Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/daff71a17a0519129d59a1e2e461f611f22f8a5c.roa
File: daff71a17a0519129d59a1e2e461f611f22f8a5c.roa (raw, json)
Hash identifier: G3KIHdmxa+47pnSfPmSmnpCKX7RMY1pLk6/9Xo+wFw4=
Subject key identifier: 3C:C4:D1:FC:16:70:1B:57:B6:00:A8:3E:1D:A5:90:F4:7E:B8:5E:43
Certificate issuer: /CN=c421a24623084ac56fd5acff08e76a5dd734e47f
Certificate serial: 02FD
Authority key identifier: 39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/daff71a17a0519129d59a1e2e461f611f22f8a5c.roa
Signing time: Fri 04 Mar 2022 03:01:39 +0000
ROA not before: Fri 04 Mar 2022 03:00:00 +0000
ROA not after: Mon 04 Mar 2024 03:00:00 +0000
asID: 272079
IP address blocks: 2801:1e:9800::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 03 Mar 2024 08:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765 (0x2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c421a24623084ac56fd5acff08e76a5dd734e47f
Validity
Not Before: Mar 4 03:00:00 2022 GMT
Not After : Mar 4 03:00:00 2024 GMT
Subject: CN=daff71a17a0519129d59a1e2e461f611f22f8a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:a2:31:6c:5e:f3:d7:a4:31:32:b5:81:4f:
81:08:ff:28:f9:4d:a6:7f:b0:cf:29:b1:fc:95:f1:
04:43:27:e3:dd:f5:9b:59:d0:7e:8e:41:41:90:49:
18:2c:24:ce:31:20:cf:b3:af:f1:18:fb:7f:e1:6b:
df:33:f4:24:34:50:bf:ca:38:b7:83:5e:9a:63:8b:
7c:41:a1:cc:f6:4c:4f:cd:18:8b:e9:8c:95:a9:e8:
46:51:4b:d8:aa:af:79:eb:d8:4e:ed:2c:32:85:49:
75:21:80:e8:82:0c:72:81:8e:96:1e:ed:a5:4e:3a:
9c:6b:4c:45:8a:91:48:e2:13:11:aa:59:fa:ee:6b:
5b:83:33:54:12:8c:5c:4a:86:b9:fc:41:49:fd:6c:
1f:8e:49:2a:66:d5:04:6d:4e:46:66:fd:80:cd:09:
68:b7:93:ac:13:6f:2b:cc:52:eb:b4:99:88:d2:3e:
6e:3a:d9:52:ab:88:4d:6d:a9:09:a4:63:33:e1:eb:
3a:09:95:69:c3:c3:24:f9:66:b5:d2:8b:9a:19:cb:
80:8c:ef:eb:4b:9d:bb:cb:83:eb:9c:b1:04:4e:21:
d1:0f:80:97:10:f6:cf:5f:65:45:6f:e8:26:dc:39:
ee:a3:58:51:b8:55:02:a9:28:a4:aa:1c:c3:15:36:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:D1:FC:16:70:1B:57:B6:00:A8:3E:1D:A5:90:F4:7E:B8:5E:43
X509v3 Authority Key Identifier:
keyid:39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/daff71a17a0519129d59a1e2e461f611f22f8a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:9800::/48
Signature Algorithm: sha256WithRSAEncryption
3e:fd:c9:73:4e:62:95:8b:38:c4:2e:f9:7a:64:76:75:38:4a:
ce:8b:61:47:45:49:ec:55:f8:ec:f2:e1:a9:b1:fd:4c:8f:87:
86:6f:43:81:63:76:89:98:e2:f8:6f:25:7e:07:63:76:21:68:
75:f8:19:de:2a:e8:8e:63:2b:d0:d0:2e:81:47:37:e3:e7:30:
2f:8d:d5:de:84:62:6a:77:d0:4a:91:5a:d4:8a:5e:c9:76:57:
27:55:af:29:6f:89:4b:67:7f:9b:10:00:bf:0b:1a:91:8a:e1:
0e:2c:13:69:8c:e1:69:06:24:e5:46:c8:8f:1c:51:39:5c:1f:
29:d4:6b:01:13:06:50:5f:e6:5b:d6:e3:cc:8a:53:0e:55:2b:
c2:7c:5d:2e:b7:0f:00:d7:58:37:5e:96:23:07:be:fc:8c:aa:
14:b9:69:dd:ae:54:88:92:be:d0:8c:bf:98:9f:82:79:7b:e5:
b7:80:b7:17:59:ad:b2:11:db:16:14:5c:fc:20:1c:a9:bb:52:
b1:c7:5e:99:71:e3:a5:e3:2a:29:cc:cb:6a:71:72:3e:64:af:
2b:97:3d:a6:a3:4f:dd:dc:5e:f2:c1:46:6b:d9:9e:97:56:f1:
d0:db:37:0e:3a:7d:ae:3a:41:77:b4:5d:06:2b:3c:03:9b:e6:
c5:fe:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 10:18:17 2024 by rpki-client on console-fra.rpki-client.org