Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/bac9ac402c3b02fc7bc991ee6e66849c46dc2a78.roa
File: bac9ac402c3b02fc7bc991ee6e66849c46dc2a78.roa (raw, json)
Hash identifier: f+K6UduSPryaDdDJJI0vaSEDtmkUP0lQTOYfvj5Orks=
Subject key identifier: 26:DD:78:E0:53:07:3C:A2:49:4F:6D:18:F0:F5:C7:1C:18:EE:4B:8C
Certificate issuer: /CN=25d19738e269ec170203b5c4767bdf0fe844b512
Certificate serial: 0C4634
Authority key identifier: 9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/bac9ac402c3b02fc7bc991ee6e66849c46dc2a78.roa
Signing time: Sun 27 Aug 2023 10:05:35 +0000
ROA not before: Sat 26 Aug 2023 10:05:35 +0000
ROA not after: Wed 27 Aug 2025 10:05:35 +0000
asID: 58349
IP address blocks: 181.233.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 22:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804404 (0xc4634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d19738e269ec170203b5c4767bdf0fe844b512
Validity
Not Before: Aug 26 10:05:35 2023 GMT
Not After : Aug 27 10:05:35 2025 GMT
Subject: CN=bac9ac402c3b02fc7bc991ee6e66849c46dc2a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:57:62:67:0c:e3:d8:fe:82:dc:27:e3:da:
57:d7:ba:61:56:55:83:cf:91:0c:10:9e:fe:c9:9f:
5b:9d:89:66:d6:9b:2d:81:20:c1:81:a6:1d:9e:33:
24:ee:b1:2c:ea:c5:a1:b7:b4:22:bb:93:a1:e9:51:
47:4d:6f:b9:6f:db:36:02:32:f8:f0:9d:23:90:21:
13:07:da:72:ac:32:22:b3:e5:29:ad:04:12:92:bc:
95:9a:78:1e:32:bb:99:65:21:b8:63:27:b5:b0:81:
04:7d:68:ad:de:83:66:2a:2f:b5:a7:d3:b9:b8:03:
dd:07:88:40:b0:2f:fa:05:ec:26:9d:0d:f0:b0:fa:
3c:c2:53:3d:50:51:b7:1b:6b:ff:89:e8:75:75:fe:
7b:18:e3:c3:eb:6c:55:9f:18:b4:06:49:0f:ec:db:
0e:71:97:14:81:95:3c:33:87:18:9c:3a:77:e4:bb:
48:6e:8f:b6:34:95:c9:28:f6:1d:7a:5c:f7:06:21:
a3:7a:fb:4c:88:d3:a8:55:15:e2:64:e1:2e:d7:c4:
de:c0:53:b1:0c:00:7c:da:ae:3b:c4:62:35:4c:b3:
1a:f4:fb:5a:30:09:c9:c8:e6:86:d5:83:ab:bc:0f:
f8:cb:24:00:df:31:ad:a6:f7:d3:71:cf:60:ac:24:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:78:E0:53:07:3C:A2:49:4F:6D:18:F0:F5:C7:1C:18:EE:4B:8C
X509v3 Authority Key Identifier:
keyid:9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/bac9ac402c3b02fc7bc991ee6e66849c46dc2a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
56:3b:45:44:c0:e5:3f:eb:cf:58:25:fc:1c:3c:e0:3c:46:8c:
fa:00:09:a8:2c:55:8b:4f:2f:32:9b:76:b8:5a:aa:89:88:59:
89:76:41:05:2a:d8:f1:c9:2d:a6:d8:ab:59:9e:f8:9d:18:9a:
26:9a:00:58:ef:8f:05:09:8d:4c:05:e4:61:8a:25:15:20:8a:
87:fe:3a:d3:08:c0:9e:b7:d0:bf:cd:0c:26:cb:5e:8b:26:5c:
17:d1:91:ec:a1:1c:a6:e7:79:da:df:42:38:62:70:00:b5:3e:
d2:be:1f:01:aa:9b:21:44:4c:9f:34:14:23:3f:e8:f4:c2:06:
84:c7:d5:bc:60:89:ec:a3:40:b3:54:f7:12:9a:06:d1:9b:0d:
0e:1e:33:f1:b3:e9:e4:ee:31:bf:f4:06:29:42:9a:56:aa:b7:
61:5a:bd:46:d9:fb:4a:53:03:a8:bf:f1:5e:a3:cb:5c:5d:0e:
6a:9d:c7:14:c9:d0:19:59:b6:50:01:40:2e:da:0c:eb:9b:32:
04:00:46:69:d4:c2:66:dd:68:a6:54:a9:9a:61:fb:a8:d1:1d:
89:5d:cf:59:8e:6f:7f:04:ee:46:38:63:e6:b8:8e:3b:43:09:
e7:22:8c:57:15:ef:90:2a:f8:09:68:11:d6:2f:0a:e9:b9:5e:
0d:2e:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 00:23:06 2024 by rpki-client on console-fra.rpki-client.org