Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/cd9ec27d9ca674777614d221a200c8b2ec4550b9.roa
File: cd9ec27d9ca674777614d221a200c8b2ec4550b9.roa (raw, json)
Hash identifier: SXczhNdtN2wLqit8l6ohiXXR5XV+ZHUfPLh6v94odeo=
Subject key identifier: 76:29:CF:33:2A:80:2E:58:0C:7D:B5:D4:5A:D9:E7:D4:A4:4F:C6:3C
Certificate issuer: /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial: 023813
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/cd9ec27d9ca674777614d221a200c8b2ec4550b9.roa
Signing time: Wed 05 Jul 2023 12:41:08 +0000
ROA not before: Tue 04 Jul 2023 12:41:08 +0000
ROA not after: Sat 05 Jul 2025 12:41:08 +0000
asID: 272928
IP address blocks: 201.158.96.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145427 (0x23813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
Validity
Not Before: Jul 4 12:41:08 2023 GMT
Not After : Jul 5 12:41:08 2025 GMT
Subject: CN=cd9ec27d9ca674777614d221a200c8b2ec4550b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:83:cb:aa:e3:5a:5e:6a:df:46:5d:67:91:
9e:dc:f9:46:dd:f7:29:e6:61:39:bd:36:42:84:5e:
c9:80:f0:20:84:49:4d:5c:8f:c9:a5:a2:20:e3:23:
ca:10:62:18:78:fb:72:95:80:72:6f:7f:51:d1:79:
b3:70:61:c3:58:8c:2a:a6:04:55:da:b5:d8:5e:8d:
24:eb:6c:f9:fb:de:86:3b:1a:02:1b:e5:c0:d2:f0:
24:33:ef:e0:b3:e0:9c:49:a8:2f:28:f4:29:03:9c:
e1:c2:cb:a6:5b:d0:75:ae:a6:c0:5f:ba:26:49:63:
bb:01:f1:60:f0:76:72:eb:a4:a1:f8:64:23:b5:8b:
a3:f2:9e:59:a9:e4:d0:14:20:44:cf:c9:32:5d:06:
d6:5a:48:af:53:e0:18:7d:76:de:99:97:7d:b3:1f:
40:41:81:b2:2a:64:a1:cf:a2:88:99:63:6f:9b:38:
65:3f:b5:27:df:d5:de:25:76:98:81:4a:8f:2d:b8:
b5:ef:56:19:71:39:1a:c0:31:b7:63:6a:30:bf:41:
a9:b2:15:01:e7:51:84:b3:7e:42:58:8b:09:e9:4b:
73:6e:90:a9:ab:3a:8a:20:1b:2e:59:f8:03:09:3b:
fd:24:0d:d4:49:46:a8:38:94:f0:ce:76:88:8f:8e:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:CF:33:2A:80:2E:58:0C:7D:B5:D4:5A:D9:E7:D4:A4:4F:C6:3C
X509v3 Authority Key Identifier:
keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/cd9ec27d9ca674777614d221a200c8b2ec4550b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.96.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:bf:f1:61:86:45:20:35:26:67:aa:92:c3:47:66:c6:e6:de:
d2:be:01:d6:67:d7:1c:11:04:ce:05:9b:cc:c9:41:07:38:f4:
2f:d7:69:02:e9:7d:4c:ca:a5:da:8f:e6:4e:e9:a8:6b:a6:0a:
27:b7:d5:46:13:2c:ef:ac:83:65:a1:0b:fc:1d:c6:65:ce:01:
3f:89:e8:f1:7f:19:7f:49:9f:a4:68:37:d7:6d:30:1c:86:97:
1d:0b:13:25:f1:63:b0:dd:af:7b:a1:d6:5a:ed:73:37:6d:11:
67:09:2b:f7:3b:c7:82:e7:b1:8e:79:12:6c:cb:e4:1b:cc:57:
1d:bf:a4:9a:a9:f3:36:dd:08:60:ec:ce:4f:f1:ea:41:70:f3:
8c:35:ed:19:29:12:fb:57:de:e6:fe:44:f4:0f:e2:8d:4a:9d:
6b:fa:3b:cf:18:c2:5e:54:05:17:d5:45:5d:24:06:09:48:b6:
11:15:68:74:0d:f3:46:c8:02:7f:b1:3d:96:6e:aa:8b:fe:c4:
ce:c9:e3:fb:18:d6:b8:aa:2b:0e:df:93:b4:ba:46:98:4b:c2:
18:0d:1f:05:45:b0:76:ae:0b:5a:fe:d8:9a:9c:38:36:f6:f0:
98:ef:e9:17:70:64:e1:07:10:47:8b:f6:d6:2b:35:c5:7d:22:
4d:26:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 07:08:50 2023 by rpki-client on console-fra.rpki-client.org