Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d9852aa64f58b9e6ef8d48e0402ffb9efc167206.roa
File: d9852aa64f58b9e6ef8d48e0402ffb9efc167206.roa (raw, json)
Hash identifier: U7246DcM1TKSBM+lTvLKRcXUzt/so5zumfHwus01QXk=
Subject key identifier: 59:AD:F2:F2:5C:F0:E1:B5:68:A9:5F:4E:38:66:F4:4D:7E:6F:B9:95
Certificate issuer: /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial: 02D34C
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d9852aa64f58b9e6ef8d48e0402ffb9efc167206.roa
Signing time: Thu 01 Feb 2024 13:24:21 +0000
ROA not before: Thu 01 Feb 2024 02:00:00 +0000
ROA not after: Sun 01 Feb 2026 02:00:00 +0000
asID: 28003
IP address blocks: 2801:165::/44 maxlen: 47
Validation: Failed, certificate revoked on Tue 27 Feb 2024 12:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185164 (0x2d34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
Validity
Not Before: Feb 1 02:00:00 2024 GMT
Not After : Feb 1 02:00:00 2026 GMT
Subject: CN=d9852aa64f58b9e6ef8d48e0402ffb9efc167206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9c:52:08:b7:d8:1b:0f:5f:dd:7b:e1:78:19:
f7:d6:cf:67:a3:40:5d:3d:d0:a4:9d:ea:7e:7a:44:
65:d5:07:e1:bc:56:c1:03:a1:b6:7c:17:84:a8:16:
09:14:17:72:29:18:c2:b9:f4:11:ee:a3:a3:94:62:
97:45:d2:2a:d7:ed:5c:08:4c:3d:5a:1d:0c:6c:b8:
e8:ba:59:47:5c:96:16:cc:ba:09:84:05:ae:ed:a6:
70:52:d6:36:ad:b3:d8:6f:ab:00:d9:45:09:e5:1d:
5e:61:e5:56:5e:c5:d4:0e:40:66:95:b2:75:54:b2:
09:d1:9f:b5:9f:f6:f1:ce:e5:03:b4:c2:c3:eb:c0:
bf:1c:4b:38:e3:22:15:09:0d:ed:6d:33:09:84:0c:
dd:2c:9c:e8:c8:3a:5e:34:16:69:9f:72:3b:6b:9f:
72:02:46:8c:a5:84:3b:51:f3:f3:9d:bc:8e:b8:df:
ae:ca:7a:b3:97:f6:b0:63:50:4e:41:04:7b:be:fc:
f1:d1:f9:75:b6:8f:d9:42:ed:26:96:c2:df:8e:b9:
0b:92:ff:a3:6a:80:3a:8f:d8:82:ac:a8:ab:59:ea:
ee:1b:e9:43:f8:3b:84:07:03:e0:37:7f:95:cc:c2:
2e:ef:45:95:ef:54:24:86:3d:d7:65:19:88:1f:47:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:F2:F2:5C:F0:E1:B5:68:A9:5F:4E:38:66:F4:4D:7E:6F:B9:95
X509v3 Authority Key Identifier:
keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d9852aa64f58b9e6ef8d48e0402ffb9efc167206.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/44
Signature Algorithm: sha256WithRSAEncryption
52:23:ce:df:b3:b0:89:fe:4b:73:e8:3f:f4:5e:74:ad:80:e7:
53:8e:0e:05:cf:40:34:85:a0:2e:00:a9:15:42:40:c9:ea:ce:
72:6a:2c:eb:24:fb:4a:31:60:46:88:60:64:9b:9f:9d:4b:f1:
4d:49:b8:4c:eb:23:74:a0:ef:77:93:9d:21:18:ba:35:79:0b:
40:30:eb:00:f1:bd:75:e3:67:10:14:a2:18:22:11:90:8b:9a:
8a:6a:79:b6:a5:9c:93:bd:16:de:c9:fa:bb:6e:6d:b0:b0:ef:
b7:13:0b:db:0a:2e:49:b1:c5:07:67:d7:42:57:87:97:35:44:
bc:b9:a6:76:6b:7a:d2:ef:a0:e0:8a:c1:78:48:2c:4a:4f:61:
be:6c:99:fe:41:69:68:c2:f5:56:96:2e:6a:ab:1d:08:9c:4b:
8d:30:db:55:1b:31:51:05:67:ad:ea:c1:1a:ef:f7:e2:65:1d:
c3:f7:bb:c5:16:7f:e2:91:6f:57:d5:20:76:37:d9:84:7d:70:
bd:c9:3c:b9:80:05:1b:68:b0:ca:8e:61:36:e3:ab:01:4b:a4:
cf:ef:07:2d:12:b9:a6:5c:06:04:3f:2e:ef:5d:4f:ac:6c:f3:
03:70:25:e2:ff:6f:aa:0c:c1:e2:b7:72:85:90:53:e0:7b:b6:
79:16:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 18:30:14 2024 by rpki-client on console-fra.rpki-client.org