Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa
File: 3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa (raw, json)
Hash identifier: vsu0fA7UarzRfsCIbO6iG767EtlI9Jt3dMLVLZjXeQ8=
Subject key identifier: 96:ED:7F:F0:4B:22:AC:B2:16:2E:9C:9D:5B:39:43:6F:A4:C8:EA:90
Certificate issuer: /CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
Certificate serial: 32AC6EC08E8F82364B15880281E7CA4631B6E9CE
Authority key identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa
Signing time: Tue 20 Aug 2024 21:45:00 +0000
ROA not before: Tue 20 Aug 2024 21:40:00 +0000
ROA not after: Tue 19 Aug 2025 21:45:00 +0000
asID: 270086
IP address blocks: 177.128.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 16:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ac:6e:c0:8e:8f:82:36:4b:15:88:02:81:e7:ca:46:31:b6:e9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
Validity
Not Before: Aug 20 21:40:00 2024 GMT
Not After : Aug 19 21:45:00 2025 GMT
Subject: CN=96ED7FF04B22ACB2162E9C9D5B39436FA4C8EA90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:8b:18:aa:53:9b:d6:3d:ac:27:37:ac:be:
c0:4e:bc:6a:2e:d0:16:c8:be:c2:73:f4:f1:12:1e:
30:4f:25:d1:ca:a9:8e:05:9b:a5:e8:dc:40:e0:c6:
9e:db:3f:33:be:63:5b:4b:62:70:90:f2:c1:9c:f2:
8c:7c:a0:b9:a5:a6:82:f2:7e:99:16:57:85:96:8d:
29:ab:1c:c2:c5:13:5c:13:a1:dc:21:51:7a:29:7d:
1a:5a:93:46:62:73:c0:59:86:2a:98:ef:1d:ab:6a:
47:7e:e5:33:23:31:f5:9e:a6:f0:f3:d3:8f:4b:42:
a7:a0:a7:31:6f:fa:d2:53:ef:cd:06:71:b6:ae:a7:
ed:cf:e8:fc:77:44:77:da:cc:27:0d:45:39:dd:b9:
5f:da:d2:d8:30:dd:f5:42:cc:ce:aa:5a:60:71:52:
ef:13:c7:c5:a4:33:d1:81:ec:b3:54:d5:ce:df:f6:
09:f8:5e:95:3d:5d:5e:05:1d:bc:09:32:f1:e5:b1:
72:5f:ce:1b:42:e5:48:08:c7:24:f4:e9:e0:fd:31:
d4:64:49:ad:42:ec:3f:b0:f5:26:e3:b2:2c:9b:09:
f8:76:a2:f8:8f:05:fa:a7:25:b7:cc:60:49:d7:29:
6f:92:9f:0d:ab:1c:23:92:b1:9d:48:f6:1a:e1:3e:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:ED:7F:F0:4B:22:AC:B2:16:2E:9C:9D:5B:39:43:6F:A4:C8:EA:90
X509v3 Authority Key Identifier:
keyid:10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230322e302f32342d3234203d3e20323730303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.202.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8f:81:9c:ea:71:9d:09:45:08:17:d1:bf:25:00:a1:19:5f:
63:c5:1a:68:e3:16:46:4a:d0:19:9a:81:20:67:04:1b:96:1c:
b0:9d:12:06:d3:90:44:0a:72:54:b3:46:43:0b:06:b2:4c:1a:
02:43:69:fe:31:28:22:84:c4:20:d1:6c:f2:b5:12:61:e7:0c:
62:64:c6:2a:c0:6e:cb:82:70:a4:58:4c:b3:0b:6b:91:be:c2:
5e:2b:30:3a:8c:fe:d9:61:45:ba:29:6b:72:c0:66:14:c1:08:
c8:5a:0f:69:fe:40:2f:72:0c:6e:7a:01:30:f1:0a:80:22:87:
fc:7a:62:07:94:72:e9:cd:64:a0:93:40:a5:1e:f2:69:7f:56:
ae:13:c4:4b:c8:cd:d9:7e:b7:cf:b7:d8:c6:60:2f:5f:6d:b5:
64:84:86:00:ea:4a:c3:1a:66:ec:85:51:e9:0c:22:b2:b9:13:
f0:75:1d:b2:32:1e:54:28:29:e2:42:a9:e9:d3:cd:ef:c7:f1:
26:eb:26:1e:38:1c:27:99:4c:7e:0e:20:06:10:7a:b8:85:90:
37:09:bc:7a:9a:02:0e:21:a3:d9:14:ef:9a:5e:34:1c:f7:d0:
f5:19:67:e0:c2:10:79:82:f5:a1:7a:e5:12:8f:db:d9:29:22:
3c:c7:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 17:52:53 2024 by rpki-client on console-fra.rpki-client.org