Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/DHs1_HWjFSEDol-og76gNXuZPWk.roa
File: DHs1_HWjFSEDol-og76gNXuZPWk.roa (raw, json)
Hash identifier: FBQTizTmi6i4y5BfJkaAa8ooKHiDuvytffi5Qd5t5r0=
Subject key identifier: 0C:7B:35:FC:75:A3:15:21:03:A2:5F:A8:83:BE:A0:35:7B:99:3D:69
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 0194658C2807E3B80B25D40CB3808F1BE349
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/DHs1_HWjFSEDol-og76gNXuZPWk.roa
Signing time: Tue 14 Jan 2025 16:01:11 +0000
ROA not before: Tue 14 Jan 2025 16:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212128
IP address blocks: 2a10:cbc0::/32 maxlen: 32
2a10:cbc1::/32 maxlen: 32
2a10:cbc2::/32 maxlen: 32
2a10:cbc3::/32 maxlen: 32
2a11:e380::/32 maxlen: 32
2a11:e381::/32 maxlen: 32
2a11:e382::/32 maxlen: 32
2a11:e383::/32 maxlen: 32
2a11:e384::/32 maxlen: 32
2a11:e385::/32 maxlen: 32
2a11:e386::/32 maxlen: 32
2a11:e387::/32 maxlen: 32
2a12:70c0::/32 maxlen: 32
2a12:70c1::/32 maxlen: 32
2a12:70c2::/32 maxlen: 32
2a12:70c3::/32 maxlen: 32
2a12:70c4::/32 maxlen: 32
2a12:70c5::/32 maxlen: 32
2a12:70c6::/32 maxlen: 32
2a12:70c7::/32 maxlen: 32
2a13:7e00::/32 maxlen: 32
2a13:7e01::/32 maxlen: 32
2a13:7e02::/32 maxlen: 32
2a13:7e03::/32 maxlen: 32
2a13:7e04::/32 maxlen: 32
2a13:7e05::/32 maxlen: 32
2a13:7e06::/32 maxlen: 32
2a13:7e07::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 14 Jan 2025 16:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:8c:28:07:e3:b8:0b:25:d4:0c:b3:80:8f:1b:e3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 14 16:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c7b35fc75a3152103a25fa883bea0357b993d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:04:e8:fc:4e:0a:bd:06:20:72:19:22:7f:
16:4f:10:1e:04:81:d5:87:71:2a:58:e3:4f:a2:5b:
8b:89:24:f9:b1:bf:fc:f4:55:46:de:82:52:70:6e:
f4:9d:f1:4a:0c:88:f3:5a:73:f1:2d:05:ea:ee:08:
24:e9:0f:e0:43:e3:0f:c3:1a:4a:e9:31:31:36:b1:
b3:ec:8a:51:50:01:4f:d8:60:d7:7b:0b:c1:ba:f7:
b0:9a:89:cf:49:61:33:96:cc:22:7c:aa:56:a6:50:
ad:5f:c1:f3:7d:d9:83:3c:f5:9f:91:4b:1f:09:52:
f3:f3:94:af:f9:97:bf:43:92:f7:f5:7c:00:eb:8d:
da:4b:60:c2:3d:02:8f:e1:4b:e0:2d:9c:6c:fa:e1:
90:dd:5e:d6:ae:bc:fb:2a:28:2f:d4:89:b8:df:e1:
68:6e:44:d8:4a:97:e2:03:43:08:30:60:c4:ae:88:
cf:c3:85:95:0e:2f:0c:45:fe:f1:96:01:27:f5:a1:
4d:31:b6:05:88:db:5a:a4:fc:5e:0f:a3:46:e6:7d:
95:c0:de:a2:95:81:96:43:e0:ad:0b:3c:1a:1d:e8:
4b:fd:5d:05:68:e0:65:3a:73:67:a6:59:24:dd:90:
d1:0c:14:2c:7e:86:bf:e2:ad:85:6a:f3:4e:07:1a:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:35:FC:75:A3:15:21:03:A2:5F:A8:83:BE:A0:35:7B:99:3D:69
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/DHs1_HWjFSEDol-og76gNXuZPWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cbc0::/30
2a11:e380::/29
2a12:70c0::/29
2a13:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
01:59:a8:72:21:18:1b:42:fb:9f:7a:71:d7:f4:be:1b:a4:9d:
52:e0:01:16:5c:f3:2e:ac:3f:12:85:b8:f0:34:38:84:d1:b2:
d8:a8:ad:49:b1:f8:1f:22:6f:f2:af:91:56:51:b9:01:94:38:
45:d1:18:f5:b3:e5:ce:b0:3d:2a:5f:d2:e9:9c:ba:ef:f2:07:
77:5e:b1:d2:76:db:23:29:c8:ff:91:cd:15:cf:d2:fb:9f:0c:
75:40:ae:f7:b2:8c:41:ec:f8:77:82:7f:af:5a:1b:14:4b:d9:
59:c0:0a:4c:4a:36:a8:40:23:6a:2b:01:70:cd:f9:54:6a:1e:
f5:07:6b:b8:a8:2d:e5:0f:df:a9:6d:ac:d7:be:df:2e:7b:43:
e6:69:3f:70:31:d6:92:3a:a5:9d:31:16:77:84:f8:1f:5a:3b:
1e:be:53:04:e4:13:b7:90:43:cd:14:ba:a7:32:57:6e:8a:94:
81:9d:99:d3:0d:01:82:22:30:b9:91:bb:9a:d6:00:98:6c:97:
c9:36:0e:ee:d1:ab:e3:5b:ff:fb:1d:4a:6e:9c:e7:93:c7:6f:
b8:10:23:9d:dd:a2:3f:49:60:88:aa:08:0a:b5:c3:22:4b:2c:
8a:c0:f9:60:7d:58:30:9c:55:34:2a:92:ed:c4:3c:11:02:5f:
2c:c4:83:da
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZRljCgH47gLJdQMs4CPG+NJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjUwMTE0MTYwMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzdiMzVmYzc1YTMxNTIxMDNhMjVmYTg4M2JlYTAzNTdiOTkzZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCAE6PxOCr0GIHIZIn8WTxAeBIHV
h3EqWONPoluLiST5sb/89FVG3oJScG70nfFKDIjzWnPxLQXq7ggk6Q/gQ+MPwxpK
6TExNrGz7IpRUAFP2GDXewvBuvewmonPSWEzlswifKpWplCtX8HzfdmDPPWfkUsf
CVLz85Sv+Ze/Q5L39XwA643aS2DCPQKP4UvgLZxs+uGQ3V7Wrrz7Kigv1Im43+Fo
bkTYSpfiA0MIMGDErojPw4WVDi8MRf7xlgEn9aFNMbYFiNtapPxeD6NG5n2VwN6i
lYGWQ+CtCzwaHehL/V0FaOBlOnNnplkk3ZDRDBQsfoa/4q2FavNOBxqmzQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFAx7Nfx1oxUhA6JfqIO+oDV7mT1pMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvREhzMV9IV2pGU0VEb2wtb2c3NmdOWHVaUFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUCKhDLwAMF
AyoR44ADBQMqEnDAAwUDKhN+ADANBgkqhkiG9w0BAQsFAAOCAQEAAVmociEYG0L7
n3px1/S+G6SdUuABFlzzLqw/EoW48DQ4hNGy2KitSbH4HyJv8q+RVlG5AZQ4RdEY
9bPlzrA9Kl/S6Zy67/IHd16x0nbbIynI/5HNFc/S+58MdUCu97KMQez4d4J/r1ob
FEvZWcAKTEo2qEAjaisBcM35VGoe9QdruKgt5Q/fqW2s177fLntD5mk/cDHWkjql
nTEWd4T4H1o7Hr5TBOQTt5BDzRS6pzJXboqUgZ2Z0w0BgiIwuZG7mtYAmGyXyTYO
7tGr41v/+x1Kbpznk8dvuBAjnd2iP0lgiKoICrXDIkssisD5YH1YMJxVNCqS7cQ8
EQJfLMSD2g==
-----END CERTIFICATE-----
Generated at Thu May 1 09:30:56 2025 by rpki-client