Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2128abcb8947d6dfe23b14accc132b0b065dc7b6.roa
File: 2128abcb8947d6dfe23b14accc132b0b065dc7b6.roa (raw, json)
Hash identifier: 2YAXzUV8QM6nubFOgzhs431GkDr8Oub8rCaTl1/C/k0=
Subject key identifier: 47:49:CE:CA:FD:CE:58:4A:9E:4E:03:7B:D6:7C:1D:D3:F7:41:21:29
Certificate issuer: /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial: 1AB31D
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2128abcb8947d6dfe23b14accc132b0b065dc7b6.roa
Signing time: Tue 03 Oct 2023 20:34:47 +0000
ROA not before: Mon 02 Oct 2023 20:34:47 +0000
ROA not after: Fri 03 Oct 2025 21:34:47 +0000
asID: 28000
IP address blocks: 201.219.252.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749789 (0x1ab31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
Validity
Not Before: Oct 2 20:34:47 2023 GMT
Not After : Oct 3 21:34:47 2025 GMT
Subject: CN=2128abcb8947d6dfe23b14accc132b0b065dc7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:43:45:42:ea:5b:28:f3:3f:56:a8:e6:26:
56:af:23:47:a9:86:c4:77:2a:9e:88:c6:1e:4e:64:
9e:25:12:96:98:7c:b5:a3:82:49:82:fa:99:97:58:
71:dd:17:bb:10:9c:53:77:2c:90:8f:15:95:ab:4d:
30:3d:ea:77:b1:9e:02:a8:1b:1d:12:f8:ef:65:2b:
e2:dd:b5:3a:8d:fd:1b:09:a4:a4:84:0d:47:50:e0:
7d:2e:3d:8f:88:96:ba:15:bd:82:be:3b:5f:17:34:
83:99:46:27:0e:39:b8:c5:f6:c2:a1:ba:b8:fe:7d:
3d:14:c2:cc:5c:df:95:47:79:7d:48:09:3f:63:7d:
bc:8e:c5:6d:79:77:77:5e:e1:e3:02:f4:ea:46:da:
12:b2:31:9a:5f:02:3f:e4:59:47:e9:f9:0f:cc:7c:
e0:ea:35:a2:cc:be:db:55:ff:c1:73:da:49:97:d8:
53:e7:eb:ba:f5:ea:92:8c:1b:6b:a2:f7:6d:0c:45:
3b:fc:15:27:fa:1f:d2:ae:5a:05:9b:dc:a8:00:2d:
09:9f:74:6c:d8:c2:60:9a:2d:81:ac:f7:95:88:63:
26:19:91:43:1b:ac:f2:91:c5:f6:c8:25:57:81:e5:
ed:9c:95:85:09:e3:4e:c0:d4:77:94:1f:5f:60:34:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:CE:CA:FD:CE:58:4A:9E:4E:03:7B:D6:7C:1D:D3:F7:41:21:29
X509v3 Authority Key Identifier:
keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2128abcb8947d6dfe23b14accc132b0b065dc7b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:89:00:3c:e8:4f:6c:2b:9c:e6:a2:5e:d8:e4:24:30:fa:86:
54:2b:5d:5a:62:56:f4:93:f1:ca:5a:f2:05:8e:08:42:7b:51:
3b:c9:27:ce:a4:ed:58:90:3d:20:1a:39:e8:a1:ee:fb:1b:1d:
8e:fc:b2:cd:bf:c8:84:45:a6:9e:7f:46:8e:a8:0e:51:01:57:
29:d6:33:bd:23:82:10:23:c7:e7:45:b6:df:1f:8f:72:a4:e0:
8c:e9:9f:13:30:11:f4:8d:6c:38:c6:98:ae:fd:82:bb:06:23:
51:3f:16:c2:0d:d7:a1:e9:87:26:f8:02:75:34:05:3b:30:39:
c6:d2:e1:07:28:53:73:f6:81:e8:cf:2d:dc:a6:05:2e:ff:06:
46:0d:57:ac:c4:42:d2:68:ec:a5:fc:52:4c:2f:0b:1d:30:da:
cb:e8:59:1a:2b:41:93:3b:d7:53:d3:22:20:bc:a1:02:94:74:
c8:cf:d8:7c:c9:f7:b4:32:07:6b:3d:4f:30:3f:7b:4b:87:d7:
31:a9:5d:11:44:4c:af:4f:24:03:51:d7:e2:24:24:16:bc:45:
30:a6:1e:40:33:b5:c7:34:5c:2e:7e:19:93:50:dd:86:f6:11:
52:24:f4:76:00:7f:30:58:5d:43:02:ef:76:56:8f:92:e9:05:
33:32:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 21:44:37 2023 by rpki-client on console-fra.rpki-client.org