Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3438203d3e20323730303739.roa
File: 323830333a316265303a3a2f33322d3438203d3e20323730303739.roa (raw, json)
Hash identifier: V9YunsxpqQeK0Dz5F6S6EWQrkJnnWo+0sSwigThWKpM=
Subject key identifier: 67:99:14:D0:B6:58:A9:7F:63:35:26:D1:E3:60:F2:B6:6F:33:50:B5
Certificate issuer: /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial: 28B918133F2CD406D7CDB055860A4BB2EEB9344C
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3438203d3e20323730303739.roa
Signing time: Tue 26 Nov 2024 00:35:00 +0000
ROA not before: Tue 26 Nov 2024 00:30:00 +0000
ROA not after: Tue 25 Nov 2025 00:35:00 +0000
asID: 270079
IP address blocks: 2803:1be0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Nov 2024 11:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b9:18:13:3f:2c:d4:06:d7:cd:b0:55:86:0a:4b:b2:ee:b9:34:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Validity
Not Before: Nov 26 00:30:00 2024 GMT
Not After : Nov 25 00:35:00 2025 GMT
Subject: CN=679914D0B658A97F633526D1E360F2B66F3350B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:38:ac:2a:d9:43:c5:b5:17:2c:f7:74:59:
5c:90:64:5c:1e:36:99:18:cd:1b:b0:82:43:b5:8e:
4a:39:e6:34:24:77:f3:8e:b2:79:b7:b1:dd:67:ce:
a5:8b:64:78:46:ed:87:71:e3:df:34:01:8a:c0:da:
07:d2:82:3e:13:ce:58:f6:48:00:5e:2b:81:a0:61:
ec:ce:de:e0:0e:41:eb:c9:80:e7:df:92:7c:d0:e5:
0b:83:91:3e:cf:fa:de:ba:24:93:86:33:aa:92:41:
18:2e:de:d2:7d:bc:be:c4:7e:de:9a:92:2e:b9:72:
b6:89:6f:cb:94:e4:95:29:a4:2b:61:5c:4c:85:59:
9b:a2:98:18:ec:34:1f:cd:00:8a:d6:03:a4:d9:40:
be:14:2d:44:a9:66:25:34:ca:f1:91:7c:28:8b:1d:
ba:82:4c:ac:98:c8:17:e1:aa:fb:34:d8:a0:0c:24:
a2:13:b3:95:89:80:07:e4:0c:28:b6:da:46:0d:84:
69:fc:05:b7:ec:ef:db:16:b5:42:59:99:6c:5c:a3:
72:f9:55:24:07:b2:ba:c0:e1:dd:2d:ce:0f:c9:14:
fd:ee:28:ad:3c:3b:ce:cd:8d:62:67:e1:18:29:e6:
c0:10:00:6f:00:19:ae:2d:0d:20:58:c0:a4:4a:48:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:14:D0:B6:58:A9:7F:63:35:26:D1:E3:60:F2:B6:6F:33:50:B5
X509v3 Authority Key Identifier:
keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/323830333a316265303a3a2f33322d3438203d3e20323730303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
67:19:2f:95:f0:1e:76:2b:68:db:8d:9c:8f:ba:b1:84:69:6d:
f9:03:13:e0:71:4e:05:20:58:9b:94:cd:15:35:70:4d:80:9e:
b0:fa:a9:cc:78:1f:a3:58:39:a9:a5:95:0c:e8:c2:14:0d:53:
db:77:5b:78:67:b9:fa:08:97:81:d5:5d:56:2f:48:9b:4e:3a:
77:f3:15:a8:f2:49:7e:21:ab:2d:f0:b3:f2:5e:1d:f9:fa:61:
66:90:bc:6c:e1:0b:86:45:b6:0f:f5:c5:b3:0f:61:44:bc:21:
5c:c1:6d:91:95:e8:14:6b:9c:55:ca:82:08:0c:d5:70:dd:bd:
3e:70:c5:bf:23:b6:db:11:43:8a:06:0b:eb:d3:7a:d4:53:2c:
d5:bf:57:ad:1a:90:8c:1c:fb:9f:da:27:c6:13:54:b3:16:cb:
96:e0:e2:c0:2d:1e:4a:6f:0a:b6:02:9c:bd:70:d3:5d:97:48:
dc:75:67:69:71:9a:b7:5d:39:be:94:b6:0b:78:e0:d5:29:85:
80:01:2c:62:a6:a1:06:60:b7:83:36:2a:b6:ed:91:1a:c8:30:
20:e3:29:65:b5:ed:6f:a8:fe:39:45:92:cc:6a:92:71:61:43:
9e:48:66:be:3b:d2:90:10:b3:a5:3d:ce:c8:a9:67:8b:a0:b6:
e9:9d:ac:27
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUKLkYEz8s1AbXzbBVhgpLsu65NEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxMkE0QzQzMTUxQzE1NjE1MEQ5QkRFRDAzRDcyMzY5
MjFCRjlCODAeFw0yNDExMjYwMDMwMDBaFw0yNTExMjUwMDM1MDBaMDMxMTAvBgNV
BAMTKDY3OTkxNEQwQjY1OEE5N0Y2MzM1MjZEMUUzNjBGMkI2NkYzMzUwQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCDisKtlDxbUXLPd0WVyQZFwe
NpkYzRuwgkO1jko55jQkd/OOsnm3sd1nzqWLZHhG7Ydx4980AYrA2gfSgj4Tzlj2
SABeK4GgYezO3uAOQevJgOffknzQ5QuDkT7P+t66JJOGM6qSQRgu3tJ9vL7Eft6a
ki65craJb8uU5JUppCthXEyFWZuimBjsNB/NAIrWA6TZQL4ULUSpZiU0yvGRfCiL
HbqCTKyYyBfhqvs02KAMJKITs5WJgAfkDCi22kYNhGn8Bbfs79sWtUJZmWxco3L5
VSQHsrrA4d0tzg/JFP3uKK08O87NjWJn4Rgp5sAQAG8AGa4tDSBYwKRKSJ9TAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUZ5kU0LZYqX9jNSbR42Dytm8zULUwHwYDVR0j
BBgwFoAUQhKkxDFRwVYVDZve0D1yNpIb+bgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRDcwNTgyNTM2OTZERkYxRkVDNDY2OTM4NDM2MkQ3NTg2
REEwQTJFRUQ0MDY5MUU4NEEzNzYzMTc1REUxM0YwLzAvNDIxMkE0QzQzMTUxQzE1
NjE1MEQ5QkRFRDAzRDcyMzY5MjFCRjlCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjEyQTRDNDMxNTFDMTU2MTUw
RDlCREVEMDNENzIzNjkyMUJGOUI4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUQ3MDU4MjUzNjk2REZGMUZFQzQ2NjkzODQzNjJENzU4NkRBMEEyRUVE
NDA2OTFFODRBMzc2MzE3NURFMTNGMC8wLzMyMzgzMDMzM2EzMTYyNjUzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMDMwMzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDG+Aw
DQYJKoZIhvcNAQELBQADggEBAGcZL5XwHnYraNuNnI+6sYRpbfkDE+BxTgUgWJuU
zRU1cE2AnrD6qcx4H6NYOamllQzowhQNU9t3W3hnufoIl4HVXVYvSJtOOnfzFajy
SX4hqy3ws/JeHfn6YWaQvGzhC4ZFtg/1xbMPYUS8IVzBbZGV6BRrnFXKgggM1XDd
vT5wxb8jttsRQ4oGC+vTetRTLNW/V60akIwc+5/aJ8YTVLMWy5bg4sAtHkpvCrYC
nL1w012XSNx1Z2lxmrddOb6Utgt44NUphYABLGKmoQZgt4M2KrbtkRrIMCDjKWW1
7W+o/jlFksxqknFhQ55IZr470pAQs6U9zsipZ4ugtumdrCc=
-----END CERTIFICATE-----
Generated at Tue Nov 26 13:35:53 2024 by rpki-client on console-fra.rpki-client.org