Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/a34ba7e158c05dc65401aae71748728e03786465.roa
File: a34ba7e158c05dc65401aae71748728e03786465.roa (raw, json)
Hash identifier: lOUgVeSDObGFfWOCfhjffjLD6wn1ItnzE2adbGO59aU=
Subject key identifier: 95:A4:BD:8A:B2:8D:E4:E3:07:47:0B:57:5C:C0:E8:92:2E:9E:41:EA
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 279A73
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/a34ba7e158c05dc65401aae71748728e03786465.roa
Signing time: Sat 27 Jan 2024 16:36:16 +0000
ROA not before: Sat 27 Jan 2024 16:36:16 +0000
ROA not after: Tue 27 Jan 2026 16:36:16 +0000
asID: 52228
IP address blocks: 152.231.128.0/24 maxlen: 30
Validation: Failed, certificate revoked on Wed 31 Jan 2024 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2595443 (0x279a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Jan 27 16:36:16 2024 GMT
Not After : Jan 27 16:36:16 2026 GMT
Subject: CN=a34ba7e158c05dc65401aae71748728e03786465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:64:a2:96:7b:c3:4b:ac:47:69:ad:bf:2a:
11:63:0b:7f:65:60:c7:58:a7:46:68:ce:ca:62:0c:
67:ac:82:b1:9c:bc:19:a3:4f:16:7b:e4:6e:d3:7d:
a3:49:be:6d:a6:9f:8e:dd:eb:03:28:a1:fc:8b:e5:
26:35:d0:ce:f3:23:e5:2c:05:5d:d0:fa:d7:ee:45:
f8:80:3e:1f:27:bd:65:83:ef:b2:f3:df:34:0a:9e:
32:ca:b9:5c:b6:bf:62:75:5c:20:35:39:49:1e:f2:
96:b5:a4:8b:33:31:27:85:14:41:62:27:a4:72:69:
c8:ac:ac:0e:57:2e:6e:f6:f5:49:6a:c4:27:c4:7f:
18:1e:c7:93:58:29:aa:b3:46:dd:1c:13:fb:40:cf:
b9:f7:dc:3a:59:93:f7:fb:a3:e8:62:05:8c:33:09:
47:2d:96:e9:2b:cb:81:08:70:ae:94:98:04:42:26:
88:20:27:bc:8c:b2:20:9e:f5:e0:1a:39:30:08:ad:
d5:38:a9:b7:ee:29:88:a9:8f:2c:6c:67:07:47:80:
8e:fe:80:b0:6f:a8:66:d2:e6:20:93:87:a8:1e:b1:
63:12:0e:49:22:aa:be:0f:75:a8:59:da:b7:e6:94:
21:28:85:16:45:1d:d5:a7:ee:b0:7f:ef:db:4c:3d:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:BD:8A:B2:8D:E4:E3:07:47:0B:57:5C:C0:E8:92:2E:9E:41:EA
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/a34ba7e158c05dc65401aae71748728e03786465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:fd:b6:6a:c8:52:4a:98:0f:47:ef:84:91:9c:47:d1:23:c5:
b9:da:8e:85:f2:03:02:30:f3:20:22:99:f6:8d:76:06:58:dd:
d8:75:87:84:2a:f5:70:50:d3:fd:18:5f:37:83:2d:68:98:7e:
a9:c1:de:90:0f:cc:6f:c4:f8:f8:f1:1c:d2:f7:76:4d:de:11:
1b:bb:dc:fa:ad:28:c5:a1:78:93:26:11:b1:eb:a5:7d:9c:a5:
15:01:12:f7:cf:a9:61:32:27:72:fe:a4:97:9a:f9:d1:90:8f:
53:ef:7d:58:00:54:6a:1c:5f:1e:c7:21:62:a2:ca:21:23:d5:
84:a1:f1:03:1d:c5:e7:dd:9e:2b:5c:f4:8d:7c:4e:2d:30:c3:
56:b6:55:05:f1:3e:ad:a3:54:10:71:8f:55:ce:86:a7:62:f3:
87:3d:cf:02:4b:33:8f:da:eb:22:33:1c:e6:f7:5b:68:99:df:
4e:6f:36:f3:85:25:63:c9:4e:f0:bc:2b:9a:c9:44:d3:83:d0:
a0:7a:31:0a:bb:fe:e0:36:f0:57:96:00:ff:c4:46:0d:89:ca:
f4:1a:d7:db:a9:e9:1b:c2:46:1f:49:60:48:b8:26:cc:92:d4:
9c:79:be:5b:3e:1b:85:88:eb:d6:88:75:fc:c4:68:ef:ff:61:
89:40:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:36:23 2024 by rpki-client on console-ams.rpki-client.org