Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/c5a52c006618f95756d4106a3def7fab222b5fca.roa
File: c5a52c006618f95756d4106a3def7fab222b5fca.roa (raw, json)
Hash identifier: hu54L9CuE+rcYw8W899EvxqHxegi1M1feudMo1oL+KQ=
Subject key identifier: A7:24:F1:AB:FA:D6:76:81:07:C4:A3:8B:F9:CB:05:50:1B:16:DA:1B
Certificate issuer: /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial: 0DFE8F
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/c5a52c006618f95756d4106a3def7fab222b5fca.roa
Signing time: Wed 24 Mar 2021 14:39:13 +0000
ROA not before: Wed 24 Mar 2021 14:39:12 +0000
ROA not after: Tue 24 Mar 2026 14:39:12 +0000
asID: 265762
IP address blocks: 128.201.160.0/24 maxlen: 24
128.201.161.0/24 maxlen: 24
128.201.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 00:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917135 (0xdfe8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
Validity
Not Before: Mar 24 14:39:12 2021 GMT
Not After : Mar 24 14:39:12 2026 GMT
Subject: CN=c5a52c006618f95756d4106a3def7fab222b5fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:87:84:85:24:21:0e:88:26:67:09:48:71:
a9:76:3f:42:eb:c7:6e:5d:f0:06:41:eb:02:c4:89:
87:83:95:8d:6c:2d:dc:dc:9b:ac:47:08:2a:aa:55:
b2:5b:a5:78:d9:0d:70:31:3f:46:2b:4e:4d:72:56:
fd:7b:9f:58:b5:88:dd:5e:30:df:be:21:85:d1:6b:
28:cc:72:75:b5:9c:3c:b2:b9:fd:1f:cd:ce:aa:7a:
c5:da:63:6d:c6:0b:da:f9:a3:28:77:d5:b9:e2:50:
3e:f1:d7:7e:9d:f9:92:bb:ef:13:69:e6:12:1d:f4:
1e:49:00:78:1a:75:f1:3d:6d:da:99:16:a2:ba:b6:
21:e6:d6:03:00:b6:40:c5:87:d4:81:8e:d5:f8:a3:
38:f9:6e:bd:e0:b7:bd:80:32:13:fc:3a:69:76:8d:
ba:26:27:8d:4f:19:25:69:a9:65:77:37:40:32:69:
1e:ad:05:73:14:02:71:a7:d5:9d:17:30:20:fb:cb:
a2:be:d1:49:b3:6b:69:b9:b4:3d:64:03:52:1f:d4:
44:0a:e8:c0:28:ff:1e:e5:c2:a2:c4:e0:9a:1c:00:
ad:bc:5a:7e:07:26:99:e2:d3:28:a3:e1:14:59:0b:
81:de:66:23:66:dc:81:2f:88:16:8e:41:e8:ca:c6:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:24:F1:AB:FA:D6:76:81:07:C4:A3:8B:F9:CB:05:50:1B:16:DA:1B
X509v3 Authority Key Identifier:
keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/c5a52c006618f95756d4106a3def7fab222b5fca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.160.0-128.201.162.255
Signature Algorithm: sha256WithRSAEncryption
73:be:d0:68:65:b1:af:c5:7d:a4:0c:60:26:16:75:8b:26:a4:
13:64:0e:5c:fc:0d:4c:31:94:cf:76:01:67:42:35:af:d9:8d:
03:31:22:57:b0:58:39:30:a6:fd:38:10:83:33:c1:6a:86:3a:
22:08:f2:fa:41:60:25:22:5b:70:a3:31:d4:88:ae:ba:3f:eb:
98:a5:7d:ea:9b:58:5c:07:79:bb:6c:c5:4c:1c:9b:17:54:92:
ed:eb:8d:ff:81:d7:9b:c2:6c:80:bc:3c:2d:e3:56:53:0d:b6:
40:91:94:13:8e:63:86:7a:84:d8:73:5b:3b:d6:74:14:9a:89:
b1:85:53:2d:97:56:aa:e3:db:2b:d9:1e:02:b4:6b:b8:ba:84:
78:38:b8:26:ac:1b:7b:fd:b7:7c:39:82:e2:5a:68:08:03:9f:
98:1c:f8:ef:13:2b:a3:5e:94:96:1f:04:19:e1:b1:45:42:b1:
41:af:ad:f6:03:2d:82:59:2e:39:3e:2e:e2:de:88:2d:a1:67:
c6:f5:39:a5:6b:4e:cc:b0:cf:a1:f1:78:4c:d1:60:15:e0:9a:
df:0e:ae:be:e9:fb:36:10:20:bd:a0:e2:48:32:ba:20:fd:09:
b5:37:d9:ba:16:fe:e2:8a:df:81:7d:cf:a6:c1:79:2d:df:e1:
51:31:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:34 2024 by rpki-client on console-fra.rpki-client.org