Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a323a3a2f36342d3634203d3e2033383136.roa
File: 323830313a31623a313830313a323a3a2f36342d3634203d3e2033383136.roa (raw, json)
Hash identifier: SVd8ysiZ9AnLPhmLfLDoa2iLNueOOuG++mW8sU4QkOM=
Subject key identifier: C1:61:C7:3C:B6:9E:F5:E5:A3:9E:87:42:A5:CC:2B:97:43:02:DF:23
Certificate issuer: /CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
Certificate serial: 1689F04CB01F29BB246D2528E335644DF40C0F50
Authority key identifier: E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a323a3a2f36342d3634203d3e2033383136.roa
Signing time: Wed 27 Mar 2024 19:20:00 +0000
ROA not before: Wed 27 Mar 2024 19:15:00 +0000
ROA not after: Wed 26 Mar 2025 19:20:00 +0000
asID: 3816
IP address blocks: 2801:1b:1801:2::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 15 Apr 2024 19:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:89:f0:4c:b0:1f:29:bb:24:6d:25:28:e3:35:64:4d:f4:0c:0f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
Validity
Not Before: Mar 27 19:15:00 2024 GMT
Not After : Mar 26 19:20:00 2025 GMT
Subject: CN=C161C73CB69EF5E5A39E8742A5CC2B974302DF23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:b6:2a:a4:e1:fc:2b:af:7d:58:ba:f2:ac:
a1:32:51:a2:b9:f1:99:99:3d:51:b1:41:cb:32:12:
4d:e1:02:20:b6:0c:bf:58:31:68:42:f9:09:99:e6:
98:02:a9:8c:c6:5c:a8:11:b9:a3:0a:bf:c6:2c:94:
ab:64:13:e7:c4:cb:87:63:1c:87:dd:18:d1:f4:42:
e8:d9:2e:c8:bf:22:a4:b1:8d:33:07:20:3d:ef:f2:
54:60:ee:cf:6f:64:da:65:8c:de:f7:c1:92:65:78:
c3:12:77:b0:f6:80:fe:5c:a0:0a:4e:07:c5:8e:d0:
e1:0e:71:c4:e9:33:01:c3:f0:fe:df:99:85:d0:1d:
9a:99:75:79:47:32:6b:a2:e9:db:9d:d3:59:38:03:
6d:a2:2b:7f:85:8f:a4:d3:ae:e5:24:ec:45:40:54:
e2:34:93:18:04:20:06:ed:c2:03:7c:82:00:b5:88:
0f:f6:1f:cd:45:85:02:a9:2c:2c:d7:7d:40:12:f6:
6f:2f:18:e1:e2:9a:cf:5d:58:42:80:7a:03:7e:2b:
2b:70:02:7d:57:74:a4:fb:6b:ee:3a:d9:52:07:02:
54:90:46:9d:2e:4d:81:00:c5:f3:05:d3:cd:ac:70:
b0:5f:c9:17:73:35:fc:05:96:0b:4c:d1:91:34:03:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:C7:3C:B6:9E:F5:E5:A3:9E:87:42:A5:CC:2B:97:43:02:DF:23
X509v3 Authority Key Identifier:
keyid:E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a323a3a2f36342d3634203d3e2033383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:1801:2::/64
Signature Algorithm: sha256WithRSAEncryption
35:86:2d:e5:c5:12:73:f2:cf:43:15:55:67:71:28:ad:83:54:
fd:ec:3b:b2:56:71:bb:1d:d8:c5:3b:5a:7b:a7:30:bb:cd:24:
5c:63:ef:5c:b9:cc:83:6b:1a:ce:56:82:ba:42:df:28:cc:49:
50:d8:1c:a2:7b:15:51:8b:df:9b:5e:9e:48:a2:41:56:f3:fc:
f8:b4:77:44:6a:fe:a8:4c:26:7d:98:a0:ed:67:a4:99:bc:20:
cc:ca:21:15:7a:9c:b7:9a:22:46:65:f4:7d:de:56:16:e0:f1:
66:2e:ff:a3:cf:68:6a:b7:b1:12:0c:a4:bb:4d:83:84:36:41:
a9:d9:66:44:18:ed:b1:48:03:d4:d2:dd:c7:e9:b3:31:88:a9:
c9:8a:d4:95:6b:54:54:d4:59:da:18:41:d4:15:91:11:61:09:
f6:06:a8:fe:bd:e9:7d:47:32:30:5f:80:e8:24:9b:5f:18:dd:
4d:6d:c9:db:38:bb:36:f8:cf:f4:a4:cd:ff:c3:a4:e7:66:78:
ca:d8:6d:3b:c5:a1:8e:6b:29:7d:b3:ef:11:84:cc:d1:fc:ec:
36:2a:ff:c3:96:1e:c9:be:0d:28:25:45:90:e7:56:93:ea:2b:
fe:a1:a3:9d:53:95:59:5d:a9:86:2b:5b:0f:50:92:e3:2e:5f:
d7:d7:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org