Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Il-9uCnPLOeiaKqWc5VrCFC_dHc.roa
File: Il-9uCnPLOeiaKqWc5VrCFC_dHc.roa (raw, json)
Hash identifier: l6H9f6pHPzVYCe/WlLx+IpJzfGf5XlFb8k1P/OoBo28=
Subject key identifier: 22:5F:BD:B8:29:CF:2C:E7:A2:68:AA:96:73:95:6B:08:50:BF:74:77
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018F25D3679F52B440E0AEEB8BE93E190C62
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Il-9uCnPLOeiaKqWc5VrCFC_dHc.roa
Signing time: Sun 28 Apr 2024 17:49:22 +0000
ROA not before: Sun 28 Apr 2024 17:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.16.0/22 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 06:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:25:d3:67:9f:52:b4:40:e0:ae:eb:8b:e9:3e:19:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 28 17:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=225fbdb829cf2ce7a268aa9673956b0850bf7477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:b2:b8:20:2c:b9:a8:f4:18:d2:c8:d8:a9:
f5:5b:9e:0a:28:dd:ec:15:e9:85:e0:95:75:62:30:
8d:25:6e:07:27:7a:2b:3a:91:30:12:f4:bb:f7:2b:
94:a4:f2:64:dd:fd:b8:0a:7d:d2:98:48:19:5a:27:
55:1e:aa:42:7d:77:48:9c:cc:33:80:05:b9:4c:a1:
0d:e7:12:9e:59:6d:f3:4a:58:b6:18:50:ae:5b:35:
0e:3b:08:3d:e8:e3:b0:db:dc:43:4d:56:0b:b9:68:
23:67:75:9d:c0:77:42:5d:4c:00:57:4e:3f:60:fc:
fe:ae:bf:f6:80:f8:83:4e:b8:ad:62:1c:64:0b:0f:
e5:e3:db:6f:f5:2e:be:0a:27:55:fc:37:66:44:2a:
a2:6f:a0:4a:91:55:fd:88:d0:da:af:cc:4b:fd:e1:
57:0a:0c:e2:95:2f:57:fd:d2:62:5c:80:97:37:57:
ad:b2:99:5d:ee:67:c5:aa:b4:50:3d:d0:28:27:ea:
cb:c1:d9:14:68:37:5b:77:04:42:2b:af:31:69:84:
06:d2:ea:67:7e:81:ca:12:b5:7f:6e:0b:17:10:07:
74:a1:b8:fa:6e:37:25:95:e3:76:dc:2e:01:85:ea:
52:64:88:cd:58:ac:21:c9:bd:9d:a3:f1:15:c0:96:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5F:BD:B8:29:CF:2C:E7:A2:68:AA:96:73:95:6B:08:50:BF:74:77
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Il-9uCnPLOeiaKqWc5VrCFC_dHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.16.0/22
83.147.21.0/24
83.147.36.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:8c:7e:d3:2f:29:46:1f:42:dd:44:55:c2:cc:3e:45:c7:2c:
57:54:12:e6:5f:50:f7:7d:b1:2e:ae:88:63:a6:c7:fd:e7:a2:
a0:89:71:8f:f6:ed:00:a4:78:4a:19:37:0d:47:a6:3b:8a:54:
03:72:66:cb:6b:52:34:35:88:fc:57:a4:8b:2a:db:09:c9:a0:
46:ea:a2:8e:f4:d4:2b:63:75:47:65:7f:51:83:8a:6f:7f:69:
4e:b0:67:7b:de:90:2c:54:21:14:74:87:4a:b6:d1:96:fe:80:
d4:1f:fd:c4:33:c4:aa:81:ca:f9:e5:cc:4c:30:d0:bb:a1:bb:
8d:26:09:ec:66:e6:24:d7:f7:79:a7:0d:4f:45:bc:2f:55:99:
5f:dd:27:8e:1e:e4:6c:62:72:62:9a:94:bd:13:b7:e3:52:c4:
af:83:a1:03:f2:f4:1e:11:0f:5b:a7:4f:c1:90:4b:2c:d7:bd:
6c:46:5f:61:40:a1:f3:fa:a1:be:79:eb:0a:29:ad:f8:3a:18:
32:d7:0d:18:2e:e7:36:e8:f5:9d:90:ca:df:af:25:ee:30:f1:
22:f7:82:fe:5d:71:c8:1a:df:41:bd:db:d7:9b:d3:8e:c3:fb:
a3:57:ad:a7:a4:fc:f2:81:c3:2d:ed:9e:8c:68:e0:74:64:70:
42:a6:f5:c9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY8l02efUrRA4K7ri+k+GQxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwNDI4MTc0OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjVmYmRiODI5Y2YyY2U3YTI2OGFhOTY3Mzk1NmIwODUwYmY3NDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQSyuCAsuaj0GNLI2Kn1W54KKN3s
FemF4JV1YjCNJW4HJ3orOpEwEvS79yuUpPJk3f24Cn3SmEgZWidVHqpCfXdInMwz
gAW5TKEN5xKeWW3zSli2GFCuWzUOOwg96OOw29xDTVYLuWgjZ3WdwHdCXUwAV04/
YPz+rr/2gPiDTritYhxkCw/l49tv9S6+CidV/DdmRCqib6BKkVX9iNDar8xL/eFX
CgzilS9X/dJiXICXN1etspld7mfFqrRQPdAoJ+rLwdkUaDdbdwRCK68xaYQG0upn
foHKErV/bgsXEAd0obj6bjclleN23C4BhepSZIjNWKwhyb2do/EVwJbfHwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCJfvbgpzyznomiqlnOVawhQv3R3MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvSWwtOXVDblBMT2VpYUtxV2M1VnJDRkNfZEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCU5MAAwQC
U5MQAwQAU5MVAwQCU5MkMA0GCSqGSIb3DQEBCwUAA4IBAQDGjH7TLylGH0LdRFXC
zD5FxyxXVBLmX1D3fbEurohjpsf956KgiXGP9u0ApHhKGTcNR6Y7ilQDcmbLa1I0
NYj8V6SLKtsJyaBG6qKO9NQrY3VHZX9Rg4pvf2lOsGd73pAsVCEUdIdKttGW/oDU
H/3EM8Sqgcr55cxMMNC7obuNJgnsZuYk1/d5pw1PRbwvVZlf3SeOHuRsYnJimpS9
E7fjUsSvg6ED8vQeEQ9bp0/BkEss171sRl9hQKHz+qG+eesKKa34Ohgy1w0YLuc2
6PWdkMrfryXuMPEi94L+XXHIGt9BvdvXm9OOw/ujV62npPzygcMt7Z6MaOB0ZHBC
pvXJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org