Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/79d83552a587aaf5c62a785a1386f62407eb521b.roa
File: 79d83552a587aaf5c62a785a1386f62407eb521b.roa (raw, json)
Hash identifier: oUgLoaz78qHdN3Eq4PXED7+dmIpMSmTr7uifvEkwcmk=
Subject key identifier: 23:AA:28:6B:27:D8:71:87:F3:37:8E:24:FA:EB:F4:27:5A:A5:8B:90
Certificate issuer: /CN=e9249d6078896379eaa31ec8630fd15d97793e5d
Certificate serial: 275940
Authority key identifier: 37:8A:05:D0:C7:20:08:96:73:1A:23:6E:D0:92:16:78:45:AC:CD:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9249d6078896379eaa31ec8630fd15d97793e5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/79d83552a587aaf5c62a785a1386f62407eb521b.roa
Signing time: Sat 13 Apr 2024 00:20:34 +0000
ROA not before: Sat 13 Apr 2024 00:20:34 +0000
ROA not after: Mon 13 Apr 2026 00:20:34 +0000
asID: 267928
IP address blocks: 2801:1d:800::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Apr 2024 00:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578752 (0x275940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9249d6078896379eaa31ec8630fd15d97793e5d
Validity
Not Before: Apr 13 00:20:34 2024 GMT
Not After : Apr 13 00:20:34 2026 GMT
Subject: CN=79d83552a587aaf5c62a785a1386f62407eb521b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:c5:de:d0:ed:7c:f3:f6:17:cf:d4:53:e8:
8f:a4:e4:62:81:ab:6d:ab:fa:1d:ed:88:50:b3:b1:
95:f2:33:d9:56:6b:8b:a9:ec:68:57:21:00:ec:c7:
e8:d2:f8:5f:c8:66:12:ce:2b:77:ea:7e:c2:47:8b:
58:25:31:2c:7d:3e:1f:73:95:ab:0e:ae:54:fa:f8:
b8:3c:71:33:ac:03:d3:0e:5b:fa:27:17:91:4b:07:
6d:35:dc:13:a0:ac:a3:69:88:15:c7:48:ba:c8:62:
16:8f:b9:9f:d3:50:cd:ae:d9:01:08:19:6c:f0:a7:
03:18:d4:6d:0b:b8:88:d4:5e:4d:bc:46:f6:b9:f4:
7d:a1:ba:24:59:54:1c:28:13:f2:96:27:47:59:b0:
c8:64:ea:c2:03:da:85:fe:fc:ef:12:b8:c1:f2:6e:
a7:41:7d:d1:e6:66:8b:0a:9d:75:f1:cc:22:4b:10:
ee:48:08:fb:30:34:60:0c:0f:39:a1:73:4e:23:7e:
92:10:b4:d8:8a:c3:16:fb:79:62:2e:e8:dd:91:ad:
32:86:43:02:1a:a5:da:c8:6e:74:85:46:43:4a:ba:
2c:c8:6f:99:8b:f0:a3:41:93:66:b1:f1:df:a7:dc:
65:ae:89:8e:8e:7c:ee:85:0d:7b:36:ee:a2:f7:45:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:28:6B:27:D8:71:87:F3:37:8E:24:FA:EB:F4:27:5A:A5:8B:90
X509v3 Authority Key Identifier:
keyid:37:8A:05:D0:C7:20:08:96:73:1A:23:6E:D0:92:16:78:45:AC:CD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9249d6078896379eaa31ec8630fd15d97793e5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/79d83552a587aaf5c62a785a1386f62407eb521b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3f8c3b2f-b0fc-4a20-a9a5-5236fda16ee3/e9249d6078896379eaa31ec8630fd15d97793e5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1d:800::/48
Signature Algorithm: sha256WithRSAEncryption
ca:86:f5:8f:00:84:13:52:29:23:1c:a7:96:d2:cd:4b:74:db:
5c:ec:1d:6a:b1:3a:75:64:94:a3:d1:6d:62:4d:d1:c4:eb:5f:
1b:75:d7:10:86:21:aa:e8:30:fa:57:94:77:f7:70:d1:88:a9:
3e:f0:ba:64:95:83:af:60:b7:b8:85:fd:29:c3:27:9d:e6:81:
97:c4:6e:fb:7e:45:a7:2d:31:ff:f0:f9:a1:3e:6e:fa:f2:56:
34:1d:c8:08:58:53:f7:fc:16:cb:b3:ac:2e:82:cf:0d:72:33:
e3:1f:e5:a4:32:bb:9c:85:a7:79:fb:4d:b7:73:d9:a4:21:87:
cf:19:b0:d4:44:4d:c1:c4:d2:49:36:fe:54:c5:ab:98:19:76:
e1:ab:82:26:53:32:14:cf:61:a1:3f:66:ae:b8:e9:d1:f1:8d:
71:bf:11:1f:dc:31:f7:97:25:23:a6:e1:64:d2:19:a5:ae:c4:
a5:c6:7f:3e:11:5d:06:ad:0d:80:f4:7a:3a:b5:dd:b5:f9:8d:
75:75:23:fc:64:9b:29:35:89:9e:01:df:dd:70:14:44:b3:81:
ee:f0:fe:c5:65:33:a5:a2:38:f8:63:bb:e5:a4:7e:f3:65:92:
b7:0b:60:66:00:88:0e:3d:2c:22:8c:b2:ea:64:ea:df:94:8a:
05:d0:ce:a9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJ1lAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
MjQ5ZDYwNzg4OTYzNzllYWEzMWVjODYzMGZkMTVkOTc3OTNlNWQwHhcNMjQwNDEz
MDAyMDM0WhcNMjYwNDEzMDAyMDM0WjAzMTEwLwYDVQQDEyg3OWQ4MzU1MmE1ODdh
YWY1YzYyYTc4NWExMzg2ZjYyNDA3ZWI1MjFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzQXF3tDtfPP2F8/UU+iPpORigattq/od7YhQs7GV8jPZVmuL
qexoVyEA7Mfo0vhfyGYSzit36n7CR4tYJTEsfT4fc5WrDq5U+vi4PHEzrAPTDlv6
JxeRSwdtNdwToKyjaYgVx0i6yGIWj7mf01DNrtkBCBls8KcDGNRtC7iI1F5NvEb2
ufR9obokWVQcKBPylidHWbDIZOrCA9qF/vzvErjB8m6nQX3R5maLCp118cwiSxDu
SAj7MDRgDA85oXNOI36SELTYisMW+3liLujdka0yhkMCGqXayG50hUZDSrosyG+Z
i/CjQZNmsfHfp9xlromOjnzuhQ17Nu6i90XlSwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCOqKGsn2HGH8zeOJPrr9CdapYuQMB8GA1UdIwQYMBaAFDeKBdDHIAiWcxoj
btCSFnhFrM0PMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTkyNDlk
NjA3ODg5NjM3OWVhYTMxZWM4NjMwZmQxNWQ5Nzc5M2U1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2Y4YzNiMmYtYjBmYy00YTIwLWE5YTUtNTIzNmZk
YTE2ZWUzLzc5ZDgzNTUyYTU4N2FhZjVjNjJhNzg1YTEzODZmNjI0MDdlYjUyMWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZjhjM2IyZi1iMGZjLTRhMjAtYTlhNS01MjM2
ZmRhMTZlZTMvZTkyNDlkNjA3ODg5NjM3OWVhYTMxZWM4NjMwZmQxNWQ5Nzc5M2U1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB0IADANBgkqhkiG9w0BAQsFAAOCAQEAyob1jwCEE1Ip
IxynltLNS3TbXOwdarE6dWSUo9FtYk3RxOtfG3XXEIYhqugw+leUd/dw0YipPvC6
ZJWDr2C3uIX9KcMnneaBl8Ru+35Fpy0x//D5oT5u+vJWNB3ICFhT9/wWy7OsLoLP
DXIz4x/lpDK7nIWneftNt3PZpCGHzxmw1ERNwcTSSTb+VMWrmBl24auCJlMyFM9h
oT9mrrjp0fGNcb8RH9wx95clI6bhZNIZpa7EpcZ/PhFdBq0NgPR6OrXdtfmNdXUj
/GSbKTWJngHf3XAURLOB7vD+xWUzpaI4+GO75aR+82WStwtgZgCIDj0sIoyy6mTq
35SKBdDOqQ==
-----END CERTIFICATE-----
Generated at Sat Apr 13 03:02:31 2024 by rpki-client on console-fra.rpki-client.org