Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/af7324e3735dbad4290c868039e46edd6f6ad0b6.roa
File: af7324e3735dbad4290c868039e46edd6f6ad0b6.roa (raw, json)
Hash identifier: EtfzxNqTiHQiQ2eWIOiUG6soEkw3UlRNeUXUe8BHYb4=
Subject key identifier: 7D:31:CB:85:21:CC:E2:CC:9E:5F:F2:B3:12:6F:0C:29:0E:08:6A:05
Certificate issuer: /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial: 06AA4F
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/af7324e3735dbad4290c868039e46edd6f6ad0b6.roa
Signing time: Tue 18 Oct 2022 21:27:05 +0000
ROA not before: Sun 16 Jan 2022 03:00:00 +0000
ROA not after: Wed 17 Jan 2024 03:00:00 +0000
asID: 269735
IP address blocks: 2803:960::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jan 2024 07:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436815 (0x6aa4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Validity
Not Before: Jan 16 03:00:00 2022 GMT
Not After : Jan 17 03:00:00 2024 GMT
Subject: CN=af7324e3735dbad4290c868039e46edd6f6ad0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:4a:01:26:30:36:99:28:b7:38:a9:09:c9:
3a:c6:70:19:b6:56:68:43:20:ec:41:c2:fb:24:78:
e8:a0:e8:c2:7c:30:17:49:9a:8c:94:ee:70:c3:6e:
8b:9e:b7:6d:4f:ad:72:5b:ea:c7:6e:44:00:52:5a:
0b:c8:7c:96:0f:75:1c:16:01:af:a7:53:1f:0a:98:
14:6a:ac:ef:0c:ae:e2:86:13:37:8c:28:f6:aa:98:
7f:04:4c:cd:2d:67:95:56:d3:87:ea:4e:7a:02:35:
d1:3d:a8:37:84:b3:61:0b:cf:a2:3c:8a:99:fe:5d:
3a:ff:2b:ae:5e:47:c7:9f:69:3e:52:45:df:a1:44:
fe:6a:a5:67:5c:98:a2:8f:cd:c9:69:47:75:f5:8b:
23:f2:08:f3:08:56:cf:f9:5a:6f:dc:a5:b1:f4:24:
02:a6:b9:9d:bb:dc:fb:ee:93:53:d5:78:cc:fd:e8:
a0:91:48:82:73:ad:cb:d6:da:32:ef:9f:f8:5b:0d:
b2:e9:f6:f1:42:81:e0:4c:9a:f3:39:23:59:99:10:
50:be:8a:fb:12:5f:6e:90:e4:ee:7b:6e:47:96:e4:
cd:ab:35:99:1f:fd:a6:df:55:00:2c:f5:8d:48:bd:
25:5a:11:d9:ec:66:da:2f:40:3a:c1:9f:84:6a:4d:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:CB:85:21:CC:E2:CC:9E:5F:F2:B3:12:6F:0C:29:0E:08:6A:05
X509v3 Authority Key Identifier:
keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/af7324e3735dbad4290c868039e46edd6f6ad0b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:960::/32
Signature Algorithm: sha256WithRSAEncryption
60:09:e2:2c:4e:d3:d0:5c:f9:bd:30:07:60:61:fe:7b:2f:d3:
4f:d9:83:b4:61:4d:45:58:ad:9c:f7:b1:5b:bf:02:26:3d:70:
93:1a:e4:a2:4e:f2:ca:ae:ce:63:54:bb:f7:90:a4:c1:2d:08:
ac:9c:df:00:61:a4:71:1c:6a:77:9a:2e:34:f7:05:e6:38:3b:
6e:c2:b7:5e:38:eb:e6:b3:0c:44:3a:5e:d0:8b:05:2d:e9:9c:
66:ad:1e:02:b2:71:f2:52:89:16:b2:34:7d:92:59:ae:fa:50:
40:25:b1:86:fb:d5:2a:29:bb:07:94:e4:13:55:7e:39:c9:36:
5e:87:70:c4:af:5d:90:c0:b7:83:72:82:af:24:82:21:b9:50:
9f:74:db:da:53:2c:37:41:66:bb:56:aa:e5:c8:58:9f:02:62:
c6:3d:2f:bd:86:1f:cb:95:c1:3e:ca:45:79:77:2b:65:ce:09:
5d:24:b0:d8:a0:14:87:ea:d9:05:cd:7f:3d:d6:6c:7b:52:9a:
e8:52:e6:8f:d8:a5:a7:5a:0b:77:14:cd:33:6d:4e:8a:2d:5d:
31:c2:ee:a9:24:be:c0:93:9b:59:a6:1f:27:83:65:9b:33:05:
ba:a5:c4:7d:9b:1d:5f:ef:7a:bf:03:65:67:8a:ae:35:de:7d:
28:6e:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 10:21:54 2024 by rpki-client on console-fra.rpki-client.org