Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/6e3cc659a238d8a25e5a480f9de2f8108648317b.roa
File: 6e3cc659a238d8a25e5a480f9de2f8108648317b.roa (raw, json)
Hash identifier: uepHc3pbP/AuZlaDB6/HGXLIElUMRt1wEO9GVq3jPKo=
Subject key identifier: D1:F6:90:FA:17:F5:B2:8D:76:19:02:F2:13:26:23:B1:91:C8:6B:EE
Certificate issuer: /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial: 038075
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/6e3cc659a238d8a25e5a480f9de2f8108648317b.roa
Signing time: Tue 27 Feb 2024 12:50:12 +0000
ROA not before: Thu 01 Feb 2024 02:00:00 +0000
ROA not after: Sun 01 Feb 2026 02:00:00 +0000
asID: 28003
IP address blocks: 2801:165::/44 maxlen: 47
Validation: Failed, certificate revoked on Tue 05 Mar 2024 18:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229493 (0x38075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
Validity
Not Before: Feb 1 02:00:00 2024 GMT
Not After : Feb 1 02:00:00 2026 GMT
Subject: CN=6e3cc659a238d8a25e5a480f9de2f8108648317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:6b:ec:51:f2:fb:6d:14:55:4b:b4:4c:05:
4a:ff:62:1f:5b:66:66:24:96:71:5d:b9:28:aa:15:
61:11:92:7b:e8:a1:bc:3d:b7:d6:d6:5d:8e:a3:8e:
a4:6f:91:ab:cb:75:89:a4:54:15:bb:67:be:56:e7:
9f:fe:92:87:90:38:bb:d3:97:79:e8:54:14:6b:8b:
67:d6:ac:63:bf:de:87:6d:ad:19:78:18:6f:f3:8d:
a3:2e:b2:1e:a8:9d:6f:b4:b6:06:c3:be:49:3b:b2:
3c:05:fe:55:54:cd:76:88:08:c9:17:00:fa:55:65:
ac:52:1f:af:f7:ac:bb:30:93:b3:ec:14:44:07:05:
44:27:4f:59:76:f5:8c:a6:62:4c:0c:d9:ab:ee:32:
d6:ec:08:3d:b3:c6:ef:ef:99:51:88:54:af:d5:b2:
e5:09:c6:e3:0c:a9:42:b3:c9:3a:0a:f5:bb:8e:02:
c3:40:ed:f2:fc:0b:25:9e:79:4c:0a:3c:6c:6f:38:
13:f8:19:fd:95:4b:12:21:50:4f:5b:54:f8:4f:e5:
2c:c6:66:e4:5c:7d:b8:e8:bc:8f:51:83:40:18:5b:
7e:a2:b8:43:3f:2f:30:1c:de:08:46:58:5d:20:85:
46:12:24:af:80:2f:ea:ce:6b:a4:0f:b8:9f:79:a2:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:90:FA:17:F5:B2:8D:76:19:02:F2:13:26:23:B1:91:C8:6B:EE
X509v3 Authority Key Identifier:
keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/6e3cc659a238d8a25e5a480f9de2f8108648317b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/44
Signature Algorithm: sha256WithRSAEncryption
87:17:10:ee:2a:5c:4b:5e:7e:b2:b8:55:14:43:e7:37:6a:a3:
b6:0b:20:f4:62:6a:89:aa:72:db:ab:f5:43:22:0b:22:2f:f0:
62:b4:de:8d:45:f7:64:3d:26:99:de:0c:e7:4e:30:fa:b5:a6:
cd:e6:b3:18:83:b3:02:c0:aa:ac:3b:d6:e7:32:a2:74:a4:8a:
43:ff:61:a1:2a:45:43:9d:6a:c7:03:0b:b0:e9:52:56:40:59:
06:92:50:2f:cc:7a:7d:90:e1:5d:df:e3:23:d0:fb:b2:a9:7e:
77:61:20:8a:09:f3:76:b1:ed:88:81:ff:d5:f6:af:e7:cf:bb:
76:f0:6c:18:e2:3b:52:f8:9f:65:34:58:05:3f:fe:62:1e:cf:
f5:5e:6f:e9:b0:45:3a:e1:b8:30:07:9d:a6:d3:96:c9:5f:a4:
ec:88:bc:b2:91:3d:89:a4:82:d7:f6:7e:cd:e2:6b:7a:8f:d7:
f8:69:60:bb:f1:5a:38:72:cf:80:f6:38:66:9c:07:09:62:ea:
a5:56:8a:23:5a:16:54:29:3b:28:fa:2b:3d:61:94:32:f5:27:
96:3a:dc:9d:eb:d6:da:37:53:54:cc:8d:f9:58:7b:94:c3:62:
5c:1c:df:4b:10:05:26:80:e2:8e:34:0b:66:5e:24:8f:fb:17:
00:7c:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 22:41:15 2024 by rpki-client on console-fra.rpki-client.org