Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/4e71e113ae8269464b063cbfffd2317e4e89f415.roa
File: 4e71e113ae8269464b063cbfffd2317e4e89f415.roa (raw, json)
Hash identifier: IZMAirt0dMtKJd3S61YfBTYTudXx6rj8JKzKZAs7TJg=
Subject key identifier: BD:0E:85:34:AD:48:F2:7E:3D:0C:04:31:44:4E:B6:1A:7C:9D:30:6C
Certificate issuer: /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial: 011C3D
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/4e71e113ae8269464b063cbfffd2317e4e89f415.roa
Signing time: Tue 21 Nov 2023 16:19:39 +0000
ROA not before: Tue 21 Nov 2023 16:19:39 +0000
ROA not after: Fri 21 Nov 2025 16:19:39 +0000
asID: 28000
IP address blocks: 2801:165::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 18 Jan 2024 16:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72765 (0x11c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
Validity
Not Before: Nov 21 16:19:39 2023 GMT
Not After : Nov 21 16:19:39 2025 GMT
Subject: CN=4e71e113ae8269464b063cbfffd2317e4e89f415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:b9:53:d6:44:4e:c9:d7:96:64:ff:2d:8b:
a6:84:b2:0d:02:71:2d:43:3b:45:a6:c7:59:a8:50:
fd:37:d9:d1:9a:39:66:42:d9:f7:90:5a:76:f4:2a:
a1:99:63:3a:3f:ce:2f:76:a2:70:23:c6:69:65:b9:
c8:2b:59:cd:68:61:df:10:f9:5b:5e:59:34:fe:62:
3a:cb:9a:c5:04:f5:fb:0e:34:7f:f4:ae:cb:c3:dd:
37:0a:d5:d8:c3:f2:c9:28:e8:a6:75:7d:02:c5:12:
41:61:e0:a0:67:ba:90:97:cf:ed:ad:9d:b5:95:53:
00:6a:98:3e:f0:ed:c3:86:80:16:24:cf:79:de:f3:
03:5b:de:91:13:f5:00:20:64:e1:22:ea:be:a2:a7:
02:83:ea:93:d0:ef:c7:d7:e9:09:28:10:c6:a2:f4:
a8:b7:58:d5:9d:c1:be:9e:8f:57:6c:82:03:34:b2:
04:4e:42:2f:48:69:9d:db:59:55:0c:27:1b:56:8c:
5e:9f:21:3f:75:ab:2b:7d:5b:2d:d6:d3:2e:0a:96:
86:99:39:2c:36:6b:fc:b0:04:ad:4d:2f:58:62:0e:
b3:5f:d8:bb:7b:3a:0e:e1:b3:a1:e6:c1:29:31:d9:
38:60:e2:3b:87:b8:99:13:c5:2e:f2:00:1a:0e:d2:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:85:34:AD:48:F2:7E:3D:0C:04:31:44:4E:B6:1A:7C:9D:30:6C
X509v3 Authority Key Identifier:
keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/4e71e113ae8269464b063cbfffd2317e4e89f415.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/44
Signature Algorithm: sha256WithRSAEncryption
2c:6b:79:8b:52:ca:54:f2:1c:be:03:78:31:46:8a:34:ac:e4:
a8:39:50:df:2c:1c:2d:41:b0:3d:7b:21:83:e7:cf:75:4f:0c:
6a:e8:cc:cb:36:4b:fd:a8:8e:6c:bc:97:55:28:3f:b0:1f:df:
f3:4f:68:48:36:d5:17:7d:10:fe:81:a9:69:e3:2b:30:64:06:
5d:8a:e6:0b:ac:eb:2a:8e:d3:5d:d2:7f:fd:58:92:7b:7d:bd:
ca:80:c5:4f:95:89:72:03:72:ca:06:66:6b:e9:b9:62:ba:30:
41:47:32:cf:ae:20:1f:e2:0c:6d:2f:d3:71:42:7b:bd:c2:b0:
c3:10:9a:7e:68:c4:ae:3c:41:01:a8:ad:da:f6:e4:bc:7f:10:
64:84:08:00:7b:5d:25:6a:92:58:cd:c9:d1:58:d5:c7:c1:f7:
f2:1c:4f:03:e6:4c:5e:3d:fd:df:cb:f6:72:aa:b6:18:c3:46:
96:61:33:61:d1:05:b7:8f:f9:a3:e0:60:47:68:89:e0:9b:f0:
7d:41:52:63:77:81:d8:33:85:14:11:88:aa:2e:df:54:79:34:
d0:60:bc:f3:b6:f2:ff:4e:40:da:5b:30:b1:0e:5f:b2:ff:eb:
21:75:4e:d7:e8:64:54:dd:d7:e3:4d:30:80:a3:a2:e3:02:43:
9e:14:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org