Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SLLYA4hWxax-rS8pDQw_CMTse4U.roa
File: SLLYA4hWxax-rS8pDQw_CMTse4U.roa (raw, json)
Hash identifier: r4SdaUh4/T2b5GsVcvdBPBs5vyfUdGAp63QALlZYVm4=
Subject key identifier: 48:B2:D8:03:88:56:C5:AC:7E:AD:2F:29:0D:0C:3F:08:C4:EC:7B:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902EEEB7500CC19BB616A8C0F9292C7875
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SLLYA4hWxax-rS8pDQw_CMTse4U.roa
Signing time: Wed 19 Jun 2024 05:18:34 +0000
ROA not before: Wed 19 Jun 2024 05:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.221.120.0/22 maxlen: 24
45.66.229.0/24 maxlen: 24
45.81.241.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.144.152.0/24 maxlen: 24
45.144.153.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
45.149.233.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
45.149.243.0/24 maxlen: 24
45.151.88.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.33.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.86.0/23 maxlen: 24
87.121.221.0/24 maxlen: 24
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.78.0/24 maxlen: 24
94.156.238.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
171.22.17.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
178.215.224.0/24 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.42.32.0/23 maxlen: 24
193.149.2.0/24 maxlen: 24
193.149.3.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 05:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2e:ee:b7:50:0c:c1:9b:b6:16:a8:c0:f9:29:2c:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 19 05:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b2d8038856c5ac7ead2f290d0c3f08c4ec7b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:3f:ad:b9:61:b5:c2:21:e2:36:47:27:a6:
0a:6a:20:2f:13:b6:07:7c:80:28:35:0a:e8:63:94:
58:0a:42:6d:64:75:44:8b:60:a7:c9:86:f1:69:dc:
6d:02:03:d1:49:7c:f5:ea:d8:d3:bf:b1:b5:07:71:
7f:3b:0e:30:e7:d1:5a:57:93:e3:30:b6:82:9a:e8:
ad:65:0d:c8:20:dc:45:f2:fe:ef:75:55:88:49:f1:
a4:a8:d1:35:12:2b:a6:07:84:6a:fb:cf:39:19:14:
0b:00:83:a1:de:49:2e:be:e4:24:78:82:37:84:e4:
16:71:01:cb:d5:7a:89:36:69:20:5f:25:e3:cb:a9:
6b:47:8b:b7:57:1d:c4:14:bf:57:a2:0f:67:49:f6:
33:0e:f2:97:5e:71:e6:f5:6d:03:53:3f:2a:b3:e9:
38:07:53:6d:81:64:73:a7:bd:25:df:ab:8e:1f:39:
08:d4:04:c2:6c:a0:0e:62:5d:29:49:64:28:45:b0:
a8:bd:a1:5f:da:4f:17:c4:ee:64:74:16:f3:db:d7:
83:a1:d3:e9:b4:84:80:16:ab:a5:d1:32:c3:df:7c:
0b:8b:c9:74:66:80:d5:58:62:8c:44:99:bd:e1:9b:
6e:2e:c2:07:a0:0d:d4:7c:8e:7e:c7:ea:65:13:9d:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:D8:03:88:56:C5:AC:7E:AD:2F:29:0D:0C:3F:08:C4:EC:7B:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SLLYA4hWxax-rS8pDQw_CMTse4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.120.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.88.88.0/24
45.144.152.0-45.144.154.255
45.149.233.0/24
45.149.242.0/23
45.151.88.0/23
82.115.211.0/24
83.219.97.0/24
84.21.174.0/23
87.120.33.0/24
87.120.87.0/24
87.121.45.0/24
87.121.86.0/23
87.121.221.0/24
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.78.0/24
94.156.238.0/24
95.214.25.0-95.214.26.255
141.98.1.0/24
147.78.102.0/24
171.22.17.0/24
171.22.72.0/22
178.215.224.0/24
185.216.84.0/22
185.218.84.0/22
193.42.32.0/23
193.149.2.0/23
194.48.248.0/24
194.55.224.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7e:0c:c4:9b:7c:fd:04:18:28:5d:19:36:29:ae:84:6f:06:
e8:5a:98:f2:81:5e:44:94:07:4e:99:0e:6b:32:7d:3e:f9:68:
d9:4f:eb:20:f6:6a:ce:1f:d1:03:43:45:21:98:58:8d:75:f9:
cc:d0:b9:ad:2f:df:27:71:13:ac:52:58:66:6c:09:6b:cb:54:
a9:7c:7b:60:f8:6c:d9:cf:f9:1c:1e:8d:6c:db:e2:18:d9:b1:
6d:c0:fc:3c:ed:23:16:1c:58:07:5b:f4:86:f6:9e:4a:e3:0a:
8c:ba:f3:f2:e3:52:e0:66:3b:95:3c:62:ef:be:c5:c5:33:63:
e7:59:e7:3f:bb:82:a5:78:59:f1:4f:14:89:f2:78:9d:3a:c3:
bf:9f:ab:ea:42:e5:83:d1:78:a2:ed:02:65:ae:19:43:75:5e:
3c:41:10:dd:31:43:7d:58:d3:2a:da:2d:76:2c:92:fb:e8:8a:
8b:5a:52:4c:5b:cf:d1:5c:e1:a1:0f:81:09:37:f0:75:9a:1b:
f3:2f:6b:77:35:bd:ae:57:ce:fb:27:fc:11:85:75:84:9f:15:
e7:b1:06:92:a5:e6:25:cd:1c:e4:81:e4:4c:34:99:f3:53:e1:
94:f6:fe:56:84:4c:16:a9:d6:9d:08:45:b6:85:1f:0d:73:7d:
1d:bb:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:10:03 2024 by rpki-client on console-ams.rpki-client.org