Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/67d94c2503fa52613099876190831d3619a7c6c2.roa
File: 67d94c2503fa52613099876190831d3619a7c6c2.roa (raw, json)
Hash identifier: nmC59hWDL3rHLtNg+nMiDtCh43IoxnRya5Cx5+IEXFM=
Subject key identifier: B7:1A:5A:22:E6:54:15:11:D8:84:73:D2:70:08:B2:10:EE:7B:95:C6
Certificate issuer: /CN=c8c59d2967ce698ceab49f8ca58b384c5945c526
Certificate serial: 023749
Authority key identifier: 14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8c59d2967ce698ceab49f8ca58b384c5945c526.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/67d94c2503fa52613099876190831d3619a7c6c2.roa
Signing time: Wed 04 May 2022 18:04:54 +0000
ROA not before: Thu 10 Feb 2022 03:00:00 +0000
ROA not after: Sat 10 Feb 2024 03:00:00 +0000
asID: 272024
IP address blocks: 181.189.24.0/23 maxlen: 24
181.189.26.0/24 maxlen: 24
2803:2510::/32 maxlen: 38
Validation: Failed, certificate revoked on Fri 09 Feb 2024 07:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145225 (0x23749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c59d2967ce698ceab49f8ca58b384c5945c526
Validity
Not Before: Feb 10 03:00:00 2022 GMT
Not After : Feb 10 03:00:00 2024 GMT
Subject: CN=67d94c2503fa52613099876190831d3619a7c6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:46:e3:ee:ed:65:4c:71:f0:6a:af:a6:24:
83:2f:ca:b2:ba:62:63:88:7d:5d:a1:fd:92:c5:97:
f1:61:99:5e:31:82:e9:d6:ed:5a:4b:8f:e2:4d:5f:
2d:d0:c7:25:a8:70:fd:92:fa:3b:1b:ed:fb:49:b9:
9b:86:05:4e:e7:fe:9a:d8:42:51:3a:02:9a:81:68:
0b:ff:6b:8e:eb:c5:a1:71:b7:f2:78:a9:55:ad:ad:
71:bb:5e:13:49:aa:59:26:52:bf:46:c4:46:d9:b3:
13:cd:54:18:1f:26:2e:d3:5c:d1:09:30:a7:ca:0b:
d1:07:2d:da:83:70:78:28:04:4b:00:c0:6e:1c:98:
51:e7:d2:bb:dd:27:a9:5b:59:9a:9d:f3:73:c5:55:
8e:d5:54:e5:90:34:17:ff:05:da:02:de:6c:d1:f0:
65:aa:4a:9b:56:62:1f:5d:5c:76:9c:11:ec:80:a1:
af:54:76:e2:41:af:e9:ac:b7:0f:b5:41:41:08:18:
29:f4:1a:36:0a:a4:5b:41:0a:14:34:44:df:28:5b:
2e:06:54:ba:dd:5a:4e:3a:f4:30:a9:6e:8a:81:a9:
48:52:2d:0a:43:79:72:80:47:63:fa:b4:ed:14:fe:
d3:84:5c:2e:7f:fd:89:e7:a5:fb:a7:db:5b:d7:8a:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:5A:22:E6:54:15:11:D8:84:73:D2:70:08:B2:10:EE:7B:95:C6
X509v3 Authority Key Identifier:
keyid:14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8c59d2967ce698ceab49f8ca58b384c5945c526.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/67d94c2503fa52613099876190831d3619a7c6c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c8c59d2967ce698ceab49f8ca58b384c5945c526.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.24.0-181.189.26.255
IPv6:
2803:2510::/32
Signature Algorithm: sha256WithRSAEncryption
95:ec:bc:3d:ff:8a:3a:21:31:76:08:a3:3d:50:ae:2a:ce:c0:
1d:16:71:aa:02:f8:b6:4a:3b:9d:3c:7b:b3:84:fe:05:18:9f:
2e:c4:47:44:c2:cb:65:ab:a5:1f:d4:4b:2d:36:85:3c:84:9d:
e1:7d:d0:74:2a:75:50:01:68:25:9f:10:3e:c1:20:d4:90:a7:
f4:9c:5f:42:7f:a0:d0:6f:b8:25:6c:51:4d:5b:73:6e:12:fa:
bf:aa:e3:a1:40:aa:83:8a:b3:65:ba:5b:e3:8f:65:9e:56:aa:
e9:2f:5b:c1:ea:37:53:ee:80:66:fd:1e:4d:0f:58:eb:ab:46:
2b:63:1c:b5:9e:02:36:57:e2:3b:ac:ae:fe:db:05:0e:53:b7:
83:8a:49:e2:9f:2f:86:b2:61:6e:29:e3:89:1e:7e:77:13:fe:
9d:ac:36:19:18:ed:53:fa:13:cf:67:92:a1:ce:b4:01:d6:a0:
6d:cc:45:8f:e0:37:91:b6:9c:27:42:b6:4c:4f:f5:46:af:1c:
92:9e:3b:fb:fc:52:3d:36:a6:39:f1:b0:a9:2e:3a:4f:38:71:
3a:a6:ae:dc:5e:36:64:a8:ee:1e:b9:a7:d2:bf:b9:dd:89:49:
ed:9b:ce:83:23:4f:e3:00:4c:74:3d:07:c5:37:e7:5b:de:f8:
f4:c0:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:20:37 2024 by rpki-client on console-ams.rpki-client.org