Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/cc82bd596aa01f8f18d720655dc0a9d2762ff4ac.roa
File: cc82bd596aa01f8f18d720655dc0a9d2762ff4ac.roa (raw, json)
Hash identifier: CTq3r+L1oOkFOAWE2q5fEszpWvgf+D5JHEgauVn/cmQ=
Subject key identifier: 56:EB:2C:07:31:44:7F:32:DB:C5:A9:1E:7B:CC:25:E0:07:2C:10:C1
Certificate issuer: /CN=89b43ca0a70451881fc86586450001a0c3042bd0
Certificate serial: 032CB2
Authority key identifier: 62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/cc82bd596aa01f8f18d720655dc0a9d2762ff4ac.roa
Signing time: Mon 21 Feb 2022 18:18:30 +0000
ROA not before: Mon 21 Feb 2022 03:00:00 +0000
ROA not after: Wed 21 Feb 2024 03:00:00 +0000
asID: 271992
IP address blocks: 2803:9110::/32 maxlen: 64
2803:9110:1000::/48 maxlen: 64
2803:9110:2000::/48 maxlen: 64
2803:9110:3000::/48 maxlen: 64
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208050 (0x32cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b43ca0a70451881fc86586450001a0c3042bd0
Validity
Not Before: Feb 21 03:00:00 2022 GMT
Not After : Feb 21 03:00:00 2024 GMT
Subject: CN=cc82bd596aa01f8f18d720655dc0a9d2762ff4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5b:00:7e:d0:b7:e0:24:1e:2d:b1:83:ca:7b:
0e:73:c6:66:b4:9f:3d:b8:37:1c:88:a1:bf:4d:83:
0c:25:b7:7f:df:4a:5d:d6:24:a7:39:c6:0f:31:03:
b9:09:f2:07:f2:0f:60:f9:50:2f:39:35:08:56:25:
e8:b8:39:f0:ac:28:8a:7a:f4:dc:9f:bf:f3:10:db:
83:9e:13:16:09:85:83:64:38:02:d9:19:26:36:db:
d2:d7:06:0c:40:30:24:29:f9:1c:90:97:7a:02:6f:
5c:cc:c5:a5:da:87:ca:cf:70:d6:bc:bd:1e:51:f0:
22:91:61:c2:d4:7a:ad:5d:df:a1:a6:e4:51:d0:9c:
8f:5d:21:49:f4:10:37:0d:8e:7a:e1:a1:ac:d6:61:
64:25:e3:cb:ab:a4:54:bd:80:26:0e:85:d1:74:82:
84:26:e4:1e:83:04:f8:45:75:09:b2:94:23:18:45:
08:b0:5b:ae:ac:c9:94:4f:bc:8a:4b:60:1b:16:89:
2c:00:16:76:18:df:56:e8:ee:36:de:18:9f:a1:6f:
d2:ac:1f:80:dd:f6:1f:43:24:01:94:97:b5:4b:58:
af:4a:8f:c5:96:f2:b0:9a:a8:f7:cc:5e:d8:5d:e9:
1a:03:ce:7b:71:ba:a8:98:b3:c4:f2:56:36:56:ed:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:2C:07:31:44:7F:32:DB:C5:A9:1E:7B:CC:25:E0:07:2C:10:C1
X509v3 Authority Key Identifier:
keyid:62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/cc82bd596aa01f8f18d720655dc0a9d2762ff4ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:9110::/32
Signature Algorithm: sha256WithRSAEncryption
8a:82:51:7d:58:0e:79:52:90:47:2f:28:ef:bc:ce:af:f9:3c:
58:4c:80:6e:2f:4d:b3:b6:00:97:01:db:12:f6:90:30:dc:23:
c3:fb:f7:09:14:b2:69:06:dc:71:0b:f2:08:95:ab:2b:f1:bc:
02:22:cd:76:75:58:79:cf:11:9d:c9:0a:af:89:8b:07:a2:f0:
d9:85:fb:6f:3a:0f:a9:0d:9e:4b:63:98:2b:70:cd:17:8d:47:
22:c0:83:cf:d7:38:be:ae:a4:e3:d6:c3:dd:eb:7b:4b:ad:2e:
0f:0c:28:a2:9f:0f:21:4c:c3:bb:01:63:1a:4b:b6:b3:9f:6c:
cf:2f:16:c7:28:95:07:f9:91:c7:32:50:93:69:31:fc:c2:f4:
0f:f1:ff:e6:2c:5c:73:82:ad:c9:88:3c:42:14:49:06:85:d0:
d6:ff:66:5f:55:0b:62:de:07:60:d2:6b:d3:84:0e:9b:5b:6c:
81:f7:cd:3f:25:32:40:5d:58:41:6c:bc:de:3d:5b:f0:34:cc:
10:8f:61:35:2c:31:fd:d7:58:d3:91:4f:56:c5:93:74:06:91:
26:0e:28:1b:17:5d:9f:71:3e:9b:50:46:55:96:96:d9:21:45:
0b:b7:d6:b6:ec:89:b0:c0:1c:e5:ab:0d:9b:1d:76:13:c9:14:
7b:5d:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 12:04:19 2024 by rpki-client on console-fra.rpki-client.org