Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/9fae3743302b726571d99c8a5fc17cf654f7beb3.roa
File: 9fae3743302b726571d99c8a5fc17cf654f7beb3.roa (raw, json)
Hash identifier: zRVEiOw1oTGkIBPDYAaEIAV4Lb+ZcS0VWr7qkZSxdQc=
Subject key identifier: CB:D2:01:7D:87:96:00:46:AA:60:4B:B0:0A:C4:55:32:43:03:47:39
Certificate issuer: /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial: 1422A8
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/9fae3743302b726571d99c8a5fc17cf654f7beb3.roa
Signing time: Tue 13 Feb 2024 16:44:42 +0000
ROA not before: Tue 13 Feb 2024 16:44:42 +0000
ROA not after: Fri 13 Feb 2026 16:44:42 +0000
asID: 6471
IP address blocks: 164.77.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 16:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319592 (0x1422a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Validity
Not Before: Feb 13 16:44:42 2024 GMT
Not After : Feb 13 16:44:42 2026 GMT
Subject: CN=9fae3743302b726571d99c8a5fc17cf654f7beb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:78:c5:0d:35:59:a6:b4:6e:9c:ff:c9:76:
2c:a8:de:bd:25:76:98:1d:b9:6a:1a:f2:60:03:41:
38:51:5e:70:8a:45:71:e6:43:34:15:f3:78:f8:a7:
fe:1b:60:17:a3:cc:46:62:e1:a4:b4:cb:d7:13:4d:
d4:39:73:6e:66:81:98:a9:68:8e:38:8b:5c:14:2f:
0c:3f:98:a9:87:e1:5b:6d:2f:1c:e4:77:0c:e5:ce:
c6:7e:e3:31:7b:b9:96:66:f4:33:01:24:8b:43:6c:
e7:4e:96:33:b4:e6:5c:6e:cb:9c:f4:ec:c5:b5:be:
1f:e0:64:bc:55:41:06:cd:76:8a:4a:1d:76:13:ef:
5e:71:07:9a:4d:b8:dc:4f:7d:8e:3b:c4:28:01:e4:
3d:5f:26:6c:2d:d9:43:98:59:39:9e:eb:43:fe:ed:
b4:d6:4b:c1:15:36:76:d1:9f:42:cf:63:ca:8f:eb:
cb:c9:6b:1f:4b:6f:f2:82:f1:ea:c8:51:5d:f8:c4:
5e:41:80:3e:7a:19:fc:a4:d5:f3:d3:b1:87:40:e9:
a7:ac:ea:a5:68:4e:e8:25:e5:93:ba:6b:ab:15:bd:
7c:7d:e2:7f:e1:13:5f:84:9e:83:ee:39:a7:dd:32:
b5:db:5b:7b:12:54:9a:4f:7e:4d:14:db:18:5e:cb:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:01:7D:87:96:00:46:AA:60:4B:B0:0A:C4:55:32:43:03:47:39
X509v3 Authority Key Identifier:
keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/9fae3743302b726571d99c8a5fc17cf654f7beb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.77.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e0:66:ee:d6:ff:2d:be:a1:1e:ca:6d:ba:15:97:13:f3:11:
8d:87:17:f4:bf:1b:b2:6e:73:d5:ea:13:2e:ff:c0:da:75:76:
bb:6a:03:45:93:90:76:3c:85:cc:10:48:42:56:b0:e4:e8:fe:
67:12:4c:70:79:23:09:0e:bc:2d:42:06:8d:eb:81:b0:c8:a7:
ff:6f:6a:3b:e8:12:04:d9:5b:bd:18:0b:cd:e8:22:5e:41:0c:
bf:11:11:de:05:14:d1:94:cb:6c:fd:7c:3e:75:41:52:9c:b3:
e4:89:a1:3b:67:31:4c:59:99:b2:19:58:80:17:e0:c0:b0:e9:
57:02:a1:e8:03:db:71:1f:dd:b5:9e:75:0a:3d:f7:5e:47:85:
de:89:69:f2:6a:17:f3:b5:d8:cd:1e:87:1a:e5:c9:9c:d3:aa:
e2:26:73:df:cd:59:83:11:0b:2b:cb:ae:4a:e4:f3:86:23:90:
32:4d:5a:d4:f7:8b:c4:2a:3e:42:26:80:d4:d6:37:ea:88:f4:
8a:62:33:2a:00:e9:77:14:2b:48:2e:4f:84:21:a6:8b:2c:b0:
62:fd:40:89:7d:b9:fa:86:97:8e:77:78:1e:46:dd:3c:fa:aa:
bc:91:6c:16:bd:b0:9d:d2:b9:5b:79:39:b5:e0:c6:ad:ad:7d:
59:21:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:35:27 2024 by rpki-client on console-fra.rpki-client.org