Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/556468f0e649f0d724e2e6ca2cf84abec160acb1.roa
File: 556468f0e649f0d724e2e6ca2cf84abec160acb1.roa (raw, json)
Hash identifier: QOIxmZcFRzvSbAwRLRgXtyXt4or+ypIm0c3WDmKuzQk=
Subject key identifier: 04:0A:5D:D3:76:ED:80:A6:63:72:F4:15:76:3C:21:DC:EF:97:EF:C6
Certificate issuer: /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial: 079B46
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/556468f0e649f0d724e2e6ca2cf84abec160acb1.roa
Signing time: Wed 14 Feb 2024 23:25:44 +0000
ROA not before: Wed 14 Feb 2024 23:25:44 +0000
ROA not after: Sat 14 Feb 2026 23:25:44 +0000
asID: 55081
IP address blocks: 168.243.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 00:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498502 (0x79b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Validity
Not Before: Feb 14 23:25:44 2024 GMT
Not After : Feb 14 23:25:44 2026 GMT
Subject: CN=556468f0e649f0d724e2e6ca2cf84abec160acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:16:60:b7:fc:f4:a0:d3:04:91:45:31:76:
05:21:ef:0c:b9:34:55:6e:93:8b:2a:df:83:6b:91:
c2:5d:a6:b1:fb:45:66:3b:d2:01:11:e0:42:41:69:
26:8d:2a:45:cf:ec:2c:0e:9c:4a:d0:fc:b7:94:30:
f4:7e:3e:17:a5:eb:75:35:72:d2:76:e1:bf:27:d0:
05:50:7a:13:2d:7d:62:80:4f:f1:46:86:d3:a2:05:
da:e5:f5:c1:03:68:fe:0c:2b:49:31:ca:17:3d:3c:
87:fa:18:a7:99:60:30:7c:e1:b5:42:93:53:ed:dd:
78:f3:d4:c5:09:82:c9:41:d3:3c:37:c0:9b:87:6a:
3f:16:9b:ae:18:00:d6:e1:50:d5:bc:8a:f7:1b:a9:
33:f6:2c:47:5a:01:f8:36:d4:f5:0d:b5:64:ed:38:
c0:d0:72:ea:ec:fc:5d:94:53:37:74:d0:8e:3b:7a:
d6:92:63:94:b4:43:6f:83:fe:c7:7d:13:8e:f1:01:
b4:f9:fb:4c:69:4d:0d:9c:79:9d:36:43:bf:84:41:
3d:78:c5:a7:d9:e3:1f:2d:64:db:1a:3d:14:e0:cc:
09:78:5f:62:f4:b2:0b:43:09:78:ff:f4:b5:a6:20:
0f:2d:be:4b:45:cc:87:a2:1f:9f:6e:19:83:08:48:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:5D:D3:76:ED:80:A6:63:72:F4:15:76:3C:21:DC:EF:97:EF:C6
X509v3 Authority Key Identifier:
keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/556468f0e649f0d724e2e6ca2cf84abec160acb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:98:89:7c:75:d3:46:cd:d8:6e:ea:8a:77:75:fa:19:8b:c4:
6e:09:c1:58:2d:41:53:74:62:fb:09:3d:53:14:32:49:87:e5:
50:e9:e2:e1:2c:6b:30:3f:c9:a2:41:51:59:23:74:ea:a4:50:
95:99:ff:40:53:f0:76:9e:6c:71:54:4a:80:ab:2b:2e:fe:38:
fc:05:01:49:a6:2e:8d:d7:ba:4d:84:84:50:6f:97:4d:5b:00:
34:43:eb:c4:02:8a:86:bd:1e:76:bd:54:fd:44:48:af:88:3e:
86:eb:e1:b5:e4:ad:89:06:ad:50:fd:fa:d3:c3:2e:dc:10:56:
1a:0b:6e:78:2b:72:7b:be:1c:f5:09:0f:82:79:b3:1d:11:2b:
d0:48:74:c0:12:f0:07:a2:af:07:0b:c1:38:a2:6e:54:4c:7e:
3a:a9:cb:78:d6:d0:50:55:e5:21:69:61:fe:7f:25:e1:42:2e:
8c:b0:b3:3d:7d:4b:11:b6:87:04:ac:2c:04:3b:a9:7b:a6:01:
47:ff:30:07:6e:54:53:07:73:93:8e:49:97:b2:54:f3:41:e4:
6f:22:d1:eb:52:45:66:bf:fd:b8:3c:2f:d2:0f:be:96:31:d7:
ab:a5:0c:b3:a3:49:e5:a5:ea:92:fc:72:40:40:03:58:8a:03:
1e:35:6d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 01:25:43 2024 by rpki-client on console-fra.rpki-client.org