Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa
File: d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa (raw, json)
Hash identifier: BFbmfoip65+L5mATGjqs4CAPz8IgiwlT85Jqra9xWv0=
Subject key identifier: EB:5B:E9:7E:39:A8:EB:9C:E1:E9:15:BA:46:DD:3E:41:6E:62:F3:22
Certificate issuer: /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial: 11ED47
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa
Signing time: Mon 24 Apr 2023 13:55:34 +0000
ROA not before: Sun 23 Apr 2023 13:55:33 +0000
ROA not after: Thu 24 Apr 2025 13:55:33 +0000
asID: 265868
IP address blocks: 131.196.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 23:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174855 (0x11ed47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Validity
Not Before: Apr 23 13:55:33 2023 GMT
Not After : Apr 24 13:55:33 2025 GMT
Subject: CN=d33cc0a26db2a69650d8acb8239e8ad46d897b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:04:31:af:7a:4d:0a:00:5b:4f:47:10:c7:
10:4b:b3:24:5f:7f:f7:cf:19:2a:f5:17:76:1f:58:
46:3e:4c:bd:a7:13:a2:11:d3:2f:cf:d9:57:fe:2d:
a2:82:e8:88:8c:9a:e7:bb:71:06:4a:61:ec:31:97:
c1:c1:93:c2:b3:18:65:28:9d:93:82:bb:bf:b3:70:
cd:49:3c:84:23:cb:fa:14:a7:69:83:9d:a2:14:0b:
a7:db:b6:42:97:f7:3a:51:17:5d:00:98:33:cc:f2:
2f:0b:d2:42:7a:58:ae:e5:fd:ca:4e:14:9e:70:9c:
ad:19:0d:7f:d5:1e:86:7e:ed:06:56:70:d6:33:40:
c5:30:68:2d:bd:ab:c2:ff:0c:80:76:c2:ac:fd:64:
e2:b3:5f:ad:06:89:ae:7a:e2:1e:2e:f9:86:fe:f6:
fd:1a:6c:67:3e:ad:ad:21:a1:e1:1d:cf:46:2d:54:
b0:da:27:fd:5d:90:61:09:3d:87:6d:d5:d0:ae:ae:
d4:29:01:cb:86:50:a9:6e:c7:96:ca:ec:fb:95:c2:
ed:08:30:b5:6f:b9:ab:d0:87:55:e9:1e:bf:06:c8:
33:2c:59:dc:db:dd:45:93:b2:85:16:a4:43:8c:8b:
9b:ef:db:4e:2b:6b:18:14:92:58:f7:8e:b1:81:61:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:E9:7E:39:A8:EB:9C:E1:E9:15:BA:46:DD:3E:41:6E:62:F3:22
X509v3 Authority Key Identifier:
keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d33cc0a26db2a69650d8acb8239e8ad46d897b0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:71:b7:20:d5:78:5f:62:17:51:b3:e9:dd:2d:0a:a8:50:90:
f7:a5:56:e6:0c:41:9c:1c:e3:e1:67:58:a7:4f:14:45:93:8f:
77:a7:17:bc:81:18:73:2b:df:bf:20:d8:ba:b9:bd:4d:59:e5:
b2:a8:ea:47:0d:19:02:0e:59:37:46:5d:8b:a1:1d:3f:44:b0:
5a:47:05:e4:e9:71:41:61:9b:a0:80:bd:0d:39:18:21:ce:cf:
57:dd:52:fd:ca:50:4a:84:54:dc:bc:db:32:4c:f1:50:c2:63:
af:74:6d:42:1c:40:a3:58:23:b3:c8:b6:bf:17:bf:80:ef:e2:
f9:84:3b:86:5e:5d:6f:2c:b1:c3:85:05:d4:0f:e3:8d:5a:32:
f6:8e:67:df:33:17:59:85:9b:71:a1:a8:8c:e3:c6:a2:7d:f0:
6b:66:ec:75:b1:07:e3:20:b5:e4:de:27:6f:a7:96:d6:1e:34:
50:cb:74:11:bc:e8:a8:24:61:0a:db:30:42:4d:26:d7:dd:39:
2c:d1:ad:7d:2b:33:74:cb:bf:34:3d:2f:f7:8d:55:7f:f3:50:
63:29:3d:72:8c:dd:3e:62:ce:b4:15:ea:33:74:73:52:e4:c6:
87:51:4f:fa:2c:19:6a:15:ba:52:06:d2:5b:91:ef:9f:bd:42:
00:46:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 01:37:49 2024 by rpki-client on console-fra.rpki-client.org