Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/428c7dbd7c217e47078a8e55eaeae87a56e6538f.roa
File: 428c7dbd7c217e47078a8e55eaeae87a56e6538f.roa (raw, json)
Hash identifier: CkErCi2hacUPbN0ho9TaJKZdXCDz0P2eJPQEfkHTovM=
Subject key identifier: 18:71:1D:AF:41:B9:28:BA:75:64:56:05:18:DD:5A:A8:65:28:EC:22
Certificate issuer: /CN=8f74f3635561538d1905f0fa0258d3d5fa209b59
Certificate serial: 195A72
Authority key identifier: BA:AC:1D:D6:8B:CE:41:55:3B:31:5D:E7:C4:E8:D4:28:8E:D2:52:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f74f3635561538d1905f0fa0258d3d5fa209b59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/428c7dbd7c217e47078a8e55eaeae87a56e6538f.roa
Signing time: Mon 05 Sep 2022 15:53:39 +0000
ROA not before: Mon 05 Sep 2022 15:52:54 +0000
ROA not after: Thu 05 Sep 2024 15:52:54 +0000
asID: 263236
IP address blocks: 2803:9680::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661554 (0x195a72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f74f3635561538d1905f0fa0258d3d5fa209b59
Validity
Not Before: Sep 5 15:52:54 2022 GMT
Not After : Sep 5 15:52:54 2024 GMT
Subject: CN=428c7dbd7c217e47078a8e55eaeae87a56e6538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:c2:fc:1a:06:f0:c9:54:d4:0e:90:23:c3:
72:b5:51:6a:57:37:da:a8:b0:8a:1f:2a:80:38:8a:
19:fa:3b:74:79:55:e4:01:64:b7:44:4e:7a:35:b2:
ec:c3:5f:05:0f:95:46:b1:96:da:ad:64:fd:84:6d:
3a:3b:dc:39:d8:19:db:5a:b0:35:9a:08:11:b2:d8:
b6:36:29:26:be:43:1d:54:ef:90:f8:38:8a:9e:d8:
a0:f3:f1:1d:b1:95:25:84:11:41:3f:27:77:29:30:
6a:f4:c2:7a:7b:94:06:f2:8c:68:e1:c0:27:39:c4:
dd:0d:d2:ff:28:b5:a0:30:6a:35:2d:f9:a9:52:43:
ee:f4:37:12:93:8e:8a:53:f1:9d:bb:e6:b2:6b:e0:
d5:9f:f4:54:88:b9:2e:06:9d:90:42:d8:47:04:44:
52:03:11:70:de:a8:ff:83:5e:47:0a:6d:55:69:1b:
bf:61:57:d3:e3:93:2d:60:b9:6d:24:c6:a4:68:d7:
e9:04:f4:a2:8c:39:97:cf:3f:23:31:9a:da:04:64:
4e:ab:df:a0:8e:b3:34:8f:7f:2e:12:39:78:3f:9e:
27:7a:62:b6:44:d1:7b:5c:bd:33:2e:d6:7b:ba:8e:
30:6f:4e:87:be:25:f7:0d:66:82:ba:48:80:db:fb:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:1D:AF:41:B9:28:BA:75:64:56:05:18:DD:5A:A8:65:28:EC:22
X509v3 Authority Key Identifier:
keyid:BA:AC:1D:D6:8B:CE:41:55:3B:31:5D:E7:C4:E8:D4:28:8E:D2:52:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f74f3635561538d1905f0fa0258d3d5fa209b59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/428c7dbd7c217e47078a8e55eaeae87a56e6538f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/20bfb98c-4b5d-490d-9342-b7421a481939/8f74f3635561538d1905f0fa0258d3d5fa209b59.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9680::/40
Signature Algorithm: sha256WithRSAEncryption
c3:ac:67:eb:12:47:dc:5b:03:8c:e1:bf:39:21:aa:61:ee:9d:
3d:c9:05:45:14:b9:30:aa:52:ff:53:e3:2f:20:73:f4:40:c1:
74:75:5d:9c:57:2d:67:44:8d:04:5e:ca:5e:fc:f8:9d:82:a8:
c2:5c:9d:dc:61:d8:30:5b:67:72:95:d8:1e:2d:17:33:72:07:
58:b3:f1:c8:44:f6:6f:c3:3f:c6:36:05:c2:b8:be:85:83:c9:
36:86:11:73:82:db:2c:29:e1:75:6d:89:fb:39:c7:cd:51:54:
16:e5:dd:df:4f:bc:76:b7:d2:d7:8a:fa:38:76:68:b6:8e:73:
2c:f8:ee:f4:81:11:1c:99:e4:ed:df:ef:9e:7a:a9:f9:9c:8f:
5b:ce:cd:bd:00:6b:36:d8:5b:d1:19:18:f4:45:56:d4:93:bc:
b5:5b:f5:a1:66:6c:9c:63:30:ee:55:6e:ac:8c:6b:ea:09:4b:
38:b2:62:31:c3:15:9b:08:59:96:c2:85:2f:ce:b9:29:b8:d4:
95:53:2f:3b:da:2f:03:38:e4:93:7e:8d:e9:6b:ca:d5:92:4d:
f5:2b:05:8c:46:1c:57:6d:c9:33:64:cd:fa:30:f6:df:c8:36:
7f:3a:9d:42:f5:1a:b1:95:d1:27:da:a0:75:31:63:e8:c5:63:
69:02:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org