Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/caec618bde4e03902bc13ed383963574594238b0.roa
File: caec618bde4e03902bc13ed383963574594238b0.roa (raw, json)
Hash identifier: ZNwH9E6lak7hZUOSY+3621w6AT/gdLV0hFJuuDqsYl8=
Subject key identifier: 81:30:58:D3:5A:00:73:63:DF:AE:06:59:D1:D4:E9:88:7E:A3:44:AE
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D9CA5
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/caec618bde4e03902bc13ed383963574594238b0.roa
Signing time: Wed 24 Mar 2021 14:37:06 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 143.202.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892069 (0xd9ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=caec618bde4e03902bc13ed383963574594238b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:76:bb:51:98:a6:3e:4f:4b:e5:69:db:3d:
d1:2d:0f:0d:c1:2f:84:d3:9b:4b:b3:a8:ca:8d:a3:
1a:43:c5:a3:ba:c4:57:2d:d1:83:59:44:83:e2:f3:
d0:20:56:72:3d:60:d2:14:4d:7a:e2:6f:00:f4:cf:
06:b7:d3:e9:66:0e:67:09:b9:cd:57:3e:39:5b:9a:
c8:75:47:91:9e:61:a2:e9:90:f7:3f:40:a6:8b:5b:
19:45:bd:31:6b:1b:5a:af:1a:ef:5e:5c:4a:14:89:
62:dc:83:07:b7:95:f1:31:78:2c:ef:6e:de:1f:76:
6f:e8:90:01:fd:2f:6d:b1:9a:f2:c0:dc:2b:29:be:
55:ba:98:69:cf:18:1a:c0:81:c2:9e:f1:3d:af:35:
d1:86:f2:ee:ca:a7:7b:2a:b0:40:f5:ef:af:f3:90:
14:54:61:0b:34:26:81:24:6b:46:03:8c:d7:5c:b0:
13:55:42:5e:d0:e6:4b:53:40:4b:2f:a6:2a:03:8b:
58:12:77:a7:b0:44:53:6e:c3:c1:04:90:75:f5:05:
bd:1f:88:96:35:88:d4:3e:ba:17:1d:df:b2:72:77:
61:84:6f:a2:e1:f3:16:9f:d6:50:89:22:2e:0a:1f:
0c:e4:65:fd:59:5b:4b:d9:31:f7:ff:fa:01:7f:05:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:58:D3:5A:00:73:63:DF:AE:06:59:D1:D4:E9:88:7E:A3:44:AE
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/caec618bde4e03902bc13ed383963574594238b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d3:c8:07:d2:3f:98:9f:78:de:df:f5:b4:62:a5:d5:30:03:
d9:ce:6a:11:e2:20:f3:b3:b6:c4:e9:c3:ca:ba:8e:59:35:fc:
7c:b4:b9:b8:9d:de:08:33:fe:1a:bc:f6:67:86:7c:55:06:69:
b7:9e:0c:9c:03:28:c9:bd:8e:ee:d6:4c:42:5f:f2:01:22:b6:
fd:61:01:84:87:30:ec:55:84:e4:18:bf:f6:3b:20:62:f4:0d:
41:e0:6b:75:81:f0:0e:44:69:c2:2f:1b:7d:8f:db:5a:1d:fc:
1b:b6:1a:41:33:eb:64:b4:f7:d1:4b:23:d6:8d:32:de:e8:c9:
df:ba:c1:23:a0:9d:f2:03:d6:af:a9:c4:fd:c0:9d:f1:9e:98:
8e:cd:3f:7b:82:65:af:4f:18:a4:4e:bf:7b:ce:c3:d4:94:90:
dd:41:c2:c9:c7:5f:c7:7d:8b:19:fe:e8:20:62:67:f5:48:e3:
c9:38:45:99:e2:0d:f2:36:6e:59:21:97:f5:22:3d:3c:e1:29:
e3:47:cb:f1:fa:4c:3a:26:e1:01:53:d4:d7:eb:8a:ad:80:de:
6c:5a:90:bc:eb:e7:45:f1:45:9d:a7:72:34:75:53:0a:ca:84:
87:81:5c:8e:45:6c:01:27:65:2b:df:3d:4c:c9:ac:4a:86:b8:
84:12:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:18:15 2023 by rpki-client on console-fra.rpki-client.org