Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/oGGE6ml3cfW1leD121zJe5gabTU.roa
File: oGGE6ml3cfW1leD121zJe5gabTU.roa (raw, json)
Hash identifier: peLOOjTUuAcYfeYe2uMgkCcfqu16MGIOWw8waPOIBpw=
Subject key identifier: A0:61:84:EA:69:77:71:F5:B5:95:E0:F5:DB:5C:C9:7B:98:1A:6D:35
Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial: 019423D6B80C607B16FE7D2BE592C47F2BE9
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/oGGE6ml3cfW1leD121zJe5gabTU.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42781
IP address blocks: 80.184.3.0/24 maxlen: 24
80.184.9.0/24 maxlen: 24
80.184.10.0/24 maxlen: 24
80.184.11.0/24 maxlen: 24
80.184.12.0/23 maxlen: 23
80.184.17.0/24 maxlen: 24
80.184.19.0/24 maxlen: 24
80.184.21.0/24 maxlen: 24
80.184.24.0/22 maxlen: 22
80.184.29.0/24 maxlen: 24
80.184.55.0/24 maxlen: 24
80.184.56.0/24 maxlen: 24
80.184.77.0/24 maxlen: 24
80.184.85.0/24 maxlen: 24
80.184.95.0/24 maxlen: 24
80.184.107.0/24 maxlen: 24
80.184.109.0/24 maxlen: 24
80.184.110.0/24 maxlen: 24
80.184.117.0/24 maxlen: 24
80.184.120.0/22 maxlen: 22
80.184.124.0/24 maxlen: 24
80.184.125.0/24 maxlen: 24
80.184.127.0/24 maxlen: 24
80.184.135.0/24 maxlen: 24
80.184.140.0/23 maxlen: 23
80.184.144.0/22 maxlen: 22
80.184.148.0/22 maxlen: 22
80.184.165.0/24 maxlen: 24
80.184.190.0/24 maxlen: 24
80.184.200.0/24 maxlen: 24
80.184.204.0/22 maxlen: 22
80.184.216.0/22 maxlen: 22
80.184.221.0/24 maxlen: 24
80.184.224.0/22 maxlen: 22
80.184.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 08:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b8:0c:60:7b:16:fe:7d:2b:e5:92:c4:7f:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a06184ea697771f5b595e0f5db5cc97b981a6d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:51:bb:19:89:18:9f:5a:44:f4:87:25:74:
22:5b:19:9d:a9:87:ae:ae:5b:60:89:9e:43:53:46:
01:57:49:e7:6e:08:be:bd:15:5c:02:1e:dd:10:9b:
e1:c0:5f:19:e4:54:1b:6e:47:cc:65:7e:af:52:da:
8f:61:22:9e:77:91:f1:03:77:f1:70:c2:32:3a:f2:
71:28:28:1b:d1:c8:f9:ca:10:c6:d3:af:03:cf:0a:
8c:6a:5d:53:fd:83:7a:63:9b:ee:37:d2:2f:43:fb:
77:26:88:f2:59:a4:c8:2f:9b:5c:90:d2:17:bd:5b:
db:ee:5b:c4:d8:02:4b:45:97:a8:be:41:0b:71:10:
96:b0:9b:eb:9a:b7:e8:12:2e:bd:85:e4:60:06:ae:
52:5b:d1:35:bf:14:dc:b6:36:5d:1e:27:42:39:64:
d1:01:7e:31:1d:b4:21:bf:db:0d:3f:f3:f9:f5:c3:
38:eb:51:52:0d:c8:7e:72:11:53:6a:0f:f3:4b:ab:
71:81:11:f3:70:6c:50:fe:b0:46:c7:21:98:e8:81:
eb:8e:0b:40:4f:7e:47:b6:52:46:9f:8b:cc:60:47:
00:a3:ab:90:e7:ce:64:d8:ff:7d:4f:ff:29:e3:27:
58:51:be:4a:56:f7:a7:56:c5:e5:a5:c7:79:5f:af:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:84:EA:69:77:71:F5:B5:95:E0:F5:DB:5C:C9:7B:98:1A:6D:35
X509v3 Authority Key Identifier:
keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/oGGE6ml3cfW1leD121zJe5gabTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.184.3.0/24
80.184.9.0-80.184.13.255
80.184.17.0/24
80.184.19.0/24
80.184.21.0/24
80.184.24.0/22
80.184.29.0/24
80.184.55.0-80.184.56.255
80.184.77.0/24
80.184.85.0/24
80.184.95.0/24
80.184.107.0/24
80.184.109.0-80.184.110.255
80.184.117.0/24
80.184.120.0-80.184.125.255
80.184.127.0/24
80.184.135.0/24
80.184.140.0/23
80.184.144.0/21
80.184.165.0/24
80.184.190.0/24
80.184.200.0/24
80.184.204.0/22
80.184.216.0/22
80.184.221.0/24
80.184.224.0/22
80.184.229.0/24
Signature Algorithm: sha256WithRSAEncryption
49:91:2c:bb:71:5c:f9:0e:1b:1f:e3:2d:a6:ba:01:0e:48:cb:
87:6c:7c:64:3b:4e:ea:be:5f:23:78:2e:60:59:a6:65:e1:d8:
3b:a8:3b:15:d5:57:58:69:66:35:1b:03:b0:5b:7c:f0:14:01:
c1:bd:90:58:cb:c3:54:08:86:0e:92:a6:7d:7c:3b:57:c0:98:
87:b8:07:0d:e8:0d:f3:d8:a5:d6:75:8a:39:13:a6:bd:c7:04:
9e:ea:1a:ae:43:12:cb:da:46:49:11:64:7c:6a:82:ee:8b:d5:
85:65:8a:c2:02:35:6f:71:cf:0c:0c:26:03:b1:94:9b:10:7c:
bd:18:e0:df:a2:4d:20:91:a3:4d:90:fe:25:30:69:84:52:bb:
5f:26:1d:95:91:92:83:a7:5c:04:f9:cb:6f:3b:ef:2a:3a:78:
62:34:67:59:da:1a:ce:63:02:45:68:44:49:84:58:6d:68:c9:
1d:ea:be:b0:9e:e3:13:db:f7:47:b7:a7:56:be:ed:fe:39:09:
4d:f8:8a:90:28:79:98:9c:36:2a:9a:af:38:6d:64:fe:e8:18:
ec:c1:ee:07:4d:6a:e9:7c:21:1b:d1:e5:b7:d4:f3:57:11:1a:
65:ca:87:d7:29:bb:21:f4:d4:d3:ec:4f:ba:d4:17:9c:1b:17:
c2:ef:cb:28
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAZQj1rgMYHsW/n0r5ZLEfyvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjM5OWMyNzg5YjFhNTUwNGY4MTY3MWNmZjIyMGMwNGVh
ZjU5ZjEwHhcNMjUwMTAxMjE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDYxODRlYTY5Nzc3MWY1YjU5NWUwZjVkYjVjYzk3Yjk4MWE2ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5VRuxmJGJ9aRPSHJXQiWxmdqYeu
rltgiZ5DU0YBV0nnbgi+vRVcAh7dEJvhwF8Z5FQbbkfMZX6vUtqPYSKed5HxA3fx
cMIyOvJxKCgb0cj5yhDG068DzwqMal1T/YN6Y5vuN9IvQ/t3JojyWaTIL5tckNIX
vVvb7lvE2AJLRZeovkELcRCWsJvrmrfoEi69heRgBq5SW9E1vxTctjZdHidCOWTR
AX4xHbQhv9sNP/P59cM461FSDch+chFTag/zS6txgRHzcGxQ/rBGxyGY6IHrjgtA
T35HtlJGn4vMYEcAo6uQ585k2P99T/8p4ydYUb5KVvenVsXlpcd5X6+YswIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFKBhhOppd3H1tZXg9dtcyXuYGm01MB8GA1UdIwQY
MBaAFFIjmcJ4mxpVBPgWcc/yIMBOr1nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAt
ZDVkNTFkMzc5NDlkLzEvb0dHRTZtbDNjZlcxbGVEMTIxekplNWdhYlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAtZDVkNTFkMzc5NDlk
LzEvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBABQ
uAMwDAMEAFC4CQMEAVC4DAMEAFC4EQMEAFC4EwMEAFC4FQMEAlC4GAMEAFC4HTAM
AwQAULg3AwQAULg4AwQAULhNAwQAULhVAwQAULhfAwQAULhrMAwDBABQuG0DBABQ
uG4DBABQuHUwDAMEA1C4eAMEAVC4fAMEAFC4fwMEAFC4hwMEAVC4jAMEA1C4kAME
AFC4pQMEAFC4vgMEAFC4yAMEAlC4zAMEAlC42AMEAFC43QMEAlC44AMEAFC45TAN
BgkqhkiG9w0BAQsFAAOCAQEASZEsu3Fc+Q4bH+MtproBDkjLh2x8ZDtO6r5fI3gu
YFmmZeHYO6g7FdVXWGlmNRsDsFt88BQBwb2QWMvDVAiGDpKmfXw7V8CYh7gHDegN
89il1nWKOROmvccEnuoarkMSy9pGSRFkfGqC7ovVhWWKwgI1b3HPDAwmA7GUmxB8
vRjg36JNIJGjTZD+JTBphFK7XyYdlZGSg6dcBPnLbzvvKjp4YjRnWdoazmMCRWhE
SYRYbWjJHeq+sJ7jE9v3R7enVr7t/jkJTfiKkCh5mJw2KpqvOG1k/ugY7MHuB01q
6XwhG9Hlt9TzVxEaZcqH1ym7IfTU0+xPutQXnBsXwu/LKA==
-----END CERTIFICATE-----
Generated at Sat May 3 11:18:01 2025 by rpki-client