c7:2f:f0:2b:c2:09:96:fc:b7:
52:9b:92:dc:fa:a7:2d:a3:40:57:83:13:12:c8:c8:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:B4:7C:75:4F:24:8B:E0:21:EC:1A:AA:51:64:C2:AD:67:D2:13
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2qi0fHVPJIvgIewaqlFkwq1n0hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.0.0-151.240.154.255
151.240.156.0-151.240.255.255
151.242.39.0/24
151.242.190.0/24
151.242.194.0/24
151.243.41.0/24
151.243.223.0/24
151.243.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:af:d0:40:99:06:7d:c6:29:28:52:ac:8b:f9:d8:04:e6:b3:
60:6d:1b:4d:f9:59:1e:46:ed:39:32:8a:7b:cd:9b:38:b4:54:
7f:ce:30:aa:69:1e:15:94:a7:72:7a:b2:65:e2:79:f4:78:1b:
7f:73:14:c5:e1:d7:b5:ad:c0:2b:12:18:7a:ae:e2:9f:d2:be:
61:39:ba:ba:97:98:71:ee:d8:5a:d7:46:ff:69:e0:6e:99:89:
e0:39:0b:f1:09:d4:cd:de:cf:74:6e:28:99:02:91:21:c6:37:
99:a3:29:90:2f:bf:a0:fa:03:dd:e8:35:ae:52:09:5a:72:74:
24:d1:78:2f:ab:d5:a8:c6:d8:b2:c1:92:65:ea:1d:71:d2:be:
f7:7c:a9:0e:c7:32:d8:f3:c4:85:ee:77:a4:03:78:4b:9d:9a:
3d:45:ac:69:c2:2a:6f:d7:dd:dc:6e:48:80:d9:78:c6:9e:ce:
fd:2d:f2:39:54:20:9f:c0:aa:a7:e4:31:0c:58:4e:e9:de:4f:
c4:84:c9:15:47:17:c0:85:b0:14:6f:4b:5b:03:05:13:dd:e8:
b9:0b:b8:6f:ce:3a:f9:b8:60:f3:31:80:d3:e0:53:19:71:55:
53:e1:f8:0a:68:d0:34:82:66:3c:fd:bc:ac:5d:b7:1e:13:a7:
0c:29:17:37
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZY31kIw8QgeScgVOhP/srjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDE1MDUwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWE4YjQ3Yzc1NGYyNDhiZTAyMWVjMWFhYTUxNjRjMmFkNjdkMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc9jx1xsI0TqJSF1UJMHCqdVF1ey
G+SB4/Xw4wb7VplTMn42MSQpjuK8crfnYZsBjZVsYTB3koly9pfrtPzEkVY5F4c2
Bfn32Fc5aFhvPTpP59bihzZnGSfXu1hviysoO4Z8Cxr08CLqEYnw5WfG3ki/S+vZ
U88acEcQ5r27TO1GObUiupkkEIObpy/DE1Rd6/zmbfZu0U6/f5ridO1LYnLD5PSy
x5yE9GgQ1nFLbisgGaC3FuGTFGz6nDiE20dn4eHxRThSSb1ayLn+02u/HXL3I6R4
7XWez86XonREHlz3CPfnTOXHL/ArwgmW/LdSm5Lc+qcto0BXgxMSyMjtvwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFNqotHx1TySL4CHsGqpRZMKtZ9ITMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMnFpMGZIVlBKSXZnSWV3YXFsRmt3cTFuMGhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAsDAwSX8AME
AJfwmjALAwQCl/CcAwMAl/ADBACX8icDBACX8r4DBACX8sIDBACX8ykDBACX898D
BACX8+UwDQYJKoZIhvcNAQELBQADggEBAJ6v0ECZBn3GKShSrIv52ATms2BtG035
WR5G7TkyinvNmzi0VH/OMKppHhWUp3J6smXiefR4G39zFMXh17WtwCsSGHqu4p/S
vmE5urqXmHHu2FrXRv9p4G6ZieA5C/EJ1M3ez3RuKJkCkSHGN5mjKZAvv6D6A93o
Na5SCVpydCTReC+r1ajG2LLBkmXqHXHSvvd8qQ7HMtjzxIXud6QDeEudmj1FrGnC
Km/X3dxuSIDZeMaezv0t8jlUIJ/AqqfkMQxYTuneT8SEyRVHF8CFsBRvS1sDBRPd
6LkLuG/OOvm4YPMxgNPgUxlxVVPh+Apo0DSCZjz9vKxdtx4TpwwpFzc=
-----END CERTIFICATE-----
Generated at Thu Jun 12 09:46:43 2025 by rpki-client