Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P7lQ1Sl_ZeOU8GrPl7i6j9CMVpI.roa
File: P7lQ1Sl_ZeOU8GrPl7i6j9CMVpI.roa (raw, json)
Hash identifier: EU7iVIqc9Y76m4S0YCmF7FMYRPOG6AANO2p46Y9W5Ek=
Subject key identifier: 3F:B9:50:D5:29:7F:65:E3:94:F0:6A:CF:97:B8:BA:8F:D0:8C:56:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D1A93C9C4D087B852872FA69EF1560CA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P7lQ1Sl_ZeOU8GrPl7i6j9CMVpI.roa
Signing time: Fri 22 Aug 2025 12:03:05 +0000
ROA not before: Fri 22 Aug 2025 12:03:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.203.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.35.0/24 maxlen: 24
151.241.36.0/24 maxlen: 24
151.241.37.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.41.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.74.0/23 maxlen: 24
151.241.96.0/20 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.224.0/19 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.122.0/24 maxlen: 24
151.242.133.0/24 maxlen: 24
151.242.136.0/23 maxlen: 24
151.242.144.0/23 maxlen: 24
151.242.164.0/23 maxlen: 24
151.242.168.0/23 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.206.0/24 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.242.252.0/24 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.28.0/22 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.93.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.108.0/23 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.152.0/22 maxlen: 24
151.243.156.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.171.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.206.0/23 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.243.252.0/23 maxlen: 24
151.244.14.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.244.44.0/24 maxlen: 24
151.244.46.0/24 maxlen: 24
151.244.50.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.85.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.103.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
151.244.119.0/24 maxlen: 24
151.244.120.0/24 maxlen: 24
151.244.121.0/24 maxlen: 24
151.244.122.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.214.0/24 maxlen: 24
151.244.216.0/22 maxlen: 24
151.244.232.0/22 maxlen: 24
151.244.236.0/23 maxlen: 24
151.244.242.0/23 maxlen: 24
151.244.244.0/23 maxlen: 24
151.244.246.0/23 maxlen: 24
151.244.250.0/23 maxlen: 24
151.244.252.0/22 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.24.0/23 maxlen: 24
151.245.28.0/23 maxlen: 24
151.245.60.0/22 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.245.128.0/24 maxlen: 24
151.245.133.0/24 maxlen: 24
151.245.160.0/21 maxlen: 24
151.245.176.0/21 maxlen: 24
151.245.216.0/21 maxlen: 24
151.245.224.0/21 maxlen: 24
151.245.248.0/21 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.127.0/24 maxlen: 24
151.246.128.0/17 maxlen: 24
151.246.191.0/24 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 05:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:a9:3c:9c:4d:08:7b:85:28:72:fa:69:ef:15:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 12:03:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fb950d5297f65e394f06acf97b8ba8fd08c5692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:36:7d:17:43:34:21:c1:d6:51:21:49:9f:
f5:ca:22:95:53:72:8b:ee:5f:63:8e:50:d9:31:aa:
31:a1:65:63:fb:79:c6:25:24:d7:2b:c8:7b:53:0e:
10:d0:90:2a:96:48:3e:f0:e0:51:1d:50:6a:ba:f6:
fb:46:3b:36:80:f1:a1:1a:69:1e:44:6b:48:b4:3f:
e1:7e:0f:75:e9:b3:44:a1:4b:b0:ef:a0:db:2f:f0:
ae:ac:15:0c:c9:0a:26:b5:04:0e:f2:eb:a3:f9:d6:
bc:21:65:20:3c:f5:23:70:e9:a3:d2:a2:0e:9e:57:
fe:15:bc:de:da:55:cd:8e:7a:b3:e9:14:47:cf:b5:
b4:76:a2:05:f8:2b:e0:97:e1:91:48:33:6e:94:fe:
06:48:f8:87:49:19:ce:47:20:1f:d5:87:87:f8:bb:
c2:8b:d8:f6:88:60:75:2b:02:c7:51:ec:ed:24:16:
58:e6:49:8d:c2:3a:12:e2:06:8f:14:ca:b1:41:27:
a4:68:65:8a:6f:c4:c3:60:28:be:03:4d:5e:3b:ac:
20:bc:e2:5f:df:c6:f6:7c:f0:65:7a:52:3d:a5:b6:
62:32:67:fe:87:67:f7:e9:96:07:40:7e:e9:18:b5:
fe:8c:e4:aa:2f:ad:7e:f5:3b:5e:55:40:f3:fc:e0:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B9:50:D5:29:7F:65:E3:94:F0:6A:CF:97:B8:BA:8F:D0:8C:56:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P7lQ1Sl_ZeOU8GrPl7i6j9CMVpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.203.0/24
37.202.212.0/23
151.240.2.0/24
151.240.16.0/24
151.240.24.0/22
151.240.30.0/24
151.240.82.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0/23
151.240.124.0/23
151.240.145.0/24
151.240.152.0/23
151.240.158.0/24
151.240.161.0/24
151.240.163.0/24
151.240.173.0/24
151.240.179.0/24
151.240.228.0/24
151.240.231.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.242.255
151.240.247.0/24
151.240.249.0-151.240.250.255
151.241.0.0/16
151.242.19.0/24
151.242.51.0-151.242.55.255
151.242.122.0/24
151.242.133.0/24
151.242.136.0/23
151.242.144.0/23
151.242.164.0/23
151.242.168.0/23
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.44.0/22
151.243.83.0/24
151.243.93.0/24
151.243.99.0-151.243.103.255
151.243.108.0/23
151.243.113.0/24
151.243.123.0/24
151.243.136.0/22
151.243.152.0-151.243.158.255
151.243.171.0/24
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0/23
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.230.0/23
151.243.237.0/24
151.243.239.0/24
151.243.243.0/24
151.243.247.0-151.243.253.255
151.244.14.0/24
151.244.42.0/24
151.244.44.0/24
151.244.46.0/24
151.244.50.0/24
151.244.70.0/24
151.244.85.0/24
151.244.88.0/24
151.244.103.0/24
151.244.109.0/24
151.244.119.0-151.244.122.255
151.244.126.0/24
151.244.128.0/18
151.244.214.0/24
151.244.216.0/22
151.244.232.0-151.244.237.255
151.244.242.0-151.244.247.255
151.244.250.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
ad:27:75:92:b0:eb:a1:ae:73:89:d1:6a:78:5b:e3:6d:f7:16:
d2:85:7b:16:30:64:47:37:50:69:6a:5f:34:4e:37:d4:c8:a4:
bd:59:21:96:df:28:57:d4:be:ff:b8:f3:5e:bc:ee:de:14:b7:
81:c4:30:1e:d3:17:02:1a:46:15:59:43:3a:fc:e2:ef:f8:10:
e3:90:a4:59:73:8f:cc:ce:4a:3b:96:e1:52:9b:17:dc:5c:a6:
15:06:c3:89:1d:1d:27:91:d2:a8:0d:f9:da:19:75:8f:62:55:
4e:d8:67:01:c6:eb:63:b3:c3:84:84:e3:a4:73:31:14:cb:a1:
b5:a6:fb:21:7a:e2:60:13:e3:e2:6b:d8:6b:d5:f0:1d:80:79:
e7:9f:23:64:b0:7a:92:69:7b:b9:5a:c5:4a:7b:02:35:19:16:
dc:5c:bd:5b:61:df:7b:9c:1d:ac:f5:7a:ea:e6:c3:29:5a:7a:
df:6e:a3:48:d4:5c:ef:72:33:0f:13:3c:4c:64:82:2f:53:22:
6f:1f:54:10:d0:2f:3b:b9:95:75:43:13:03:ef:ab:21:56:a8:
24:6a:bd:84:86:dc:ac:dc:d8:a2:29:93:9d:8e:9a:89:3e:8a:
47:78:95:7b:47:cf:3f:e3:ef:85:bd:b8:de:61:c8:dc:24:d2:
f9:79:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:07:29 2025 by rpki-client