Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/43bef25859c8da0992e6455a6278635a01994562.roa
File: 43bef25859c8da0992e6455a6278635a01994562.roa (raw, json)
Hash identifier: mmyt3KOStmBEAzjsM0HCkzbuZpEz/3SWQ3CMahMEICY=
Subject key identifier: 9E:9E:19:4F:8C:A9:77:2B:D7:68:4B:19:07:F0:A9:E0:2A:92:BD:F2
Certificate issuer: /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial: 0DF6D1
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/43bef25859c8da0992e6455a6278635a01994562.roa
Signing time: Wed 24 Mar 2021 14:39:13 +0000
ROA not before: Wed 24 Mar 2021 14:39:12 +0000
ROA not after: Tue 24 Mar 2026 14:39:12 +0000
asID: 264668
IP address blocks: 128.201.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915153 (0xdf6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
Validity
Not Before: Mar 24 14:39:12 2021 GMT
Not After : Mar 24 14:39:12 2026 GMT
Subject: CN=43bef25859c8da0992e6455a6278635a01994562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:71:6e:e6:57:59:fa:79:fe:2d:d0:72:69:
57:cd:a4:f5:2d:35:3f:94:c9:e3:47:48:e6:22:0c:
fa:1e:15:4a:30:f3:8e:ff:4b:84:d8:bb:64:a6:4d:
4a:fc:38:d9:b1:bf:21:c4:1e:ad:25:1c:b6:c8:65:
d9:44:bd:71:07:de:e7:30:36:69:42:40:99:da:66:
95:64:d2:08:56:c5:43:50:02:9c:e4:0b:37:e5:90:
4a:d9:44:40:38:c0:a6:19:99:f1:cc:24:ca:b0:0f:
e9:e7:77:8f:d2:8f:9f:3b:94:b4:2c:05:92:0a:32:
25:e8:aa:87:9d:c7:bc:37:e1:13:bc:95:53:83:e1:
60:54:91:1b:98:28:7d:bc:11:d2:1e:5f:14:18:4e:
1b:e1:4a:16:a0:87:70:ae:b1:c1:2f:2a:02:1c:5c:
54:de:49:9c:33:bf:33:0f:1c:27:05:84:92:b4:45:
d3:ff:8b:78:23:47:77:53:81:29:a4:22:82:11:fb:
1c:86:49:c4:a1:95:e3:f0:70:ec:8a:02:1d:85:c2:
42:c8:45:37:76:0a:f1:2d:f0:22:e8:87:39:50:22:
62:c2:f5:47:fa:d8:82:6d:ad:b3:31:48:d1:bc:7e:
34:39:fd:12:d9:54:00:44:86:57:b8:7a:4d:00:b7:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9E:19:4F:8C:A9:77:2B:D7:68:4B:19:07:F0:A9:E0:2A:92:BD:F2
X509v3 Authority Key Identifier:
keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/43bef25859c8da0992e6455a6278635a01994562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.163.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0b:9e:e9:c8:9c:6f:0b:dc:e1:50:97:99:2e:f1:10:58:3e:
be:43:ad:e7:b3:0e:ea:30:a4:34:f8:44:8e:90:6e:8f:82:0b:
d8:5a:9a:74:bc:57:ce:fb:d7:4d:cd:6a:da:aa:ff:04:3e:19:
d4:ca:a7:38:7c:75:14:6d:ee:29:e9:cb:99:6e:61:91:a6:62:
83:c8:b9:76:20:c6:cb:79:9b:9e:1b:a4:8c:5a:3e:6d:06:5e:
d7:bb:73:a8:14:06:3a:c6:9e:86:f3:20:92:23:27:3c:ef:48:
8f:2c:c4:35:7a:1a:14:46:e8:7c:13:8a:b1:9b:91:fe:4b:5e:
86:94:2e:a6:c8:bc:5e:42:d8:20:ef:3a:c8:5c:d3:c7:89:b9:
55:0f:62:c8:29:2c:dd:79:23:af:e5:fb:dd:07:40:cd:ac:1e:
e7:a7:d0:eb:df:a7:d2:e4:45:1b:2f:69:45:b9:57:c2:fd:02:
c5:17:05:04:ef:80:48:76:bf:1a:ee:ac:e9:f8:df:47:db:9b:
eb:f9:94:ae:fa:bd:d9:98:74:e6:9c:7f:2c:5e:67:c9:4b:ef:
59:5d:fd:1c:30:31:e0:be:8e:34:c9:2e:96:58:8b:54:0c:4d:
65:1f:dd:72:07:22:6c:65:c6:5a:b2:5f:f9:d2:64:93:ab:15:
ba:45:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:12 2024 by rpki-client on console-ams.rpki-client.org