Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/9af120da6cac6723b7bcdcb85e454553734d9e47.roa
File: 9af120da6cac6723b7bcdcb85e454553734d9e47.roa (raw, json)
Hash identifier: 9oF3HCcpYs72c1PU1GczpvyHgi5isfVJmgVg7pCh4L0=
Subject key identifier: 9C:C2:75:A9:21:2C:B0:2A:91:07:AF:D1:3B:D8:21:87:23:C3:EE:AB
Certificate issuer: /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Certificate serial: 0D3D46
Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/9af120da6cac6723b7bcdcb85e454553734d9e47.roa
Signing time: Wed 24 Mar 2021 14:47:25 +0000
ROA not before: Wed 24 Mar 2021 14:47:25 +0000
ROA not after: Tue 24 Mar 2026 14:47:25 +0000
asID: 8048
IP address blocks: 161.196.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867654 (0xd3d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Validity
Not Before: Mar 24 14:47:25 2021 GMT
Not After : Mar 24 14:47:25 2026 GMT
Subject: CN=9af120da6cac6723b7bcdcb85e454553734d9e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:b3:31:b7:d8:8b:28:d6:1d:39:59:6f:a9:
19:77:c0:51:68:93:d7:48:44:b7:d0:8f:17:89:c0:
a7:d0:e7:67:fa:7b:fd:e4:e7:36:ff:54:a4:6c:f5:
71:6d:0b:60:69:d5:e7:53:62:4f:94:dd:d5:c8:11:
6d:6d:06:7e:e5:1d:d1:37:66:4b:6d:8a:87:95:bb:
44:fa:d4:4c:58:e3:c3:a3:77:78:96:08:14:80:53:
f0:bc:e8:88:50:ce:ee:88:de:9d:92:07:81:24:3d:
53:75:74:08:e6:43:0f:ee:58:91:c6:7f:41:2b:1a:
bd:ec:e1:dc:66:cd:f1:91:87:22:ff:7d:96:7c:33:
10:78:38:69:45:cd:bd:b3:4d:69:da:d5:e8:9d:fc:
5a:fc:48:99:5b:b7:9e:b2:a9:58:3c:05:c7:5c:4a:
e4:2a:60:c6:9e:32:0d:18:59:08:02:f7:c0:f8:9d:
64:60:83:c4:f0:91:53:72:d9:a3:9f:be:c4:5d:f1:
0f:f1:37:8e:1b:27:25:7e:c9:c6:29:eb:91:95:ce:
dd:2c:5f:75:f5:a2:16:be:53:d4:e8:f5:80:74:94:
38:08:5b:e6:ee:26:3a:61:a1:7a:94:d7:e0:39:80:
77:3f:1c:08:7a:f8:b8:bd:55:1d:ce:f0:e1:a6:b5:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:75:A9:21:2C:B0:2A:91:07:AF:D1:3B:D8:21:87:23:C3:EE:AB
X509v3 Authority Key Identifier:
keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/9af120da6cac6723b7bcdcb85e454553734d9e47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:b2:3f:1e:09:c9:d6:61:92:cb:ed:f1:a9:a7:ac:5e:20:03:
10:2f:67:ae:82:f7:16:e1:ae:ac:79:27:43:86:6d:7e:71:d8:
9e:89:ea:dc:40:7f:52:71:ff:55:e1:44:87:b8:d6:3e:64:75:
d7:a0:99:19:41:b9:9b:c8:3b:be:84:77:17:57:24:e4:8c:9e:
9e:99:8d:f4:6c:9d:d9:47:d8:1a:89:43:a1:62:00:99:e8:21:
a6:8c:a5:82:ea:d1:7a:5a:84:f3:42:33:cf:fb:d8:3a:1e:0e:
ef:b2:a7:56:ef:1c:ea:9f:12:60:5f:98:ba:f2:45:3e:62:6d:
8b:c0:a4:f8:4c:5d:bf:b6:b6:3d:a5:8f:c1:a6:c3:e5:af:87:
9d:10:25:cf:35:4d:36:f3:5a:39:c4:66:89:76:2f:42:f8:9b:
51:ef:c0:db:65:39:bc:13:ae:8f:90:76:f6:ef:93:4b:fd:30:
65:82:19:2d:bc:cc:16:9f:60:61:1f:08:1d:c6:2e:dd:54:ca:
da:04:ae:64:43:2c:af:45:9f:d0:4c:09:f8:17:69:f5:7a:65:
5e:aa:a5:87:97:89:05:97:32:1b:56:dd:6f:cb:03:07:e3:57:
c7:5a:bf:4d:d2:ab:0e:4b:be:e5:db:1f:f8:7b:2f:b7:6a:de:
f4:a3:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:02:47 2024 by rpki-client on console-ams.rpki-client.org