Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/fpTS049fn_buxtPOSbw-RPylkWM.roa
File: fpTS049fn_buxtPOSbw-RPylkWM.roa (raw, json)
Hash identifier: UvqPALbA8vvhsIFZ/Zsb2Ten1G2KBGDDW41D7Udvnug=
Subject key identifier: 7E:94:D2:D3:8F:5F:9F:F6:EE:C6:D3:CE:49:BC:3E:44:FC:A5:91:63
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018571154961900AC1FB76DA1C717B875A56
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/fpTS049fn_buxtPOSbw-RPylkWM.roa
Signing time: Mon 02 Jan 2023 06:04:58 +0000
ROA not before: Mon 02 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8938
IP address blocks: 2001:4190:8024::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:49:61:90:0a:c1:fb:76:da:1c:71:7b:87:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e94d2d38f5f9ff6eec6d3ce49bc3e44fca59163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:26:c2:f5:3f:67:18:fd:74:47:23:12:d5:
b0:e7:d7:cc:8d:d1:05:a9:ba:ab:e7:7b:78:96:81:
52:cd:ef:27:86:bb:eb:6a:20:16:c3:b3:3a:3d:e3:
27:f3:2a:6a:59:f0:16:88:09:cc:0d:93:44:ce:f9:
6b:90:68:eb:9e:18:d6:98:97:56:87:18:22:b4:56:
9a:75:57:b7:6d:8c:dd:c2:2d:44:dd:92:55:a1:b3:
c0:f3:82:66:43:2f:f6:73:df:b2:e8:54:3c:93:0c:
e4:b3:f2:33:c9:c9:a5:8d:65:f4:7e:08:48:88:4d:
71:97:63:d5:89:af:32:9f:29:69:74:5b:3f:80:7b:
1f:b8:9c:7a:8b:3c:eb:16:86:c6:8a:1f:31:4b:4d:
59:81:c3:42:b1:50:bf:34:1e:69:7a:c7:2e:d4:0e:
01:07:87:2b:cb:95:e8:98:11:22:69:7b:df:4e:62:
6b:85:f5:df:0d:7e:97:a3:8a:10:c2:f5:c9:66:8e:
48:e5:d4:41:24:73:62:77:6e:d2:e8:41:7e:4e:87:
b5:8d:0b:ac:27:9b:97:2c:4f:8c:be:e7:fd:74:aa:
3d:25:f0:8f:8c:6f:39:57:2d:f4:d6:8d:94:e5:e0:
8e:ad:65:13:ae:92:f0:0e:69:07:62:cc:3f:e9:81:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:D2:D3:8F:5F:9F:F6:EE:C6:D3:CE:49:BC:3E:44:FC:A5:91:63
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/fpTS049fn_buxtPOSbw-RPylkWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4190:8024::/48
Signature Algorithm: sha256WithRSAEncryption
71:66:d2:24:84:2d:c2:2f:ae:3b:60:be:88:a4:99:38:0a:ed:
ee:3f:1c:44:37:40:9f:be:90:33:de:1f:db:d7:75:c0:c3:51:
be:8c:fc:d0:db:83:0f:86:5e:6d:cb:fb:24:3d:e0:f1:11:7f:
40:24:9a:b4:74:95:1d:e7:73:f4:97:80:d4:fd:ab:fa:f0:29:
6d:3b:1f:73:90:1d:3a:b2:c8:5a:bd:91:78:6b:72:76:15:44:
59:a4:c1:c6:5c:9a:4a:1d:d3:dc:47:de:92:d0:45:cc:9b:09:
16:af:01:14:88:a2:3f:ca:40:85:f1:56:7c:84:69:d6:e8:07:
ec:7d:dd:b2:6c:19:cb:86:aa:fd:ab:ac:e9:63:72:5b:56:d6:
f3:58:23:3f:bc:1e:4a:1c:18:de:55:0f:76:61:1a:24:f0:17:
83:bb:f0:ed:a0:f4:2c:28:10:bc:55:0d:5a:fa:57:a1:6d:5c:
be:18:4b:b1:e0:2b:7a:64:f8:c0:b1:12:b1:6c:3d:5d:e9:2a:
01:a6:ab:13:5d:e5:03:d9:dc:4d:41:60:22:5d:49:49:a5:bb:
83:ed:7d:61:34:da:0b:1e:4e:6d:ed:30:ea:9e:71:13:7e:ae:
64:4e:cb:51:ff:18:0a:40:a0:6d:d6:7a:52:b5:92:05:77:9b:
d5:7b:45:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxFUlhkArB+3baHHF7h1pWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjMwMTAyMDYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTk0ZDJkMzhmNWY5ZmY2ZWVjNmQzY2U0OWJjM2U0NGZjYTU5MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjkmwvU/Zxj9dEcjEtWw59fMjdEF
qbqr53t4loFSze8nhrvraiAWw7M6PeMn8ypqWfAWiAnMDZNEzvlrkGjrnhjWmJdW
hxgitFaadVe3bYzdwi1E3ZJVobPA84JmQy/2c9+y6FQ8kwzks/IzycmljWX0fghI
iE1xl2PVia8ynylpdFs/gHsfuJx6izzrFobGih8xS01ZgcNCsVC/NB5pescu1A4B
B4cry5XomBEiaXvfTmJrhfXfDX6Xo4oQwvXJZo5I5dRBJHNid27S6EF+Toe1jQus
J5uXLE+Mvuf9dKo9JfCPjG85Vy301o2U5eCOrWUTrpLwDmkHYsw/6YFNZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH6U0tOPX5/27sbTzkm8PkT8pZFjMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvZnBUUzA0OWZuX2J1eHRQT1Nidy1SUHlsa1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFBkIAk
MA0GCSqGSIb3DQEBCwUAA4IBAQBxZtIkhC3CL647YL6IpJk4Cu3uPxxEN0CfvpAz
3h/b13XAw1G+jPzQ24MPhl5ty/skPeDxEX9AJJq0dJUd53P0l4DU/av68CltOx9z
kB06sshavZF4a3J2FURZpMHGXJpKHdPcR96S0EXMmwkWrwEUiKI/ykCF8VZ8hGnW
6Afsfd2ybBnLhqr9q6zpY3JbVtbzWCM/vB5KHBjeVQ92YRok8BeDu/DtoPQsKBC8
VQ1a+lehbVy+GEux4Ct6ZPjAsRKxbD1d6SoBpqsTXeUD2dxNQWAiXUlJpbuD7X1h
NNoLHk5t7TDqnnETfq5kTstR/xgKQKBt1npStZIFd5vVe0Xu
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:29 2024 by rpki-client on console-fra.rpki-client.org