Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3134382e302f32342d3234203d3e2037303138.roa
File: 3139312e3130322e3134382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: 8u2El+IrcwlBQ3ynNlg7aw5+XYAMnAGwmjiQ1+e1xks=
Subject key identifier: 02:04:43:4F:12:57:B7:2C:DC:21:86:1C:75:4E:E2:3B:49:BC:82:B7
Certificate issuer: /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial: 17FC619A182DC03CB4E0E3F816833E38DAA2DBAD
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3134382e302f32342d3234203d3e2037303138.roa
Signing time: Mon 09 Sep 2024 14:40:00 +0000
ROA not before: Mon 09 Sep 2024 14:35:00 +0000
ROA not after: Mon 08 Sep 2025 14:40:00 +0000
asID: 7018
IP address blocks: 191.102.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 18:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fc:61:9a:18:2d:c0:3c:b4:e0:e3:f8:16:83:3e:38:da:a2:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Validity
Not Before: Sep 9 14:35:00 2024 GMT
Not After : Sep 8 14:40:00 2025 GMT
Subject: CN=0204434F1257B72CDC21861C754EE23B49BC82B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:73:e5:32:6a:18:6c:df:ad:d8:aa:04:18:
5f:19:e3:2d:9b:38:dd:71:8d:a7:2e:44:48:74:5f:
10:3e:e2:c9:f7:64:cd:de:12:08:36:a7:ed:76:db:
7d:1f:00:7f:c0:0b:1b:78:cb:53:21:67:e1:25:86:
4c:59:1a:bb:7d:40:57:1e:4e:c6:da:88:04:1f:2e:
48:90:83:fe:f4:fe:e2:f3:1d:df:bf:94:c3:09:a0:
ab:8c:82:74:e4:32:2d:03:4e:7b:67:75:7f:6d:ba:
70:13:6b:d9:9c:8e:cb:e0:e2:ff:47:81:17:8e:eb:
81:c1:30:2a:f2:9f:2a:70:be:78:f5:3e:05:7d:ff:
6e:c9:40:73:79:6f:a6:66:4e:2d:d5:eb:df:5c:ba:
1e:d0:29:1c:14:b6:4d:e6:b8:ef:96:5c:04:ae:00:
83:c3:1c:f9:f8:28:5d:78:ec:bf:2c:48:3d:21:1f:
a9:26:55:de:c7:9b:95:27:14:4f:cf:e2:95:07:35:
b9:93:80:d4:f5:b2:77:56:18:90:cb:71:e7:1f:5c:
22:e9:ee:32:d1:cd:4e:8b:01:30:d8:99:d2:69:75:
87:2d:6c:d8:23:f7:46:38:91:73:1c:0d:ac:a1:e5:
a9:f3:e3:84:eb:d4:23:d2:e3:f5:fb:23:0d:5a:1a:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:43:4F:12:57:B7:2C:DC:21:86:1C:75:4E:E2:3B:49:BC:82:B7
X509v3 Authority Key Identifier:
keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3134382e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.102.148.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ca:53:b1:e1:e2:ac:6e:1c:b8:83:2b:f9:93:55:e1:06:24:
c4:79:a1:84:61:13:b2:b2:a3:55:5d:62:07:ec:17:e7:fa:02:
2e:f2:6d:8f:1b:36:8a:76:c9:8a:5b:84:e0:b7:ac:3a:40:d6:
48:83:1a:6b:ea:c8:17:2f:5b:d9:57:f1:2e:89:5f:2e:e1:5c:
43:7d:56:10:1b:0c:27:ab:21:58:0c:4a:57:92:2c:91:59:1d:
22:44:a3:74:d2:d4:79:b7:f9:60:55:44:c8:1d:d0:c0:22:ec:
41:6e:fe:17:d6:99:d2:e5:00:69:f5:e3:11:f7:47:42:f2:c4:
67:c0:6a:58:78:ce:3a:3f:55:7a:8a:ed:e8:d1:74:d5:6f:ea:
c8:f0:9b:ab:0a:58:4d:27:3e:d9:2e:5b:e2:15:b8:15:d7:31:
4c:a8:b4:24:d6:be:f5:0a:a2:60:34:83:e7:19:eb:fd:94:01:
29:41:7d:42:1f:4d:5f:a0:8d:14:c5:72:75:18:c5:0d:1b:fb:
46:e8:fc:fa:53:af:4f:5d:91:02:3f:58:92:f7:90:06:bd:8e:
21:0b:67:28:42:42:60:41:49:7d:ae:34:69:e1:ba:30:cc:f8:
70:dc:d1:ad:0a:39:58:0a:14:a3:1b:03:b4:09:d1:8a:cd:d5:
aa:b7:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 20:24:31 2024 by rpki-client on console-fra.rpki-client.org