Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/589f7f9c5611b9161bdca865a79f359d211fe5a6.roa
File: 589f7f9c5611b9161bdca865a79f359d211fe5a6.roa (raw, json)
Hash identifier: oWPv7qhabHeSP03EtdXty9v4YToYgB41KfpvZhtid3c=
Subject key identifier: 7C:86:52:FC:DE:42:6A:73:CF:E5:39:61:C3:DF:B9:EB:90:75:E1:8C
Certificate issuer: /CN=6f35480750f171363a97d0fff033a3b0d1b09a18
Certificate serial: 0316
Authority key identifier: 79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/589f7f9c5611b9161bdca865a79f359d211fe5a6.roa
Signing time: Thu 10 Nov 2022 05:57:06 +0000
ROA not before: Wed 09 Nov 2022 05:56:03 +0000
ROA not after: Sun 10 Nov 2024 05:56:03 +0000
asID: 272883
IP address blocks: 2803:5a90::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 13:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f35480750f171363a97d0fff033a3b0d1b09a18
Validity
Not Before: Nov 9 05:56:03 2022 GMT
Not After : Nov 10 05:56:03 2024 GMT
Subject: CN=589f7f9c5611b9161bdca865a79f359d211fe5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:26:aa:7f:17:75:ff:22:8a:3b:e0:ab:ee:
1c:23:e6:b2:79:a2:f0:4a:12:86:3b:c1:bc:20:56:
1f:d9:51:4d:ce:e1:65:85:bf:26:0e:a3:22:37:01:
c3:8c:2a:ce:98:df:cd:12:bd:17:8c:f2:ac:2c:37:
0b:26:bf:7b:65:78:8c:49:b7:c5:f0:96:f8:74:f7:
2a:3f:06:a8:33:df:0b:74:77:4f:0c:f0:e2:2f:e4:
40:23:99:e8:f8:b4:b8:ea:44:c2:97:a7:97:7b:28:
8a:8f:d2:e6:16:cb:49:d6:52:4a:e0:71:68:b8:a2:
48:b2:77:ac:37:59:6a:2c:2b:07:ed:67:e0:01:ca:
12:1b:fc:77:a9:9f:92:6c:d6:d0:4c:9c:d0:39:fa:
93:a9:4f:4d:03:15:a1:6a:e2:d9:19:83:a6:de:d9:
87:e7:c0:dc:14:f6:b3:08:35:36:68:97:68:6b:53:
e6:11:e4:58:9e:c7:ec:13:27:14:f6:9c:cd:db:a8:
2a:e1:d1:8c:21:ed:1c:97:0c:af:c6:88:17:02:1f:
8c:38:fc:1e:86:bb:15:c8:94:7f:f7:82:ff:27:c1:
ec:86:0f:8b:64:70:cd:31:b9:94:5f:91:a8:28:d8:
ae:99:c8:7e:43:89:de:c0:8b:6b:e9:91:5e:8f:56:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:52:FC:DE:42:6A:73:CF:E5:39:61:C3:DF:B9:EB:90:75:E1:8C
X509v3 Authority Key Identifier:
keyid:79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/589f7f9c5611b9161bdca865a79f359d211fe5a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/6f35480750f171363a97d0fff033a3b0d1b09a18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5a90::/32
Signature Algorithm: sha256WithRSAEncryption
01:a3:e3:8c:b0:76:64:4d:05:3e:d1:f6:af:4f:36:64:a8:b5:
c4:d5:50:23:82:22:b3:d2:c3:e7:b0:22:35:75:38:92:24:a5:
1f:41:db:8f:e7:30:a6:12:89:e6:7e:77:7c:0c:86:6a:3c:ad:
b5:83:ca:0c:1e:35:5a:81:79:cd:a0:15:bf:ad:11:b5:62:50:
81:4f:e9:ea:59:f7:2b:7e:83:35:f0:dd:f9:cb:44:f0:42:41:
59:99:23:2b:ef:d0:0d:8a:d2:e1:9c:36:e8:f7:d5:ce:59:51:
2a:a5:cd:f5:61:e2:0a:ec:89:36:c6:25:32:83:da:af:ea:21:
be:ee:4e:ae:cf:79:17:0e:72:1b:9c:19:0a:cb:00:73:e2:22:
40:8d:01:05:2c:b0:c3:e3:ad:94:da:9d:12:f5:ea:cd:f4:de:
93:b6:a1:11:87:9d:3b:39:0c:71:69:d5:f4:f8:0d:17:c0:4a:
58:9d:b9:94:8c:ca:1b:83:a1:c0:61:6d:a3:c3:40:19:19:3b:
68:2e:44:e2:75:35:ae:a2:44:33:65:00:17:a6:2a:75:4a:a8:
97:71:44:e3:3d:64:d2:a8:28:48:4f:c4:8c:d5:53:cd:b5:b7:
ce:d0:00:05:2b:14:db:5b:c0:b7:a7:04:42:ad:ff:90:0d:e0:
41:35:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:42:49 2024 by rpki-client on console-fra.rpki-client.org