Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/15cd22674b1d7939c6b8b14817d3b5bff6d5508e.roa
File: 15cd22674b1d7939c6b8b14817d3b5bff6d5508e.roa (raw, json)
Hash identifier: blQwvlev6obVsY6EUaQBerWnx33cz/hldShGq5wpCJo=
Subject key identifier: 45:95:45:00:BD:D3:D5:5D:D1:55:37:18:DF:EA:9B:A3:AF:3C:43:C5
Certificate issuer: /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial: 0D2A48
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/15cd22674b1d7939c6b8b14817d3b5bff6d5508e.roa
Signing time: Wed 24 Mar 2021 14:43:09 +0000
ROA not before: Wed 24 Mar 2021 14:43:08 +0000
ROA not after: Tue 24 Mar 2026 14:43:08 +0000
asID: 32098
IP address blocks: 201.174.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862792 (0xd2a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Validity
Not Before: Mar 24 14:43:08 2021 GMT
Not After : Mar 24 14:43:08 2026 GMT
Subject: CN=15cd22674b1d7939c6b8b14817d3b5bff6d5508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:88:f3:74:60:d9:98:2e:75:64:5c:b2:f9:
c6:09:a8:9f:92:c2:ea:7a:04:fc:af:7b:94:39:84:
40:9b:9f:2a:f6:5e:f6:44:a5:a6:a8:6d:f3:5c:38:
ee:12:46:b9:8c:7e:90:cc:81:ac:7b:67:38:b8:78:
3a:ad:3b:07:ba:ed:4d:51:a0:3e:06:26:0c:11:9d:
49:48:c2:8b:3e:c9:57:16:1f:f2:14:53:7d:2b:6e:
4d:b5:47:c9:d0:87:64:3b:74:e1:32:af:04:3b:42:
5e:c1:04:13:75:0f:52:2a:07:c7:34:0b:fa:8c:28:
e2:35:b5:43:5b:56:73:63:12:a5:0d:8c:96:ee:dd:
7c:80:41:19:33:e0:aa:e9:9f:7e:8a:0a:07:e8:dc:
54:89:d5:33:33:4b:c6:d7:d7:05:9b:ce:9f:f9:0e:
a8:99:67:5f:ed:c7:9e:8f:08:87:a0:6a:54:c8:34:
88:93:a9:3b:dd:7c:b0:f4:96:4a:02:12:8a:e6:6c:
22:5d:1f:a2:e9:93:34:87:4b:45:c0:77:e3:0d:fb:
85:8a:55:08:f4:02:eb:ce:6a:6a:d5:f9:0f:8e:13:
e2:6c:a0:84:ed:11:2b:0b:82:f8:af:c5:20:58:e8:
c4:61:6c:66:02:58:f7:87:e5:5e:ad:75:15:5d:0a:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:95:45:00:BD:D3:D5:5D:D1:55:37:18:DF:EA:9B:A3:AF:3C:43:C5
X509v3 Authority Key Identifier:
keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/15cd22674b1d7939c6b8b14817d3b5bff6d5508e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7b:d7:d1:97:4b:01:27:82:0b:93:f4:9a:a3:16:f4:e5:f1:
19:13:a6:82:3d:bd:67:eb:47:8c:76:6a:66:6f:21:73:1b:14:
0a:31:5b:34:78:0f:53:9e:e1:09:30:0d:f5:bf:7e:11:51:85:
61:c2:52:ed:89:52:c3:0d:76:a3:6d:57:06:49:5c:37:3a:9c:
d5:0b:75:a9:de:07:05:4e:9c:a5:75:fe:fa:38:69:48:6e:8d:
9e:40:eb:60:a2:3c:b9:3e:59:80:11:c4:f5:6d:be:75:dc:e8:
5b:4a:13:49:63:2b:be:2a:b6:52:99:48:27:e7:2a:89:52:f4:
b4:ef:17:be:c7:23:8a:2a:a8:02:2f:b1:a4:0f:45:74:ee:ef:
41:25:7b:21:40:77:a9:26:95:1b:9a:e5:5c:47:a6:12:ad:29:
f8:68:be:09:e9:1b:e2:e1:24:b5:96:8b:f8:6c:cf:2c:44:49:
a0:9b:74:03:f9:83:d7:61:79:f0:bb:da:6f:db:7d:fa:f2:4b:
a6:e6:49:2d:83:07:0a:24:f1:6c:e2:f3:4e:3c:22:dd:1d:82:
ce:2b:cc:c4:1d:35:70:72:d7:3e:3f:6c:ad:60:33:23:d7:fb:
f2:95:a2:a1:ae:49:0e:44:ca:7b:5c:55:ac:45:3b:c7:a1:52:
49:c7:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org