Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/d98329cb235b7ebea1b9c644607df04c1cdd7023.roa
File: d98329cb235b7ebea1b9c644607df04c1cdd7023.roa (raw, json)
Hash identifier: OotgsT078DTwIUlFFpTE+q35ESCCy0CM1yAZbCX15iw=
Subject key identifier: FC:41:0E:83:94:86:F1:48:2A:29:B5:69:E1:32:AF:EB:E9:9E:C6:3F
Certificate issuer: /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial: 03E3
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/d98329cb235b7ebea1b9c644607df04c1cdd7023.roa
Signing time: Tue 28 Mar 2023 23:11:49 +0000
ROA not before: Mon 27 Mar 2023 23:10:52 +0000
ROA not after: Fri 28 Mar 2025 23:10:52 +0000
asID: 52444
IP address blocks: 201.158.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
Validity
Not Before: Mar 27 23:10:52 2023 GMT
Not After : Mar 28 23:10:52 2025 GMT
Subject: CN=d98329cb235b7ebea1b9c644607df04c1cdd7023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:19:a1:21:c8:1b:a5:66:0d:dc:8b:c0:58:
f6:fd:87:51:fc:b3:79:31:5f:a8:73:35:9c:13:fb:
6f:bd:32:82:62:b6:9e:e1:69:df:21:98:ce:4f:3f:
2c:19:3e:00:a7:25:9f:1f:65:22:6b:91:50:a0:cf:
a9:e1:1b:b6:31:d7:54:cc:7f:f3:61:f1:84:24:06:
71:18:7f:6a:9f:b3:0d:c7:d4:dc:7f:71:06:f1:83:
9a:dc:af:03:b5:ea:36:1b:0c:f5:07:44:c2:4f:94:
c9:aa:18:12:75:f1:ed:de:e8:46:e9:66:ca:55:7a:
06:9a:73:9e:b5:90:9d:50:cc:1e:80:f6:49:c2:ed:
23:b2:51:db:bf:13:53:37:a0:26:00:e9:52:ed:b7:
eb:3c:c9:53:3c:d2:c6:7f:a1:d9:72:74:36:17:33:
90:80:99:bc:22:76:a2:83:a9:16:19:c4:3f:a8:4f:
9f:f0:84:88:be:07:66:24:6b:bd:1d:7c:57:bc:0f:
15:eb:63:82:4e:da:5b:10:6c:0c:e1:d8:08:07:27:
94:6e:23:6b:95:e1:0c:2f:1b:a1:44:00:b2:e3:1e:
01:ca:6c:54:6b:e9:69:04:aa:5e:1b:a0:8c:1e:51:
8d:76:25:d2:0d:c4:e8:3c:53:d6:1d:e4:c5:89:fb:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:0E:83:94:86:F1:48:2A:29:B5:69:E1:32:AF:EB:E9:9E:C6:3F
X509v3 Authority Key Identifier:
keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/d98329cb235b7ebea1b9c644607df04c1cdd7023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.98.0/24
Signature Algorithm: sha256WithRSAEncryption
42:68:f9:fe:42:72:16:cb:9a:f5:f9:a6:36:16:c8:26:49:e8:
84:4f:56:09:eb:5b:f3:08:c4:75:89:00:82:c2:e9:dc:31:61:
95:39:63:b3:53:8f:73:25:72:04:41:33:00:99:79:b1:a4:67:
02:b1:06:5a:6c:d9:c7:b9:1c:16:81:41:c0:79:ec:ab:11:e4:
ff:a3:1b:c8:93:de:c9:7f:42:c5:de:30:89:a1:95:11:18:47:
fc:6b:96:8e:e5:56:c1:91:10:4d:a8:22:5c:58:78:eb:58:63:
2f:e5:d7:79:4d:84:5b:4a:d9:af:33:24:5b:7a:f1:ba:85:0c:
98:95:c3:01:54:ec:aa:ce:25:7f:49:4b:f0:9f:96:00:91:bd:
53:41:73:72:07:b7:a2:1e:ac:94:54:4b:bb:75:33:34:53:b6:
19:6a:d2:36:3f:d6:07:39:19:08:b8:32:82:69:52:e1:e8:62:
68:cc:20:c0:a0:43:7b:ac:df:74:48:7e:6e:9b:bd:da:e9:f9:
ea:17:c5:40:1e:90:56:54:1c:28:69:4f:34:98:00:0d:d9:c7:
de:e4:f2:a8:29:92:f7:d6:dc:a8:34:0c:3c:a5:2d:09:ec:ce:
4b:c7:12:7a:38:ae:9d:6f:91:89:db:9c:0a:d2:71:08:5f:ff:
b6:f7:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org