Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/a883de6b9b0913bc2267102a5b79cdd696ed32b8.roa
File: a883de6b9b0913bc2267102a5b79cdd696ed32b8.roa (raw, json)
Hash identifier: boD7sxTKj3QHIF42/yHS91g1L8GGBvU9xo+Cls+Nybk=
Subject key identifier: 31:13:48:FA:72:54:D1:E8:FF:B5:4F:AA:97:24:58:46:53:D5:6F:10
Certificate issuer: /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial: 0D6297
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/a883de6b9b0913bc2267102a5b79cdd696ed32b8.roa
Signing time: Sat 01 Jan 2022 17:48:17 +0000
ROA not before: Sat 01 Jan 2022 03:00:00 +0000
ROA not after: Sun 01 Jan 2023 03:00:00 +0000
asID: 269862
IP address blocks: 2803:b0e0:9984::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877207 (0xd6297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Validity
Not Before: Jan 1 03:00:00 2022 GMT
Not After : Jan 1 03:00:00 2023 GMT
Subject: CN=a883de6b9b0913bc2267102a5b79cdd696ed32b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:c2:4d:74:18:5e:76:b4:1b:6d:c4:0a:9b:
8b:83:33:17:8f:2d:41:19:91:98:7d:03:12:0b:99:
db:86:5f:f2:b1:88:e5:ce:e2:78:6c:0a:41:63:d7:
42:d5:6a:9d:a7:ca:80:ce:88:0e:21:97:eb:d9:8e:
4c:7f:29:01:72:70:71:be:c6:64:9a:99:02:38:56:
81:d1:95:b9:f0:a1:39:b9:e0:0c:cf:15:eb:72:ce:
73:bf:36:9b:89:60:83:33:49:9f:f0:74:24:62:eb:
84:90:96:b0:65:83:57:21:8e:e8:d2:04:81:51:d2:
b8:81:5d:5b:e3:77:70:a4:00:64:17:51:5c:05:62:
2d:e7:f1:59:59:f2:ec:49:00:f1:fd:68:28:9a:4b:
5c:46:66:1e:cc:4f:29:f9:9d:55:68:d5:fb:d1:fe:
fb:6d:98:0e:3a:a7:fc:b5:ee:26:6f:d2:e8:c3:24:
b9:91:d4:09:11:62:0a:ac:0e:1a:5d:de:ef:08:a6:
5d:e8:82:33:8d:0f:b4:51:5c:bb:e5:dc:3f:2a:58:
a4:5c:e7:59:ee:a2:31:85:15:a3:36:ad:7f:a8:77:
66:34:47:5e:a2:bf:a6:d9:f7:eb:b9:9e:d2:6f:2f:
9f:e0:db:00:58:d8:6d:1d:85:cb:a7:47:4d:90:77:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:13:48:FA:72:54:D1:E8:FF:B5:4F:AA:97:24:58:46:53:D5:6F:10
X509v3 Authority Key Identifier:
keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/a883de6b9b0913bc2267102a5b79cdd696ed32b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b0e0:9984::/48
Signature Algorithm: sha256WithRSAEncryption
6f:e7:11:e2:ca:22:96:bd:28:68:0c:c2:60:9c:d6:25:09:07:
f8:16:96:3d:67:d2:85:19:6c:26:ee:48:a8:1e:f8:16:25:79:
ca:dc:7d:1d:15:62:a8:ca:15:92:18:31:ba:6e:66:32:fc:b0:
9c:38:a7:8e:80:ba:94:1e:fc:42:d0:41:c9:38:0c:48:0b:6d:
4d:27:2f:19:77:52:7b:9f:a2:25:d4:8a:e0:af:67:80:63:d4:
6e:73:4e:f6:1b:7d:52:e7:6b:eb:cd:c4:c7:64:38:cc:b6:5d:
8f:a6:02:34:c7:ea:48:f8:f3:9f:c4:26:3c:b6:80:5c:27:3b:
0e:c0:48:ac:5b:57:94:9a:01:a7:45:65:23:f4:08:f0:23:b4:
f7:6a:79:92:08:07:9b:8f:c8:f4:d5:67:50:5c:81:ee:11:59:
92:bd:5d:77:d0:94:39:de:bf:8b:3f:0b:49:c8:45:4c:23:d8:
8a:b2:a8:70:32:16:bb:d3:c9:9b:b1:fe:d3:9c:d6:f7:d5:61:
8a:96:6e:61:5f:bc:29:18:e2:67:ee:0f:ac:fd:3c:65:f7:5c:
35:ae:de:de:f0:97:4c:f2:56:15:b3:f0:61:4d:14:a1:28:33:
91:4f:f7:a4:3b:ff:99:df:22:fe:30:4a:38:72:b1:1f:df:f7:
50:f8:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org