Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa
File: 0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa (raw, json)
Hash identifier: mcS+aihAT2KuWHt438Gx79fLLjq7tQbDFDEMo80pxMw=
Subject key identifier: 20:C9:5B:2D:02:43:B4:75:BD:2C:1B:FF:38:66:00:BA:7F:CF:3D:61
Certificate issuer: /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial: 22B281
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa
Signing time: Wed 05 Jul 2023 01:48:55 +0000
ROA not before: Tue 04 Jul 2023 01:48:54 +0000
ROA not after: Sat 05 Jul 2025 01:48:54 +0000
asID: 52468
IP address blocks: 128.201.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273921 (0x22b281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
Validity
Not Before: Jul 4 01:48:54 2023 GMT
Not After : Jul 5 01:48:54 2025 GMT
Subject: CN=0083c35bc1b31d1d14f62a037383e4b1a88ca9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:46:76:53:3f:8e:c6:60:bd:07:7c:0d:0e:
3f:db:9b:b6:99:5f:1e:04:fe:66:35:ef:18:c1:b7:
bf:02:02:11:b5:85:ee:c1:22:5b:e6:57:98:37:fe:
65:e1:51:38:c7:5f:c0:df:eb:55:45:0d:87:13:e6:
47:a4:ad:e0:28:61:a8:2a:d0:4a:81:08:f8:aa:ec:
4b:53:b6:1c:93:37:80:53:32:8e:8b:39:3e:15:1c:
dc:26:b6:64:85:e5:37:3c:06:e7:b2:19:8a:17:93:
ae:54:b1:08:f8:71:3c:0f:04:71:f9:20:bf:98:e4:
0f:89:94:60:9d:dd:50:8e:7c:37:27:c6:9d:5b:b7:
3c:55:19:3e:e6:9c:6a:9a:95:ad:06:d5:6a:ec:9f:
6e:a8:09:57:22:f7:99:34:f7:0e:d3:46:c9:d4:45:
91:cd:3e:24:42:8e:4d:1e:fb:23:20:47:f3:04:45:
2b:03:5e:cf:6a:5b:df:e3:7d:7b:56:bf:f4:11:c3:
c8:30:55:5d:68:99:a1:fe:51:88:28:e8:e5:21:e3:
3e:42:3a:2f:30:5c:11:b3:20:5e:35:59:2c:31:f9:
9b:1a:20:23:f5:d4:df:d6:32:77:fe:44:55:90:d3:
3a:b4:d8:bf:25:5e:1f:dc:b2:85:4a:46:af:04:67:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:5B:2D:02:43:B4:75:BD:2C:1B:FF:38:66:00:BA:7F:CF:3D:61
X509v3 Authority Key Identifier:
keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/0083c35bc1b31d1d14f62a037383e4b1a88ca9b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:98:27:26:af:36:32:b9:a5:91:91:67:ec:fb:32:c1:ca:79:
c4:41:46:70:5f:27:bc:b6:53:a2:15:1c:2a:f7:02:74:c1:0f:
56:d0:3c:69:0e:77:5c:ba:05:d3:92:fc:0d:f4:79:23:b9:22:
cd:15:8c:5a:2c:d4:d5:3e:3c:09:8a:f1:19:a7:e5:37:af:6c:
b3:fc:47:32:bd:d8:fd:fe:3c:5d:aa:30:54:cd:4d:73:6f:9e:
9d:54:0d:1f:4c:a0:af:8e:c7:39:3b:df:1f:0f:9c:da:c0:2e:
39:aa:f7:92:46:cb:81:e4:49:1d:ed:44:cc:ce:43:c5:83:d4:
1b:f5:23:67:8d:ce:49:3b:11:a2:87:55:c6:58:8f:6a:df:fb:
a5:2a:d3:5f:ea:63:b8:9e:22:88:b2:ba:ed:64:e5:ab:20:69:
ae:a7:cc:dc:2d:2f:39:93:fe:cc:96:dd:f8:93:38:d4:3d:02:
14:e3:2f:f9:71:ec:13:b7:9e:b8:d3:2c:5d:82:f0:17:54:53:
f3:8d:c9:89:ff:50:2f:30:5e:a5:5e:81:2c:7e:80:2b:45:e6:
97:4f:cb:b9:e7:67:65:d3:65:92:f4:59:d2:69:48:d1:07:e0:
a4:d5:8e:5e:a1:95:64:c5:62:96:1a:f6:58:bd:e6:8c:0e:3c:
1c:67:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:12 2024 by rpki-client on console-ams.rpki-client.org