Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33342d3334203d3e20323633373530.roa
File: 323830333a396261303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier: Ph6Ai2J+NUU1V51lu2hb6pvfawSZgmEeGzq2xutHvhs=
Subject key identifier: 49:01:C6:69:70:AA:9F:62:DD:19:58:51:AE:B1:21:09:65:73:3B:C9
Certificate issuer: /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial: 400573ACE85584E501A9F47BEC4088D8BE8D1049
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33342d3334203d3e20323633373530.roa
Signing time: Fri 01 Nov 2024 13:40:00 +0000
ROA not before: Fri 01 Nov 2024 13:35:00 +0000
ROA not after: Fri 31 Oct 2025 13:40:00 +0000
asID: 263750
IP address blocks: 2803:9ba0::/34 maxlen: 34
Validation: Failed, certificate revoked on Fri 01 Nov 2024 15:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:05:73:ac:e8:55:84:e5:01:a9:f4:7b:ec:40:88:d8:be:8d:10:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Validity
Not Before: Nov 1 13:35:00 2024 GMT
Not After : Oct 31 13:40:00 2025 GMT
Subject: CN=4901C66970AA9F62DD195851AEB1210965733BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:eb:ab:66:56:c6:77:ef:fa:c8:01:d6:2b:
e0:5d:bc:e1:59:2a:0c:7b:c9:80:f0:8e:39:9c:d0:
65:b8:44:3c:47:0c:d5:f4:1d:19:df:0f:9d:52:bb:
f4:34:32:7f:6e:c0:a2:ef:48:24:a0:70:28:31:be:
16:5b:b7:ce:ec:6e:a7:44:b7:fd:b4:b3:de:13:f0:
f0:d5:81:32:94:09:ba:91:11:16:8b:ad:95:05:22:
73:7b:7a:e0:97:04:43:33:ce:28:b9:10:5b:67:d1:
8c:9d:63:df:b4:9c:85:89:4b:f8:f8:7b:9f:5e:af:
54:d3:7b:a3:88:c7:1f:f7:63:8c:46:a4:a4:12:7f:
1f:dc:ca:3e:76:71:74:e1:e9:34:3a:00:03:e7:7b:
76:f9:ce:ea:0b:6b:6e:32:04:78:2e:ec:e0:1d:01:
50:77:0b:8b:78:fa:5f:f7:71:10:bc:80:5b:81:e8:
b2:e6:c2:a2:79:e0:a2:90:37:73:81:c0:cc:d3:53:
64:91:e7:23:35:9c:8b:22:b0:cb:48:c0:36:4a:03:
2d:1d:f4:e9:7d:97:60:1f:85:ff:ec:e4:5e:16:ef:
56:a6:51:24:75:f9:38:c2:69:a1:8f:73:a3:6c:36:
c3:c4:65:f7:3f:ed:d2:1f:4c:0b:0d:f4:c9:06:b7:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:01:C6:69:70:AA:9F:62:DD:19:58:51:AE:B1:21:09:65:73:3B:C9
X509v3 Authority Key Identifier:
keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33342d3334203d3e20323633373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9ba0::/34
Signature Algorithm: sha256WithRSAEncryption
95:eb:0b:34:7b:b3:a0:4d:a0:b2:1c:18:c0:df:7c:26:be:e7:
08:29:bb:6c:40:51:48:5d:a0:0e:9c:3f:64:0e:8f:0c:9e:eb:
90:ab:3a:2f:0d:3d:c8:68:03:1d:ab:ff:36:44:84:a2:eb:48:
f0:18:36:e2:36:1a:50:f6:f5:30:7b:b5:09:04:43:44:49:ef:
70:ac:2b:56:79:8e:bb:45:f2:5c:7d:02:fa:d9:c3:99:b4:ba:
7d:62:61:d4:f6:92:7f:53:b2:70:03:a4:ff:6f:dd:bf:68:76:
27:63:85:b7:82:7b:77:a5:17:80:9f:c0:56:16:2a:81:8c:81:
44:ed:85:bc:29:08:7c:45:e1:0f:7d:db:84:f0:14:9d:c1:65:
c8:7c:4a:5b:a4:00:1b:82:b4:79:af:3c:ff:5c:cb:05:f5:28:
6e:f1:4c:2e:00:3c:b7:09:14:17:aa:15:dd:ea:0b:90:3a:64:
f1:a9:b1:27:fb:09:ab:aa:af:03:28:7f:81:65:00:dc:6a:7c:
33:45:f8:27:53:72:25:9d:43:89:d9:fb:d5:f7:25:6d:85:b4:
03:ec:3f:3c:fe:d2:8c:ff:c3:02:c1:f6:a0:a7:b0:79:32:d2:
ef:36:a1:c1:67:80:2d:84:bd:e7:74:a6:8b:ce:2d:70:bd:89:
53:eb:f8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 17:59:44 2024 by rpki-client on console-fra.rpki-client.org