Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/d9680b8583256dfc0e8dc6d8bdf6afa2cffab424.roa
File: d9680b8583256dfc0e8dc6d8bdf6afa2cffab424.roa (raw, json)
Hash identifier: uBnrfLl3xxOu7WfPwP32dgdA+2Jlbe0+ZlbJCRwp9FQ=
Subject key identifier: 8C:17:4D:31:E2:51:B9:6E:2D:04:7E:9F:B5:F7:A1:A7:28:0D:EE:A5
Certificate issuer: /CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Certificate serial: 1963AA
Authority key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/d9680b8583256dfc0e8dc6d8bdf6afa2cffab424.roa
Signing time: Tue 15 Aug 2023 08:30:00 +0000
ROA not before: Mon 14 Aug 2023 08:30:00 +0000
ROA not after: Wed 13 Aug 2025 08:30:00 +0000
asID: 28110
IP address blocks: 131.196.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 16:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663914 (0x1963aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Validity
Not Before: Aug 14 08:30:00 2023 GMT
Not After : Aug 13 08:30:00 2025 GMT
Subject: CN=d9680b8583256dfc0e8dc6d8bdf6afa2cffab424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:41:ce:a9:3c:13:82:50:2d:87:d1:7c:6f:30:
db:54:ae:c8:70:60:85:1b:c3:6e:84:26:33:47:35:
23:50:0b:d7:bf:bd:aa:ee:d5:6d:97:b6:49:51:c7:
c6:4a:c8:68:39:b6:a8:66:3f:4e:60:39:60:a5:20:
d1:d3:18:aa:12:4b:53:37:67:9b:45:be:45:52:97:
8a:60:f3:45:4e:41:1d:27:80:1b:d6:b3:34:53:0c:
77:3e:1a:87:b0:a9:6d:30:1d:26:12:0f:3a:60:33:
90:c7:c4:18:aa:17:56:36:01:81:83:c8:ee:46:e1:
b4:2f:f8:12:e8:28:09:b1:6d:f4:73:a5:31:dd:44:
e5:10:18:b0:95:b3:7e:9a:b5:41:9a:fb:96:24:b6:
7d:7a:60:64:07:80:cd:26:f1:7d:eb:e7:c3:d0:ed:
95:ff:c2:c2:f9:29:c1:38:cd:5e:77:49:24:e2:6f:
e2:bd:2a:4c:c2:31:ae:f8:38:67:ff:ea:8f:dd:12:
c5:c5:69:8e:96:19:83:9f:d2:56:62:ee:f9:78:39:
21:37:7c:22:83:20:9f:31:8b:1c:9a:13:9a:46:28:
7b:da:1f:95:a6:48:fa:8a:db:4f:a7:68:66:1d:32:
22:8e:ba:13:55:0c:37:7d:0f:cb:b6:b1:6a:38:1a:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:4D:31:E2:51:B9:6E:2D:04:7E:9F:B5:F7:A1:A7:28:0D:EE:A5
X509v3 Authority Key Identifier:
keyid:0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/d9680b8583256dfc0e8dc6d8bdf6afa2cffab424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
97:08:d3:a4:87:c2:96:4a:8c:d7:52:cb:8e:0d:71:7f:63:fa:
c7:10:84:f7:d2:e6:af:15:94:7c:70:e3:52:1d:27:72:39:1d:
4e:bb:31:d3:a5:98:95:a8:06:1e:60:87:25:3f:b1:56:59:cf:
0a:bb:a0:6c:50:2b:e9:10:56:2d:12:11:c4:7d:28:3a:b7:f2:
be:eb:19:15:c6:22:b8:18:59:b3:e3:a4:fb:cd:a8:6b:69:de:
e1:a3:86:fc:f9:ad:10:53:cf:9f:b5:bc:57:79:06:7e:8b:ee:
23:0b:a1:30:02:44:9a:eb:86:39:5a:db:a7:9f:d0:c6:be:cc:
24:68:29:61:b0:02:d6:df:4d:4a:96:3b:01:cc:40:65:b7:a5:
fa:80:11:e1:b7:0e:4a:f8:ae:36:d7:e4:ed:ca:98:3b:d2:ea:
72:50:45:c3:3d:a6:d0:ec:42:b2:3a:cd:72:73:43:49:af:2f:
8d:fc:6b:d8:21:72:8a:13:c7:f5:40:e8:2f:18:de:e3:65:79:
1b:52:76:a6:8b:ff:78:a9:21:41:22:e0:80:5b:df:54:da:ac:
fe:82:73:0e:dc:1d:95:19:98:9d:59:d5:e9:63:07:6a:80:c0:
ce:e5:a6:b0:1f:98:d3:00:50:01:9d:6d:2b:e6:27:5b:1a:e6:
e9:a2:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 19:38:36 2024 by rpki-client on console-ams.rpki-client.org