Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa
File: 4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa (raw, json)
Hash identifier: +QqB4GW2vhpi6K9mkplfCIf0xv40x9DacHR/+/9hW9E=
Subject key identifier: 62:F3:EA:7C:33:66:A3:89:D0:00:86:2D:4E:01:97:83:A8:98:D8:40
Certificate issuer: /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial: 12C48D
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa
Signing time: Tue 19 Sep 2023 08:30:01 +0000
ROA not before: Mon 18 Sep 2023 08:30:01 +0000
ROA not after: Wed 17 Sep 2025 08:30:01 +0000
asID: 271956
IP address blocks: 2803:7610:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Mar 2024 18:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1229965 (0x12c48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Validity
Not Before: Sep 18 08:30:01 2023 GMT
Not After : Sep 17 08:30:01 2025 GMT
Subject: CN=4a61cd517ef680e99ef9c6409ef705cd28cca32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:a8:2c:b5:a1:a2:db:fa:6a:f2:1e:01:3f:
77:4c:3a:af:1b:bc:b0:70:f2:52:cd:73:30:84:96:
da:59:37:37:50:3b:99:56:e9:c3:5e:bc:50:4e:55:
e6:55:23:db:0a:28:a7:25:5d:30:74:ba:22:f7:06:
81:c5:e2:48:04:20:f2:9b:03:3d:41:c1:68:99:57:
09:b3:d1:49:fe:5f:d8:3a:f8:b7:33:38:2e:00:4c:
5c:22:97:5b:ae:a2:35:aa:36:4f:0e:75:84:ab:4a:
53:ad:49:ce:5d:36:23:a2:bd:3c:60:5c:1d:09:bb:
73:70:c0:67:c6:89:31:b5:f2:97:13:bb:0a:e3:e7:
34:4a:df:0d:53:d3:0e:36:ee:9a:04:fe:f6:b7:6b:
7a:69:54:c9:a6:92:80:62:3a:d4:1a:a0:be:4f:44:
0e:34:21:bb:a0:05:49:2e:42:dd:80:11:6b:35:b3:
1e:79:1d:b6:0e:23:05:51:79:62:1b:a3:6d:d9:94:
07:41:44:9b:ea:e4:af:f4:df:16:8b:c5:2e:4d:a1:
4d:c8:51:17:05:17:ac:5a:f1:8e:b1:f2:cc:dd:35:
da:e4:6b:9d:a3:4f:f6:42:b9:b9:9b:c6:28:6e:60:
6c:7a:5d:c0:cc:fc:54:4d:46:a5:10:b1:11:5a:a9:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:EA:7C:33:66:A3:89:D0:00:86:2D:4E:01:97:83:A8:98:D8:40
X509v3 Authority Key Identifier:
keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4a61cd517ef680e99ef9c6409ef705cd28cca32d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7610:1::/48
Signature Algorithm: sha256WithRSAEncryption
a0:46:46:92:87:02:c6:fc:7f:0e:3b:e5:e9:ac:94:7b:d3:4f:
dc:c5:f2:10:ec:51:9a:6f:c5:8d:8c:1c:e9:bb:f9:08:d0:72:
54:05:ee:5c:d7:0a:24:9f:8f:c4:35:94:06:6c:66:38:06:84:
3a:f8:fb:a4:3f:59:12:a3:45:e6:c6:40:71:a4:e1:21:65:bc:
ed:87:a6:27:87:e1:07:41:6f:a4:05:01:43:ef:f2:90:6a:18:
b2:2d:a6:cb:b7:76:d1:4f:b1:54:17:a0:63:48:47:c7:ec:2e:
3a:a5:68:8f:bb:d2:52:50:8b:7c:29:31:99:c9:95:ac:35:f7:
ea:c1:d9:99:54:dd:ad:fe:cc:7b:d5:11:05:c4:e0:5a:45:31:
ff:20:ed:7c:34:23:0d:37:b6:c6:20:fe:f2:00:c3:4e:21:04:
cd:83:ee:16:c0:4f:4b:17:40:6f:49:1b:4d:e9:ca:a0:5c:81:
78:41:34:af:ef:93:e3:25:4a:9b:df:3d:d5:50:5a:89:6e:dd:
56:8e:64:9b:43:0c:3c:fb:39:f2:53:f0:03:01:78:10:cf:13:
9d:b2:ed:44:26:ea:09:7e:84:f3:5b:77:21:69:6d:82:0d:f9:
7b:fb:9e:76:a3:fc:2d:1e:a6:64:c6:78:7a:5d:02:e6:c7:02:
15:87:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 20:57:55 2024 by rpki-client on console-fra.rpki-client.org