Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3139322e302f32312d3234203d3e203238353431.roa
File: 3230312e3135392e3139322e302f32312d3234203d3e203238353431.roa (raw, json)
Hash identifier: f5YW9E8MTXz4PrI70kY6g0yRaeQc7UaA2MzsgrTwYI4=
Subject key identifier: A5:4E:71:FF:2D:6F:31:D4:6D:86:D8:C6:AE:38:C4:6C:16:1C:92:65
Certificate issuer: /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial: 2297D9FAE72C7B6AEDCE47CCE68DE9284AE11ADF
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3139322e302f32312d3234203d3e203238353431.roa
Signing time: Thu 25 Apr 2024 05:40:00 +0000
ROA not before: Thu 25 Apr 2024 05:35:00 +0000
ROA not after: Thu 24 Apr 2025 05:40:00 +0000
asID: 28541
IP address blocks: 201.159.192.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:97:d9:fa:e7:2c:7b:6a:ed:ce:47:cc:e6:8d:e9:28:4a:e1:1a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Validity
Not Before: Apr 25 05:35:00 2024 GMT
Not After : Apr 24 05:40:00 2025 GMT
Subject: CN=A54E71FF2D6F31D46D86D8C6AE38C46C161C9265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:0a:e0:9b:84:59:70:7d:8e:e2:b1:22:2c:
f2:17:53:90:39:f6:e4:a3:c6:79:2c:aa:c2:73:56:
65:4a:84:24:6a:1b:af:90:41:39:6d:b5:bf:c4:7f:
bd:ef:e2:1e:2a:a5:82:c7:db:c4:37:2f:c4:15:5e:
89:f4:5f:0b:c5:68:fb:b7:f6:35:59:d9:0b:1b:01:
de:6d:06:1f:2d:6a:ec:59:58:c2:ab:25:4d:30:cb:
8c:1a:0b:f8:89:53:be:c3:bb:ec:24:75:6f:87:34:
58:45:fd:1a:51:99:c0:63:23:ef:82:c7:44:b1:f7:
29:f9:51:16:8c:92:99:77:98:97:8c:ce:de:ff:5d:
01:fc:21:28:b6:58:a3:1f:e3:56:7b:2f:68:0a:98:
c7:8f:8e:be:d6:61:f6:e7:b3:2c:99:1e:36:00:a5:
ac:2a:aa:df:e3:19:5e:0e:03:35:17:c6:37:01:77:
b1:b7:a1:1d:a2:eb:3a:8f:d8:9e:b1:13:d9:13:5f:
3a:64:87:30:7b:4c:5a:0a:5b:35:db:8b:20:0f:69:
84:8f:79:10:94:53:d3:fd:d9:e4:a3:2a:26:42:15:
36:65:88:78:ea:a5:40:5f:c4:46:96:a6:3d:43:37:
76:e3:28:26:f4:e9:a3:c2:8d:a0:6b:7f:37:33:14:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4E:71:FF:2D:6F:31:D4:6D:86:D8:C6:AE:38:C4:6C:16:1C:92:65
X509v3 Authority Key Identifier:
keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3139322e302f32312d3234203d3e203238353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.192.0/21
Signature Algorithm: sha256WithRSAEncryption
89:f0:f8:0c:9a:8b:3a:e1:70:de:85:66:49:fc:3a:3e:39:ec:
60:3c:23:a7:0b:8e:18:d3:f1:9e:c4:d0:d9:5f:27:63:82:65:
a5:bc:52:85:ac:46:0b:b3:5c:ed:eb:8c:69:bc:c2:9c:be:8a:
35:3c:6e:3f:09:a8:1b:f7:ef:ba:5e:26:5f:a0:a4:91:7e:3c:
67:a7:ab:f7:28:0e:4f:b1:57:cd:66:bf:ae:82:6b:eb:b0:4b:
59:f5:3d:ee:b7:46:87:bd:52:7e:ef:d6:56:de:c7:a7:37:32:
14:e1:22:1f:01:30:40:09:73:2a:26:c4:43:ea:54:f7:85:d5:
f2:19:59:a0:90:d2:fc:33:43:cc:df:a2:79:33:d9:1b:d5:66:
25:ef:bd:e5:7f:75:ff:69:fd:9c:31:fd:b5:b9:14:df:2d:84:
2a:cd:6f:08:5c:c3:2c:41:44:2e:2b:86:ad:c8:89:78:fa:e5:
40:3f:a9:2e:bf:8b:b2:f4:2c:45:eb:0a:d7:96:0a:4f:b9:fa:
0c:53:50:a4:1d:1a:e3:ed:bc:5e:ed:9b:42:af:2d:d7:7a:55:
19:e0:e7:52:4e:92:74:69:ce:d9:c5:fb:6a:1d:dc:b9:ab:4e:
66:31:88:bb:09:eb:62:22:c1:5f:c0:b3:02:d5:0c:37:5f:2c:
f5:c9:d3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org