Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/9d5e1a1e357b3f8f4837964bb15770d7fcbe37ab.roa
File: 9d5e1a1e357b3f8f4837964bb15770d7fcbe37ab.roa (raw, json)
Hash identifier: DQENyolWkp+AzJ1UBCVsw5ciwFRA++3PqHuRkPZWxpI=
Subject key identifier: 81:56:79:8F:C5:0B:59:93:EE:D7:5C:41:18:CA:C8:06:E2:C4:0E:4F
Certificate issuer: /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial: 023324
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/9d5e1a1e357b3f8f4837964bb15770d7fcbe37ab.roa
Signing time: Wed 05 Jul 2023 12:31:52 +0000
ROA not before: Tue 04 Jul 2023 12:31:51 +0000
ROA not after: Sat 05 Jul 2025 12:31:51 +0000
asID: 52444
IP address blocks: 201.158.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 16:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144164 (0x23324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
Validity
Not Before: Jul 4 12:31:51 2023 GMT
Not After : Jul 5 12:31:51 2025 GMT
Subject: CN=9d5e1a1e357b3f8f4837964bb15770d7fcbe37ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:80:ef:8a:ce:21:fe:f7:92:85:8a:df:8a:
57:c8:68:a8:df:9b:a1:32:ca:6d:32:e1:51:68:55:
6d:07:24:25:16:c3:ba:3e:2c:4c:4b:57:73:e9:67:
be:76:a3:43:6e:ac:a1:c8:a4:4a:6a:25:11:d4:ad:
f5:8b:28:5c:3c:83:23:22:c6:74:74:c8:89:6f:2d:
c2:ad:81:26:9f:0a:0f:05:1d:5e:19:0f:4c:4c:4d:
f2:ef:c2:43:1b:34:be:4c:e7:a8:29:92:3b:1f:8a:
6c:90:2c:85:90:0e:ff:8d:bf:84:24:d8:f2:04:1c:
e4:00:d8:15:91:b1:6b:25:6c:e1:97:c5:38:20:2c:
34:97:16:38:13:a6:a7:7f:b7:f1:d4:65:33:8b:71:
37:a7:ad:dc:c1:2b:48:ec:22:eb:71:4f:92:8c:46:
9f:02:05:11:89:72:d3:99:cf:88:c7:43:17:fc:0e:
06:d3:95:f4:5c:6a:53:63:8c:c2:d9:9b:ea:1e:07:
9f:bb:8e:ec:3f:ea:ab:68:11:5e:3e:8f:ed:a0:58:
8e:9d:1a:07:f4:af:dc:75:ee:45:e4:e4:6d:6f:d5:
94:c5:81:f3:ce:bb:75:bb:02:e1:ee:56:14:dd:47:
52:6f:01:8b:e2:88:d6:22:43:74:e5:e6:7b:e7:e1:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:56:79:8F:C5:0B:59:93:EE:D7:5C:41:18:CA:C8:06:E2:C4:0E:4F
X509v3 Authority Key Identifier:
keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/9d5e1a1e357b3f8f4837964bb15770d7fcbe37ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.98.0/24
Signature Algorithm: sha256WithRSAEncryption
34:bc:8d:6a:7c:9f:a5:f4:42:aa:75:d4:44:0e:e2:5a:ad:f1:
dc:6c:b0:dc:c7:7e:d4:12:5b:83:18:3b:61:2b:43:5b:ad:fe:
ae:3e:35:27:56:01:e8:2d:c2:b1:c1:88:1a:01:8f:ef:fc:8b:
a9:4f:6b:77:76:2a:cc:85:fa:0d:c2:09:7b:11:03:f5:bb:4e:
0d:3f:19:47:ff:53:47:db:b0:0d:1e:de:50:ca:0b:23:7d:be:
89:80:03:d2:97:9b:6f:5e:06:24:ef:10:3f:9b:e8:08:ae:5d:
99:bf:b6:23:36:de:b7:e1:e4:70:99:ac:d1:74:7a:ca:40:c6:
fa:36:96:e7:fa:b0:b4:60:d0:47:1d:cc:09:54:68:9e:52:d7:
99:0c:84:86:29:ff:62:a7:ae:fd:9a:47:0e:f4:43:3a:3a:dd:
79:67:05:48:f0:72:d6:8f:54:27:b0:ce:76:29:de:1d:39:74:
6b:00:67:5a:af:57:02:7a:8e:d8:14:bc:22:ef:25:b9:57:48:
71:b8:67:49:82:0d:96:81:0b:58:10:03:3f:05:62:33:c5:86:
9b:79:16:22:b4:40:f6:b2:4b:38:6a:f7:55:60:58:75:95:0d:
d2:e6:b7:28:52:81:52:96:67:80:1c:80:00:87:40:a5:f0:2c:
ed:c4:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 19:58:25 2024 by rpki-client on console-fra.rpki-client.org