Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NLTDT6fwnp9K3GJJbHt0TNDsvY4.roa
File: NLTDT6fwnp9K3GJJbHt0TNDsvY4.roa (raw, json)
Hash identifier: mogLBIHYCFB8Q4TDUjFrkYiGHibDm8mAG5qK4FJlzEc=
Subject key identifier: 34:B4:C3:4F:A7:F0:9E:9F:4A:DC:62:49:6C:7B:74:4C:D0:EC:BD:8E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192E7D61C60FE27B92CBD18FF336262E9DC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NLTDT6fwnp9K3GJJbHt0TNDsvY4.roa
Signing time: Fri 01 Nov 2024 13:07:01 +0000
ROA not before: Fri 01 Nov 2024 13:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 89.35.159.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
89.44.207.0/24 maxlen: 24
92.114.107.0/24 maxlen: 24
103.212.80.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
185.121.122.0/23 maxlen: 24
188.212.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 11:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e7:d6:1c:60:fe:27:b9:2c:bd:18:ff:33:62:62:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 1 13:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34b4c34fa7f09e9f4adc62496c7b744cd0ecbd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:cd:c5:4b:d6:b6:64:04:cb:0d:8e:8d:a4:
30:5f:6b:40:3c:62:fa:35:79:73:43:69:fd:38:ec:
42:15:fe:4d:b7:21:86:a4:c7:1c:bb:6d:99:ad:1a:
35:38:f3:b2:2a:11:1c:60:fc:0e:c5:73:2b:48:1f:
3f:fe:5d:64:41:97:14:e7:5d:d3:26:67:54:d6:93:
64:3e:5a:09:09:da:d0:98:a0:6e:85:7c:0d:aa:71:
aa:96:93:01:24:f9:3c:d9:f6:31:48:88:e9:94:3b:
9e:ad:f2:c9:12:a5:c0:c1:28:74:19:79:c9:54:77:
30:e5:c7:a6:7a:b8:f3:46:37:14:38:32:86:fe:d0:
72:38:fe:2d:5c:28:79:63:15:23:39:b5:91:55:23:
48:6d:30:bd:70:5d:4e:24:f8:f7:d0:5f:49:51:eb:
d0:a3:57:86:df:8c:58:c1:7e:8b:f7:0f:2f:a6:da:
9a:61:26:3f:a4:fc:66:00:b9:44:0c:69:62:10:9f:
88:12:1b:d2:a7:68:04:16:b9:e8:9e:0b:6d:af:83:
eb:d4:6b:4c:3d:6a:fc:8e:77:a3:80:27:76:f7:1b:
8f:ac:9e:54:9d:00:6a:76:0c:ad:9d:10:f5:c2:0e:
b0:23:97:7f:c0:3d:9c:4b:7a:d3:5c:2d:66:2c:d2:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B4:C3:4F:A7:F0:9E:9F:4A:DC:62:49:6C:7B:74:4C:D0:EC:BD:8E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NLTDT6fwnp9K3GJJbHt0TNDsvY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.159.0/24
89.37.63.0/24
89.44.207.0/24
92.114.107.0/24
103.212.80.0/24
185.9.55.0/24
185.121.122.0/23
188.212.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:09:03:86:e5:b2:b0:38:94:52:c3:e6:af:91:f1:51:03:92:
36:92:87:0b:31:b5:17:ca:0a:7f:13:05:cd:92:33:56:73:ee:
c2:47:7c:03:c2:29:c7:62:bd:91:ab:00:f2:f6:23:76:14:9a:
a7:b8:65:b2:21:f4:24:a0:23:ef:4e:61:a9:f1:0a:41:97:9a:
b3:a8:cc:09:54:dc:91:ec:74:41:c8:f7:9e:da:38:a6:1c:64:
0c:c7:a6:17:24:77:14:6e:70:57:83:1d:1d:78:ff:41:c5:6b:
a1:8a:bf:0f:2b:88:c9:de:aa:10:6f:4c:c8:b3:6a:e7:69:96:
60:3d:b0:95:b9:2c:91:8c:3d:30:53:1d:e1:52:b5:a0:40:69:
12:36:67:67:a7:a5:5b:40:fc:64:df:58:33:9a:eb:b9:69:20:
67:18:31:2c:df:f0:21:3e:92:31:c6:bf:25:0b:53:62:fc:36:
94:9f:3d:53:2b:ea:85:12:8b:7b:a2:3a:9c:51:7e:3a:cc:f1:
21:32:3b:e7:c1:ed:01:3e:9a:93:8e:af:22:e1:26:2a:c7:eb:
42:60:76:24:5b:7b:77:83:0e:0d:31:74:5f:5d:4b:ba:49:bd:
47:f7:bc:b1:5f:4c:45:38:75:36:4d:00:8e:a5:25:40:ea:a3:
64:3a:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:07:44 2024 by rpki-client on console-ams.rpki-client.org