Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/fn9i67FcRGdGM6XXGoOyi-xT8uI.roa
File: fn9i67FcRGdGM6XXGoOyi-xT8uI.roa (raw, json)
Hash identifier: 9xM92Q0T6OzgvvCacKCVCO3MLMqGtQxL9gi/xvdR2ec=
Subject key identifier: 7E:7F:62:EB:B1:5C:44:67:46:33:A5:D7:1A:83:B2:8B:EC:53:F2:E2
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 018F343B3BF7EE203AD987B7E826519BF872
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/fn9i67FcRGdGM6XXGoOyi-xT8uI.roa
Signing time: Wed 01 May 2024 12:57:28 +0000
ROA not before: Wed 01 May 2024 12:57:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4913
IP address blocks: 79.140.194.0/24 maxlen: 24
79.140.196.0/22 maxlen: 22
79.140.200.0/21 maxlen: 21
79.140.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:3b:3b:f7:ee:20:3a:d9:87:b7:e8:26:51:9b:f8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: May 1 12:57:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e7f62ebb15c44674633a5d71a83b28bec53f2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:23:32:bf:97:58:ad:09:56:73:22:8d:bd:
43:ed:e9:d9:46:19:d5:63:f0:73:58:fa:ae:bc:c2:
9a:ea:3b:ff:39:70:a2:10:81:59:53:3d:22:bb:d4:
b1:5b:8f:96:bc:08:d8:2e:88:4d:65:cf:0d:1c:84:
3c:96:7c:69:75:91:a2:a2:7f:33:40:48:85:e5:f2:
08:69:7b:de:6f:9d:06:89:3a:f0:52:0f:fe:f4:dc:
67:d9:9a:8f:92:84:c4:1f:ca:50:ec:b9:83:8f:a2:
b7:a3:dd:ae:13:32:be:bf:6b:e9:17:b5:74:d6:30:
d5:0c:0a:8f:67:a8:0b:d7:ca:29:68:25:71:a8:9c:
dc:b4:03:c7:56:db:91:ae:78:6f:30:ad:77:1f:58:
4a:0a:a6:19:af:95:c0:c0:dd:4b:c8:f8:42:e3:77:
11:e0:62:2c:5a:9f:39:c9:74:28:38:0c:e7:2a:0e:
91:cf:c9:66:c5:a2:b3:24:66:9b:8e:e9:97:dc:4b:
24:7a:de:a4:45:fb:7a:a6:08:79:2f:a9:d5:4d:a5:
b3:81:ec:2c:db:9b:bd:52:e4:70:d9:0b:98:29:ab:
f9:1e:e8:95:a7:87:cd:fd:e4:0f:b0:18:e9:ce:9f:
e3:9c:b2:4c:0d:43:1e:29:1a:67:b9:76:77:21:f3:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:62:EB:B1:5C:44:67:46:33:A5:D7:1A:83:B2:8B:EC:53:F2:E2
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/fn9i67FcRGdGM6XXGoOyi-xT8uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.194.0/24
79.140.196.0-79.140.207.255
Signature Algorithm: sha256WithRSAEncryption
63:c7:42:71:6c:64:98:b9:d8:22:93:dc:09:57:de:7c:9f:05:
e4:85:90:1c:3f:8b:36:1b:05:4c:ec:6d:80:85:76:04:80:ac:
01:02:13:79:4c:00:75:3e:a2:29:15:bb:49:9c:10:98:5d:b3:
f2:30:47:6b:cd:e9:81:be:73:10:95:58:91:fd:c5:8b:68:57:
0e:a1:02:67:41:54:07:da:77:30:94:ab:fa:10:af:a7:d7:d0:
97:b6:42:5b:8b:1c:57:b0:8f:5e:d1:31:7a:e2:cc:81:b2:df:
9c:e3:d2:79:48:11:24:b6:c4:d6:e5:2b:35:d8:a2:53:fc:bc:
9b:38:30:22:80:76:4c:6c:2b:95:c0:a0:5b:9a:17:4c:44:26:
96:ff:30:95:86:6c:1a:98:3e:5c:2e:86:47:b7:8d:77:69:26:
8f:9c:39:68:d7:be:93:5b:b7:ad:13:91:66:1a:2f:2e:a8:cd:
14:7b:77:af:94:72:a4:1e:b1:f4:99:3a:2b:ad:eb:0c:94:c6:
bb:1c:57:eb:d4:df:68:cc:f3:27:b5:0e:7a:77:7f:d6:4f:4f:
ae:7a:8d:21:1b:0d:e0:fe:5f:11:e1:f3:d0:d2:e7:03:bf:20:
01:0a:ea:2d:af:0b:0f:45:d6:4d:35:d7:60:a7:6a:e0:b2:62:
cb:da:4c:71
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY80Ozv37iA62Ye36CZRm/hyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2JmZTA4MzRmOGU2NjUxMmY1NWJkNzhjYzA3NWI3ZWQ1
NmY0MDkwHhcNMjQwNTAxMTI1NzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTdmNjJlYmIxNWM0NDY3NDYzM2E1ZDcxYTgzYjI4YmVjNTNmMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzYjMr+XWK0JVnMijb1D7enZRhnV
Y/BzWPquvMKa6jv/OXCiEIFZUz0iu9SxW4+WvAjYLohNZc8NHIQ8lnxpdZGion8z
QEiF5fIIaXveb50GiTrwUg/+9Nxn2ZqPkoTEH8pQ7LmDj6K3o92uEzK+v2vpF7V0
1jDVDAqPZ6gL18opaCVxqJzctAPHVtuRrnhvMK13H1hKCqYZr5XAwN1LyPhC43cR
4GIsWp85yXQoOAznKg6Rz8lmxaKzJGabjumX3Esket6kRft6pgh5L6nVTaWzgews
25u9UuRw2QuYKav5HuiVp4fN/eQPsBjpzp/jnLJMDUMeKRpnuXZ3IfPqPwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFH5/YuuxXERnRjOl1xqDsovsU/LiMB8GA1UdIwQY
MBaAFFjL/gg0+OZlEvVb14zAdbftVvQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDIt
NDA5NDEwNjc4NmE5LzEvZm45aTY3RmNSR2RHTTZYWEdvT3lpLXhUOHVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDItNDA5NDEwNjc4NmE5
LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAT4zCMAwD
BAJPjMQDBARPjMAwDQYJKoZIhvcNAQELBQADggEBAGPHQnFsZJi52CKT3AlX3nyf
BeSFkBw/izYbBUzsbYCFdgSArAECE3lMAHU+oikVu0mcEJhds/IwR2vN6YG+cxCV
WJH9xYtoVw6hAmdBVAfadzCUq/oQr6fX0Je2QluLHFewj17RMXrizIGy35zj0nlI
ESS2xNblKzXYolP8vJs4MCKAdkxsK5XAoFuaF0xEJpb/MJWGbBqYPlwuhke3jXdp
Jo+cOWjXvpNbt60TkWYaLy6ozRR7d6+UcqQesfSZOiut6wyUxrscV+vU32jM8ye1
Dnp3f9ZPT656jSEbDeD+XxHh89DS5wO/IAEK6i2vCw9F1k0112CnauCyYsvaTHE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:37:56 2025 by rpki-client