Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R9XHL6DdCfKQ1fiXjBXciM6ppxU.roa
File: R9XHL6DdCfKQ1fiXjBXciM6ppxU.roa (raw, json)
Hash identifier: GawnsZsEFxnLJYwpoupYcYb5/M/8QN4BLEjmtF3u1cM=
Subject key identifier: 47:D5:C7:2F:A0:DD:09:F2:90:D5:F8:97:8C:15:DC:88:CE:A9:A7:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1486C5A805BF70C9D88994B3F1AB7B0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R9XHL6DdCfKQ1fiXjBXciM6ppxU.roa
Signing time: Fri 27 Jun 2025 12:06:42 +0000
ROA not before: Fri 27 Jun 2025 12:06:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 11:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:48:6c:5a:80:5b:f7:0c:9d:88:99:4b:3f:1a:b7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 12:06:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47d5c72fa0dd09f290d5f8978c15dc88cea9a715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:73:ed:22:19:19:39:33:b1:5b:5a:61:a3:
a3:0f:32:47:01:92:ab:6f:2e:63:1c:0e:86:f0:5b:
49:c4:cf:d1:4d:7f:fb:c6:24:ea:e7:01:c9:ac:38:
64:58:2f:43:86:20:b1:13:e9:10:4c:30:50:c3:a5:
66:b8:2a:65:62:8f:8a:3d:88:b5:17:f0:33:73:8d:
a1:64:ee:eb:dc:b4:92:2e:40:e3:3a:07:1d:4f:11:
d8:c9:73:fb:36:7f:45:f6:f7:5d:70:9c:35:1f:93:
93:61:df:cc:e1:b2:d3:5a:27:86:5c:a4:49:27:32:
f5:02:3b:2d:a5:e3:7b:c5:40:de:cc:a5:02:72:e7:
58:8e:77:29:a4:0a:b2:ef:16:73:54:a5:2f:6a:59:
76:9b:95:ce:70:52:17:a4:fe:4e:4e:be:06:ee:9a:
8e:fc:d7:ec:bf:29:fd:14:6c:70:a2:ee:9e:ff:67:
c0:57:65:d6:49:5f:b5:eb:61:88:26:f8:1f:d5:93:
bb:6f:ca:3f:ee:47:30:04:5f:39:be:c5:eb:c5:a5:
66:2d:be:56:c2:49:af:51:67:21:63:42:44:26:e2:
fc:ed:45:9b:b4:4f:94:93:c4:f0:05:3b:e9:cc:25:
f2:df:4b:2e:54:97:3d:c3:f3:31:a8:0e:92:ec:26:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:C7:2F:A0:DD:09:F2:90:D5:F8:97:8C:15:DC:88:CE:A9:A7:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R9XHL6DdCfKQ1fiXjBXciM6ppxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.2.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.241.1.0/24
151.242.91.0/24
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:83:81:5e:ad:62:a2:50:67:14:d9:5f:ca:96:6b:b2:5c:fe:
0d:10:bf:4f:46:1c:4e:11:9e:2a:e8:7a:6a:33:02:0b:2e:ea:
13:60:02:15:2e:80:f2:17:b6:69:23:6f:68:fd:55:8f:73:9e:
cd:8e:62:3a:77:3d:91:fa:b7:4a:dd:00:18:22:d8:d8:93:fb:
c1:07:c9:8b:18:b5:c3:ab:d2:17:2d:67:ff:89:62:db:53:99:
63:ce:41:3c:58:1d:6d:75:6d:9a:a5:9c:6c:c9:aa:6c:7d:21:
be:8b:17:fd:d0:96:53:14:c6:11:69:34:4b:3b:27:77:e8:81:
dc:0f:56:36:0d:f2:fb:59:7b:8c:61:6e:81:06:56:99:64:d6:
2f:a6:a5:10:38:b3:67:8e:ee:10:38:48:18:8f:4f:ee:84:ee:
0c:cc:14:0e:9a:7d:63:ae:df:b3:f3:a1:02:cb:bd:49:c2:95:
29:95:8e:83:e9:de:24:91:3c:8c:f4:d8:c8:71:7d:2d:5c:5a:
d0:7b:8b:7c:d1:4a:2d:ac:52:ec:7e:b4:6c:27:8a:de:34:d2:
9d:28:86:d1:0d:a3:11:90:cc:e8:d6:e6:6c:e7:15:5d:17:19:
04:b7:51:89:c2:54:f9:cc:4f:ce:62:b6:4a:fa:31:9f:81:cd:
92:35:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:53:11 2025 by rpki-client