Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/301f930e6f56a2e280435e9c97c70f527d8ebcca.roa
File: 301f930e6f56a2e280435e9c97c70f527d8ebcca.roa (raw, json)
Hash identifier: 9bI5AU2VeT0ay300giwE6anTg2X28db3tTQHxGIlsD4=
Subject key identifier: BB:85:54:5D:B7:53:19:12:BB:47:C9:E9:25:56:38:FB:3A:41:04:BB
Certificate issuer: /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial: 1F4F7C
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/301f930e6f56a2e280435e9c97c70f527d8ebcca.roa
Signing time: Sat 08 Apr 2023 08:30:03 +0000
ROA not before: Fri 07 Apr 2023 08:30:02 +0000
ROA not after: Sun 06 Apr 2025 08:30:02 +0000
asID: 28032
IP address blocks: 2800:650:4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051964 (0x1f4f7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Validity
Not Before: Apr 7 08:30:02 2023 GMT
Not After : Apr 6 08:30:02 2025 GMT
Subject: CN=301f930e6f56a2e280435e9c97c70f527d8ebcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:f5:17:0b:cd:db:de:fd:d9:60:81:dc:79:
53:50:03:d1:29:0f:61:c2:94:1a:e6:f9:fc:7f:df:
4f:81:da:d4:11:f3:b7:d3:f7:91:63:0a:5e:aa:23:
94:42:82:9c:17:85:7c:fc:5e:05:c7:a2:4a:2e:09:
cb:f2:02:73:b3:5e:42:ea:2c:5a:3a:20:4c:61:88:
10:52:fd:b3:a7:0a:67:95:0d:12:25:2a:6d:c1:a9:
f0:d9:cc:81:a4:59:2d:fc:0d:34:38:a2:4f:d1:f5:
95:ff:4d:92:04:77:20:d2:d6:19:b0:e1:c1:6e:14:
ad:e4:1f:c1:e1:b9:54:65:0d:d8:22:59:60:a4:2f:
78:24:6c:08:20:03:a5:f5:51:7d:d9:c9:24:0e:af:
3c:9a:1a:4d:e5:c1:70:b6:c2:46:9d:de:e3:85:c7:
01:a4:5f:91:43:2d:d7:94:70:27:ca:46:dc:5b:c7:
20:1c:28:91:0c:67:75:f9:a7:ce:0c:96:8c:08:77:
84:d5:ed:eb:99:81:00:69:28:27:4c:12:c2:16:d4:
74:3b:de:f7:af:d5:0a:96:e1:0c:16:62:5f:69:5c:
17:55:ac:e2:be:67:94:fe:5b:e0:d0:75:e7:9c:f9:
b6:db:96:e5:b9:c3:4d:09:92:f5:10:79:32:c9:28:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:85:54:5D:B7:53:19:12:BB:47:C9:E9:25:56:38:FB:3A:41:04:BB
X509v3 Authority Key Identifier:
keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/301f930e6f56a2e280435e9c97c70f527d8ebcca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:650:4::/48
Signature Algorithm: sha256WithRSAEncryption
1a:25:51:e1:8a:1e:b2:ae:b7:88:5c:04:d1:60:3e:79:8f:65:
b5:08:05:a9:1b:6d:ea:f4:4d:d8:48:c8:6a:bc:e8:b5:b0:08:
d9:d7:3a:5c:f3:02:7c:0d:8c:70:52:7e:2a:e1:07:84:d0:cf:
c9:57:28:c1:8f:cb:97:07:27:d2:80:ee:50:da:2b:7d:47:62:
50:8f:77:78:75:83:56:f3:9c:ab:85:fa:95:e3:0c:9e:b3:82:
7a:43:b6:12:15:16:f9:81:89:0e:40:3b:41:85:34:90:47:35:
9b:06:01:68:20:51:cb:cf:e8:68:a0:46:9c:5b:6f:45:6f:a1:
48:43:14:f8:46:17:ab:63:94:15:2d:20:f9:7f:39:cd:e3:22:
56:b8:05:fa:86:ad:b1:20:51:bf:d5:68:1f:26:0f:4c:ee:5e:
d3:e6:bb:73:67:b8:e0:18:4e:e1:51:cd:60:c0:b7:2c:a8:2f:
51:47:54:f6:f3:10:48:35:96:da:ae:ec:84:a2:60:0a:d0:d1:
7a:7e:47:81:15:4d:de:2f:6f:00:6a:28:76:cf:2c:22:e6:cc:
2d:96:5a:1c:e1:db:49:7c:11:41:68:1d:6c:61:a7:42:64:ad:
34:b3:d6:31:b6:b3:1f:ee:51:88:ec:4b:6e:47:c6:d5:31:48:
4a:5e:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org