Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/a42b864650dda81065d5d7f89134c237a9ce1fab.roa
File: a42b864650dda81065d5d7f89134c237a9ce1fab.roa (raw, json)
Hash identifier: VGhCe2EZ/LlS3nLybEkTLVjTUfBnXpkRrhKIQW04LcU=
Subject key identifier: 87:4B:DF:CB:BA:2C:73:15:AF:A5:BC:69:16:64:94:FC:D0:09:C7:81
Certificate issuer: /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial: 0B43
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/a42b864650dda81065d5d7f89134c237a9ce1fab.roa
Signing time: Thu 10 Feb 2022 20:57:21 +0000
ROA not before: Thu 10 Feb 2022 03:00:00 +0000
ROA not after: Sat 10 Feb 2024 03:00:00 +0000
asID: 270047
IP address blocks: 179.0.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 07:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2883 (0xb43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
Validity
Not Before: Feb 10 03:00:00 2022 GMT
Not After : Feb 10 03:00:00 2024 GMT
Subject: CN=a42b864650dda81065d5d7f89134c237a9ce1fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:1c:fa:22:fa:04:01:99:4a:4a:41:78:97:
8c:b7:fb:95:15:75:78:38:c5:2a:f7:e6:76:80:81:
59:cd:db:5f:2c:ac:d9:13:6b:a3:6e:86:16:24:42:
8d:5f:8c:67:44:24:2c:6e:87:a9:53:05:1f:45:eb:
4c:93:f0:de:39:f2:00:03:d3:83:86:a4:1a:02:c5:
11:fa:3c:6e:43:30:84:de:10:b4:87:89:d7:81:21:
63:92:59:cb:98:69:81:55:5d:88:5d:60:99:44:7a:
d4:61:53:a7:25:39:70:17:5a:08:91:1f:ba:fd:e8:
41:c0:b4:6d:4b:df:c0:0c:cd:8e:b3:b2:04:8e:58:
a5:27:71:37:ae:59:98:2d:fe:69:fa:01:05:46:9a:
78:83:3c:d6:49:7c:9b:8c:5d:de:67:15:9f:ab:0f:
b1:8f:99:da:45:c8:59:80:3f:94:9d:c9:b9:a7:a8:
a3:79:ee:dc:30:8e:1e:a0:c5:e4:b9:14:c6:ec:1a:
a5:e5:00:0d:6f:77:b2:c8:07:76:8c:cf:7a:a1:7f:
81:11:f8:1d:49:db:d9:17:fa:11:f3:70:4b:9d:8b:
78:7d:11:d5:85:3e:3b:80:22:d0:8f:e9:52:2f:54:
2e:13:08:e7:96:ef:d7:32:7c:d9:c6:51:56:1a:c3:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:DF:CB:BA:2C:73:15:AF:A5:BC:69:16:64:94:FC:D0:09:C7:81
X509v3 Authority Key Identifier:
keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/a42b864650dda81065d5d7f89134c237a9ce1fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.186.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8e:17:80:a3:8d:f9:9a:5b:92:c6:31:14:7e:9f:6b:60:40:
00:f5:a4:5f:6c:e7:83:47:74:b4:b8:c1:25:79:53:1a:50:36:
78:07:08:27:5a:b1:0a:fa:b3:4f:7f:2f:9b:cf:d5:38:a9:0b:
02:dd:67:c1:fb:a2:c3:34:aa:36:8d:b3:00:ad:d1:c1:d8:d3:
e0:01:b9:c6:51:8c:7b:7f:a6:7d:4a:ce:74:67:ea:7b:b5:30:
53:8e:8f:fb:82:fa:4c:f4:03:57:87:f6:fe:fd:f0:78:4c:ff:
d0:4b:61:6e:49:04:62:80:90:72:47:21:2f:2a:96:ce:bf:c5:
8f:72:f0:3b:ec:76:f9:56:04:28:03:9e:4a:7a:cc:5f:51:95:
18:cc:1d:ee:f5:df:00:e6:30:5f:a4:30:50:12:90:f5:91:db:
ba:18:a6:23:75:33:11:1d:f3:9f:bf:db:74:b5:f4:56:c3:8b:
1d:14:16:ff:f0:9e:72:d3:50:d2:a7:52:20:ac:29:df:7e:6c:
b6:ad:1d:20:06:88:83:d6:ab:3f:23:d6:e4:ea:5b:e7:76:a0:
96:02:61:17:71:fe:07:33:9f:d8:94:c8:de:70:8b:2f:30:2c:
4c:6b:62:c1:7f:f4:af:5e:73:a9:8e:ef:92:bc:f0:27:50:5b:
44:c3:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:53:13 2024 by rpki-client on console-fra.rpki-client.org