Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa
File: a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa (raw, json)
Hash identifier: kha8lTPWgzlYWttmH8L0Zwtnat8tJvHWXASK9EVJfZ0=
Subject key identifier: F0:AC:EF:DE:02:DE:6A:18:60:F1:2A:FE:06:C4:2A:6F:64:01:39:AE
Certificate issuer: /CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
Certificate serial: 26F625
Authority key identifier: 94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa
Signing time: Fri 05 Jan 2024 07:30:00 +0000
ROA not before: Fri 05 Jan 2024 07:30:00 +0000
ROA not after: Sun 04 Jan 2026 07:30:00 +0000
asID: 266667
IP address blocks: 181.224.172.0/24 maxlen: 24
181.224.173.0/24 maxlen: 24
181.224.174.0/24 maxlen: 24
181.224.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 02:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553381 (0x26f625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
Validity
Not Before: Jan 5 07:30:00 2024 GMT
Not After : Jan 4 07:30:00 2026 GMT
Subject: CN=a7db0d90a56f725c98ec9c31b74bbf77d817d5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:e1:c9:c2:66:48:8b:d3:61:05:61:25:b4:
44:e0:cf:24:3d:28:e1:9f:60:f2:08:ed:6f:4e:53:
0b:82:c0:02:f1:bd:cd:69:63:65:8b:0c:bb:60:53:
f3:92:c0:8b:aa:ed:a6:aa:8e:0d:71:70:30:4f:8c:
9e:89:58:c2:df:8e:03:ca:f2:24:a2:eb:7e:ad:4a:
61:8f:26:89:90:78:50:74:6c:05:18:0b:52:56:8a:
33:f0:4e:f9:39:17:b6:b5:7f:39:89:94:8c:55:2a:
a4:25:13:7c:dc:d9:18:a4:17:38:b6:34:f0:7f:d1:
66:25:04:71:21:08:ae:d4:15:5a:c5:74:23:93:55:
73:9d:33:67:89:01:d4:45:de:2b:1d:1a:2a:ad:75:
07:35:62:19:ab:b2:c3:87:0e:9f:61:2a:ab:40:5e:
30:d5:a1:af:65:52:2d:50:d4:e9:ff:f1:f5:fc:2c:
92:dd:d4:04:76:2d:f3:bc:aa:0d:3c:6d:b0:80:98:
53:b4:95:52:f6:d4:c4:fd:3a:9e:81:02:55:8b:a6:
44:c7:76:ed:6a:2f:a1:a2:cb:32:e4:ac:a3:f7:7a:
8b:92:f7:ea:dd:30:81:c7:05:8d:f9:b9:c6:ad:e2:
00:98:fa:f3:72:2b:4c:57:40:f1:79:b0:b1:ea:06:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:EF:DE:02:DE:6A:18:60:F1:2A:FE:06:C4:2A:6F:64:01:39:AE
X509v3 Authority Key Identifier:
keyid:94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/9b0e0f420897114db2d68a02564c7a8a56c71d86.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.172.0/22
Signature Algorithm: sha256WithRSAEncryption
09:cf:90:67:e9:b7:79:9d:6e:32:59:22:66:62:5c:56:fc:46:
4e:59:3f:a4:3c:1e:b7:97:97:4e:11:b8:cf:67:0d:52:85:6e:
36:ca:03:14:d2:ad:b3:3f:c5:5e:04:7b:60:32:30:b8:9b:a5:
fc:5e:27:c2:a1:89:4c:0b:47:ba:a8:bc:db:4b:53:07:d8:1c:
b1:6f:6c:40:dc:06:53:26:83:ae:75:c9:12:f8:d4:3d:89:18:
1a:88:60:ba:f2:e5:b8:af:fe:84:fe:25:47:aa:68:36:50:65:
43:75:bc:cc:f8:65:a4:1f:16:5b:51:63:3f:be:b4:dd:e9:e5:
90:5d:a8:ec:0e:3f:10:a5:36:5b:42:ef:77:99:c0:35:44:7c:
99:76:22:6a:d6:30:de:4b:c1:ea:de:2f:30:f6:02:2f:93:b5:
da:6f:f3:b9:55:26:b4:bc:3e:8c:57:af:98:48:43:89:f8:fa:
f4:e2:17:f3:a5:2e:41:02:41:ec:68:72:de:cf:f5:c8:73:ae:
f6:b6:aa:65:fc:c2:4f:da:8b:c4:a5:12:d5:03:73:f6:2c:00:
f0:61:98:83:5f:56:c0:6e:0b:10:a9:5d:6d:32:48:b2:6a:8e:
a5:6c:62:29:5d:f4:82:52:a0:f4:e2:fb:8b:92:22:1d:25:54:
10:ba:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 05:52:29 2024 by rpki-client on console-ams.rpki-client.org