Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/73672cd96d2a82e69fc9c0d7a930c1e59d56f17e.roa
File: 73672cd96d2a82e69fc9c0d7a930c1e59d56f17e.roa (raw, json)
Hash identifier: T+lSyFmah3EjehmiOtrLTFl+PZMoEKUObRQC6FtV4Vg=
Subject key identifier: 44:4B:6A:6E:31:C6:85:26:3A:DD:CA:3B:DA:E7:83:88:63:C6:06:A3
Certificate issuer: /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial: 13F8E0
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/73672cd96d2a82e69fc9c0d7a930c1e59d56f17e.roa
Signing time: Thu 08 Feb 2024 07:30:00 +0000
ROA not before: Thu 08 Feb 2024 07:30:00 +0000
ROA not after: Sat 07 Feb 2026 07:30:00 +0000
asID: 28047
IP address blocks: 164.77.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 16:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308896 (0x13f8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Validity
Not Before: Feb 8 07:30:00 2024 GMT
Not After : Feb 7 07:30:00 2026 GMT
Subject: CN=73672cd96d2a82e69fc9c0d7a930c1e59d56f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:8c:79:b9:09:ae:71:a2:31:06:9a:de:c7:
cb:32:70:ed:8a:a7:9e:fe:c5:b5:f2:5b:c8:63:ec:
a4:6a:34:f7:92:ee:a5:b4:04:94:0a:a7:bd:69:58:
cd:9d:67:7d:aa:e0:9e:78:20:95:25:34:8e:5d:39:
77:fb:7f:c5:15:ec:dc:79:8c:60:94:00:c1:1b:ed:
6a:0f:7c:37:1b:db:81:69:57:3c:9e:4e:88:10:3a:
f1:dd:1f:15:59:e8:46:62:99:b5:b1:76:86:b9:a9:
89:cf:94:48:eb:f2:8b:e0:41:29:1a:3d:1d:86:b1:
db:bc:a7:8d:48:b4:88:c6:17:f0:c1:b0:b6:35:37:
65:be:22:fd:22:b8:bf:28:f1:64:c0:84:06:34:86:
e4:b8:ed:22:c1:b8:14:d5:29:07:40:c0:c4:6b:52:
c5:68:e5:25:dc:86:95:a0:d4:25:e8:9b:dc:40:d1:
d6:72:57:c9:61:d2:98:67:c6:be:01:46:bf:54:27:
af:e7:55:26:50:ac:c2:02:f5:4f:72:b0:7e:39:f6:
2b:94:91:d9:21:7d:e2:d7:01:36:9d:7a:ca:c4:e4:
76:ba:82:aa:29:f1:5f:db:1a:15:6b:a6:5c:91:86:
1f:55:7a:64:41:7e:c1:3d:7c:d8:3a:3c:c2:a3:4f:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4B:6A:6E:31:C6:85:26:3A:DD:CA:3B:DA:E7:83:88:63:C6:06:A3
X509v3 Authority Key Identifier:
keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/73672cd96d2a82e69fc9c0d7a930c1e59d56f17e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.77.35.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7d:e0:86:d9:40:56:22:47:e4:43:66:7c:1a:27:77:23:77:
71:61:77:de:53:80:5e:31:a6:38:ac:d7:da:76:e4:64:2b:c3:
3c:63:ac:82:8c:7e:bc:59:ab:fa:41:94:4f:92:f5:dc:31:fa:
70:49:7e:3c:60:3d:79:6d:e6:99:49:9d:e3:37:78:0f:1d:29:
2d:c8:6e:86:9e:2f:4b:8a:71:f4:3f:e0:91:10:45:ac:d2:6d:
d7:35:65:cf:e8:b9:ef:89:b3:d4:ae:5f:c8:77:20:98:ff:59:
19:fa:03:7c:ff:28:ca:a3:dc:35:36:ed:57:fd:43:c7:f3:65:
dd:ef:48:82:85:2d:7f:6b:8c:13:4a:ab:ce:12:d6:8f:f7:37:
90:88:46:7f:df:42:9b:58:5a:62:bc:c5:9d:3d:06:91:e3:b9:
41:a1:df:39:fe:49:a2:51:02:fb:ad:08:03:7c:96:3e:0e:54:
2b:e1:1d:06:da:1a:0d:8e:b2:6f:04:2b:99:d8:17:6a:40:d9:
aa:23:f4:42:6d:ce:ab:ef:64:81:af:24:bb:6a:15:34:00:c7:
a1:7e:da:83:d2:71:b4:ba:71:17:18:b7:b4:e8:f2:e6:05:95:
43:db:ee:0a:35:60:10:95:07:7f:08:e9:5a:82:c1:c9:25:98:
0c:bf:f8:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE/jgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
YmE0MWNhNjZlYjBlNzcxOTJkMmQyMjIyMWU0ZmI2NjI5ODhhNWQwHhcNMjQwMjA4
MDczMDAwWhcNMjYwMjA3MDczMDAwWjAzMTEwLwYDVQQDEyg3MzY3MmNkOTZkMmE4
MmU2OWZjOWMwZDdhOTMwYzFlNTlkNTZmMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr2aMebkJrnGiMQaa3sfLMnDtiqee/sW18lvIY+ykajT3ku6l
tASUCqe9aVjNnWd9quCeeCCVJTSOXTl3+3/FFezceYxglADBG+1qD3w3G9uBaVc8
nk6IEDrx3R8VWehGYpm1sXaGuamJz5RI6/KL4EEpGj0dhrHbvKeNSLSIxhfwwbC2
NTdlviL9Iri/KPFkwIQGNIbkuO0iwbgU1SkHQMDEa1LFaOUl3IaVoNQl6JvcQNHW
clfJYdKYZ8a+AUa/VCev51UmUKzCAvVPcrB+OfYrlJHZIX3i1wE2nXrKxOR2uoKq
KfFf2xoVa6ZckYYfVXpkQX7BPXzYOjzCo09XewIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFERLam4xxoUmOt3KO9rng4hjxgajMB8GA1UdIwQYMBaAFPuOYs7eNW3I9NZd
V2Uaovd80TFgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNiYTQx
Y2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDg1NzYyMzEtNDdjYS00YjVlLTg3MDctZjkzYTYy
MjZiMzJmLzczNjcyY2Q5NmQyYTgyZTY5ZmM5YzBkN2E5MzBjMWU1OWQ1NmYxN2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ODU3NjIzMS00N2NhLTRiNWUtODcwNy1mOTNh
NjIyNmIzMmYvYWNiYTQxY2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKRNIzANBgkqhkiG9w0BAQsFAAOCAQEAOX3ghtlAViJH5ENm
fBondyN3cWF33lOAXjGmOKzX2nbkZCvDPGOsgox+vFmr+kGUT5L13DH6cEl+PGA9
eW3mmUmd4zd4Dx0pLchuhp4vS4px9D/gkRBFrNJt1zVlz+i574mz1K5fyHcgmP9Z
GfoDfP8oyqPcNTbtV/1Dx/Nl3e9IgoUtf2uME0qrzhLWj/c3kIhGf99Cm1haYrzF
nT0GkeO5QaHfOf5JolEC+60IA3yWPg5UK+EdBtoaDY6ybwQrmdgXakDZqiP0Qm3O
q+9kga8ku2oVNADHoX7ag9JxtLpxFxi3tOjy5gWVQ9vuCjVgEJUHfwjpWoLBySWY
DL/4sA==
-----END CERTIFICATE-----
Generated at Fri Mar 8 19:42:14 2024 by rpki-client on console-ams.rpki-client.org