Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xibq8hPBtww6scXKe8vyQf7hSf8.roa
File: xibq8hPBtww6scXKe8vyQf7hSf8.roa (raw, json)
Hash identifier: sz2+puj8hoS0sgtB73Roroqiz+upYSCo5y3pMVQ33N4=
Subject key identifier: C6:26:EA:F2:13:C1:B7:0C:3A:B1:C5:CA:7B:CB:F2:41:FE:E1:49:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019748B51C8853866864BD1779F3DA13D45D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xibq8hPBtww6scXKe8vyQf7hSf8.roa
Signing time: Sat 07 Jun 2025 04:45:18 +0000
ROA not before: Sat 07 Jun 2025 04:45:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.29.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.118.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.155.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.226.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.14.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.16.0/24 maxlen: 24
151.241.17.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.23.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.28.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.34.0/24 maxlen: 24
151.241.38.0/24 maxlen: 24
151.241.42.0/24 maxlen: 24
151.241.44.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.46.0/24 maxlen: 24
151.241.49.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.72.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.241.75.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.80.0/24 maxlen: 24
151.241.81.0/24 maxlen: 24
151.241.82.0/24 maxlen: 24
151.241.83.0/24 maxlen: 24
151.241.84.0/24 maxlen: 24
151.241.85.0/24 maxlen: 24
151.241.86.0/24 maxlen: 24
151.241.87.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.99.0/24 maxlen: 24
151.241.100.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.241.114.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.118.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.120.0/24 maxlen: 24
151.241.121.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.124.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.241.126.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.51.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.89.0/24 maxlen: 24
151.242.129.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.136.0/24 maxlen: 24
151.242.137.0/24 maxlen: 24
151.242.138.0/24 maxlen: 24
151.242.144.0/23 maxlen: 23
151.242.144.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.242.154.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.224.0/22 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.44.0/22 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.143.0/24 maxlen: 24
151.243.150.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.164.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.188.0/22 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.215.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.221.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.234.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.240.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.116.0/24 maxlen: 24
151.244.128.0/17 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 05:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:b5:1c:88:53:86:68:64:bd:17:79:f3:da:13:d4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 04:45:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c626eaf213c1b70c3ab1c5ca7bcbf241fee149ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:fb:d3:bc:d7:fb:60:97:bf:2d:24:3f:f8:
55:1b:72:53:30:14:54:d8:ba:61:7d:3f:d6:f6:8a:
d5:44:82:52:04:aa:de:e6:30:de:26:29:c6:73:0f:
44:85:d6:ab:3a:9e:a1:e2:a2:89:45:b7:17:c8:fe:
eb:f1:52:ac:07:4d:3e:13:91:23:3d:44:d4:1a:07:
81:b2:4e:8a:22:f4:ab:13:a4:3a:7a:d2:af:b6:b3:
c7:3c:99:91:f7:a7:ae:ca:a2:d6:7e:81:22:fa:ac:
4f:95:de:d5:14:99:af:26:27:bd:cb:59:78:10:a2:
46:ca:49:e0:6f:48:74:b0:77:e7:4f:0e:ce:5e:8a:
ad:e2:d9:59:c0:bc:36:ff:eb:fc:bf:98:e0:01:0f:
52:59:e3:d0:cb:22:4d:ad:e0:88:b6:80:74:e2:be:
6c:5c:6a:b7:64:1d:72:2b:67:7a:0d:2c:2f:da:0e:
d0:ed:d6:aa:b3:02:11:a5:af:24:4d:1b:3e:49:5d:
01:f3:14:4c:fd:01:27:85:3f:a3:8e:4c:51:14:7a:
16:68:e7:b8:f7:fd:ef:cb:69:4e:d0:54:19:30:12:
0f:4e:e7:52:c5:fb:bb:6a:3f:a6:38:e4:de:46:7f:
52:2c:db:52:69:bf:8b:18:a2:4c:50:93:3a:57:31:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:26:EA:F2:13:C1:B7:0C:3A:B1:C5:CA:7B:CB:F2:41:FE:E1:49:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xibq8hPBtww6scXKe8vyQf7hSf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.210.0/24
37.202.212.0/23
151.240.2.0/24
151.240.8.0/24
151.240.15.0-151.240.16.255
151.240.29.0/24
151.240.76.0/24
151.240.80.0-151.240.82.255
151.240.89.0/24
151.240.112.0/22
151.240.118.0-151.240.121.255
151.240.124.0/23
151.240.144.0-151.240.157.255
151.240.159.0-151.240.160.255
151.240.162.0-151.240.168.255
151.240.170.0-151.240.178.255
151.240.205.0-151.240.228.255
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.247.255
151.240.249.0-151.240.253.255
151.241.0.0/16
151.242.20.0/24
151.242.51.0-151.242.55.255
151.242.64.0/24
151.242.89.0/24
151.242.129.0/24
151.242.132.0/24
151.242.136.0-151.242.138.255
151.242.144.0/23
151.242.154.0/24
151.242.192.0/20
151.242.224.0/22
151.243.16.0/20
151.243.44.0/22
151.243.83.0/24
151.243.100.0/22
151.243.123.0/24
151.243.136.0/22
151.243.143.0/24
151.243.150.0/24
151.243.158.0/24
151.243.164.0/24
151.243.173.0-151.243.175.255
151.243.188.0/22
151.243.204.0/22
151.243.212.0/22
151.243.220.0/23
151.243.223.0/24
151.243.226.0/24
151.243.229.0-151.243.231.255
151.243.234.0/24
151.243.237.0-151.243.240.255
151.243.246.0/23
151.243.252.0-151.243.254.255
151.244.70.0/24
151.244.116.0/24
151.244.128.0-151.245.255.255
Signature Algorithm: sha256WithRSAEncryption
63:8b:27:12:45:17:c6:1c:18:12:c6:4a:c2:97:d3:0b:f7:e0:
8f:c1:57:73:08:fd:01:1f:85:3b:ac:31:f8:95:db:a1:c7:ad:
d3:1f:97:d2:84:5f:c1:de:65:a7:a2:8a:e3:70:53:6e:6a:52:
7e:a7:7b:40:f2:cd:a9:ab:b4:fe:45:7c:35:83:b1:12:1f:e9:
54:63:05:67:51:e8:34:57:59:50:46:5a:95:25:2d:d5:65:5b:
06:45:47:9b:c0:c4:dd:70:6e:b1:f0:e6:83:cf:4f:50:f3:93:
e5:4a:08:26:37:12:65:e1:dd:66:43:38:cd:25:49:d8:8f:09:
09:f4:60:b4:cc:ac:cf:f7:00:48:a0:01:42:19:91:03:1d:64:
b9:f0:26:57:e3:ac:16:50:b4:a7:ad:56:06:29:a5:af:39:60:
73:92:14:e2:45:23:d1:4a:99:1e:9f:f5:de:76:ec:2c:54:2f:
a6:2d:8e:a7:38:60:86:ce:50:ec:af:08:72:47:2b:8e:ce:86:
a0:27:3e:95:a2:a9:f2:ca:f9:86:31:c2:12:ad:7d:6b:ec:d1:
52:35:95:52:20:87:9b:ef:ff:3c:63:87:df:c6:af:56:8b:de:
69:a4:23:91:37:51:fd:e7:d8:eb:49:d3:49:ec:92:5e:e0:6b:
19:69:25:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:37:14 2025 by rpki-client