Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/97af0969c5c5c3522b2715bee98c3b806ec697cc.roa
File: 97af0969c5c5c3522b2715bee98c3b806ec697cc.roa (raw, json)
Hash identifier: 8ISed3i521ljKmsjNnCt7f/2yOb7Ffk3fy9D1id9Z7Q=
Subject key identifier: BD:5C:58:99:66:62:A5:BF:8C:B7:3A:6D:9D:63:8E:67:1B:AE:F8:EE
Certificate issuer: /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial: 14A27C
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/97af0969c5c5c3522b2715bee98c3b806ec697cc.roa
Signing time: Wed 06 Mar 2024 08:30:00 +0000
ROA not before: Wed 06 Mar 2024 08:30:00 +0000
ROA not after: Fri 06 Mar 2026 08:30:00 +0000
asID: 7004
IP address blocks: 164.77.27.0/24 maxlen: 24
164.77.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 16:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352316 (0x14a27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Validity
Not Before: Mar 6 08:30:00 2024 GMT
Not After : Mar 6 08:30:00 2026 GMT
Subject: CN=97af0969c5c5c3522b2715bee98c3b806ec697cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:c2:f0:f2:39:31:24:79:67:57:85:d6:74:
15:02:05:a2:bd:45:dd:d3:fe:c6:1c:88:98:d2:6e:
d8:29:1c:e7:b8:80:2f:f7:b2:f7:6b:8a:69:ad:ee:
e8:e1:68:d1:f1:76:e8:9b:28:e8:4a:ad:e3:fa:5d:
a6:67:6e:28:c4:23:91:b4:60:19:bf:28:28:43:a1:
fb:b7:ad:76:02:7b:68:39:97:14:1e:58:fe:f3:dc:
38:58:67:92:e4:31:d1:e8:0f:24:e1:80:2e:3a:62:
65:df:69:0a:89:c4:35:7b:48:0d:35:4e:ca:58:9f:
92:c7:92:28:84:70:4f:65:04:ac:a2:86:0c:2e:66:
8d:54:4e:58:91:ea:4a:e3:ea:af:6e:2d:f4:70:59:
13:f5:c0:ac:d7:31:30:fe:33:9e:90:f2:53:4c:53:
f8:95:33:78:d3:4d:f8:88:4b:16:76:60:92:fb:f9:
53:8f:9f:53:50:f6:d0:5e:aa:df:64:4c:ab:ff:e8:
7a:70:cb:ca:d5:c6:f1:6f:ce:f0:a1:e3:5c:29:6d:
9a:bc:4d:d9:f4:27:a5:17:16:36:a3:3d:55:17:2d:
10:97:73:98:ea:1f:bd:bf:b5:63:32:86:5f:c9:e5:
74:d1:96:72:c5:ba:4e:32:5f:85:c1:b0:b4:a6:02:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5C:58:99:66:62:A5:BF:8C:B7:3A:6D:9D:63:8E:67:1B:AE:F8:EE
X509v3 Authority Key Identifier:
keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/97af0969c5c5c3522b2715bee98c3b806ec697cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.77.27.0-164.77.29.255
Signature Algorithm: sha256WithRSAEncryption
64:c0:bd:3e:4f:cf:d3:dd:43:c3:4e:1e:37:6d:74:0b:8d:08:
61:62:98:6e:eb:71:b5:7a:d4:4d:0b:a0:24:43:05:2f:ae:8c:
6f:b2:9e:48:1f:f6:4f:8c:eb:ad:b8:45:0a:66:c1:a5:8b:30:
a1:9c:1e:62:06:69:c3:31:51:5e:50:11:f5:b5:f3:df:af:65:
59:08:94:07:ad:36:22:e8:55:3c:06:02:6d:34:4c:3c:1d:6d:
e0:fe:47:61:07:84:fc:c4:4c:ed:c7:c2:80:3d:21:b8:4e:a5:
19:80:52:78:53:7d:a1:66:57:86:3e:20:e0:b4:d5:4f:18:dd:
1d:ea:dd:4f:64:e9:12:fe:9c:d6:b4:a3:63:0a:fa:71:5c:d3:
ea:32:24:28:9e:96:c2:27:a3:8c:73:37:d1:43:59:27:09:65:
22:fb:d4:66:90:f5:67:f6:a1:68:f6:43:e6:58:50:21:3c:1c:
bf:2a:b5:33:33:b6:5b:38:aa:8d:90:a6:0a:fc:0a:3d:5e:ca:
5f:10:23:9e:2d:6f:bf:83:84:4d:98:07:01:3e:50:24:c3:93:
07:11:8e:20:38:e8:4c:9b:3f:43:8a:f7:3f:ab:56:ea:67:ba:
40:34:97:d3:6f:e5:ff:04:e9:86:d7:1b:66:e7:c9:d3:8e:69:
fd:95:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:42:14 2024 by rpki-client on console-ams.rpki-client.org