Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/527e263af985958930a91141621f0e0320194163.roa
File: 527e263af985958930a91141621f0e0320194163.roa (raw, json)
Hash identifier: 8nY0vhiYJq9CMjoKDS+Qpu0yN52W080zCDW3S2yKe3c=
Subject key identifier: 3F:0F:AC:7A:00:FF:CC:AC:97:65:66:42:3A:DF:95:83:19:B3:A9:03
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 278F6E
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/527e263af985958930a91141621f0e0320194163.roa
Signing time: Sat 27 Jan 2024 05:56:24 +0000
ROA not before: Sat 27 Jan 2024 05:56:23 +0000
ROA not after: Tue 27 Jan 2026 05:56:23 +0000
asID: 52228
IP address blocks: 152.231.128.0/17 maxlen: 30
Validation: Failed, certificate revoked on Sat 27 Jan 2024 16:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2592622 (0x278f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Jan 27 05:56:23 2024 GMT
Not After : Jan 27 05:56:23 2026 GMT
Subject: CN=527e263af985958930a91141621f0e0320194163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:47:50:b4:25:4c:03:de:c2:34:9a:35:f8:
0b:aa:da:04:d0:ec:2a:7c:33:96:50:9d:43:c5:65:
6f:23:2b:32:7f:74:26:33:0b:6f:99:93:9d:53:c1:
7b:cf:e8:d6:6a:23:89:09:4b:39:09:f0:81:61:a7:
ab:5a:4d:90:25:ff:de:d7:6f:0e:bc:ba:16:88:14:
f3:8f:da:83:29:f8:9c:7d:a3:84:5c:8d:b6:25:bd:
3f:93:b9:b7:df:a1:15:c7:ad:01:40:19:6d:86:43:
6d:ce:3c:d0:90:69:1b:75:5f:23:f5:db:ad:72:03:
73:34:7f:52:98:45:05:9d:ad:3d:e4:0c:13:fb:f3:
ba:b6:ed:d7:d0:c7:45:f7:5b:2d:bd:1d:f6:78:13:
bb:ac:a7:4c:fb:28:3c:41:29:5c:68:d2:3f:0c:9f:
5a:6f:7d:6d:91:97:45:70:9a:3e:87:92:66:67:ac:
8b:f9:51:5e:88:9a:6c:fd:3d:ba:e2:4b:e9:7b:f4:
27:af:97:2d:5c:9f:bf:97:9d:b7:67:41:bd:ad:f3:
f2:fd:5b:b9:53:22:3b:e9:2a:5c:7f:b9:c1:1e:89:
8a:23:79:e2:24:90:90:a7:d5:2d:36:01:ad:36:4f:
f9:7d:2a:28:39:92:db:0d:e1:ba:23:63:a7:93:f0:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:AC:7A:00:FF:CC:AC:97:65:66:42:3A:DF:95:83:19:B3:A9:03
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/527e263af985958930a91141621f0e0320194163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
08:45:16:ab:17:13:02:4e:42:8a:18:70:73:27:a9:68:4f:09:
45:74:43:80:69:81:48:72:75:78:07:81:81:c5:17:6d:31:78:
c3:1a:94:71:2d:46:f7:06:26:25:81:1a:14:bd:02:4a:db:d8:
b3:f1:3f:09:59:f8:d2:3a:ec:9a:65:8c:45:98:bd:5c:32:f4:
69:cb:04:21:61:63:d3:6c:c2:00:3c:0c:b5:69:3f:50:b4:30:
00:3c:d2:c9:94:69:b0:ef:77:74:32:d7:e9:d4:74:66:1b:5a:
e8:ee:fa:40:d9:3e:5e:98:36:58:b9:40:af:6d:b8:93:4f:de:
01:f7:88:f6:e3:0c:11:ec:19:72:0b:14:38:d4:17:86:98:9b:
ac:d4:b0:07:3c:ed:77:61:47:c2:86:eb:68:4f:2d:3f:ea:b3:
a9:b8:ac:27:0e:ba:d3:35:ec:05:10:9f:12:ab:9e:a0:4f:52:
3e:a7:da:ba:e3:8b:93:2b:da:58:e3:f7:3c:a0:31:08:68:8d:
81:a4:75:89:bf:95:84:2d:88:47:af:95:70:89:f2:89:29:37:
11:ce:63:e9:1c:c8:37:44:83:f9:05:2f:51:70:c3:22:06:14:
31:99:b4:aa:b3:28:95:1f:1a:ab:3e:bd:c7:dc:8e:f6:96:c6:
b0:78:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 27 19:28:58 2024 by rpki-client on console-ams.rpki-client.org