Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203532343638.roa
File: 323830333a6231303a3a2f33382d3338203d3e203532343638.roa (raw, json)
Hash identifier: aCFE4E1GHpIFFZJTzDljQL12aloQkPkb+OXugmRUShI=
Subject key identifier: C2:4C:FE:02:D0:37:AB:16:31:66:73:05:E8:99:FF:35:6D:CE:85:B2
Certificate issuer: /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial: 2CF2F86A9518D9A19D1793EB12A8D9F4E12DF720
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203532343638.roa
Signing time: Thu 15 Aug 2024 16:10:00 +0000
ROA not before: Thu 15 Aug 2024 16:05:00 +0000
ROA not after: Thu 14 Aug 2025 16:10:00 +0000
asID: 52468
IP address blocks: 2803:b10::/38 maxlen: 38
Validation: Failed, certificate revoked on Thu 15 Aug 2024 19:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f2:f8:6a:95:18:d9:a1:9d:17:93:eb:12:a8:d9:f4:e1:2d:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Validity
Not Before: Aug 15 16:05:00 2024 GMT
Not After : Aug 14 16:10:00 2025 GMT
Subject: CN=C24CFE02D037AB1631667305E899FF356DCE85B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:64:05:4a:51:8f:25:ee:8b:07:92:32:1d:
68:3b:7d:21:20:2d:78:06:43:16:5c:a9:ac:08:66:
9e:5e:cc:e6:fd:b7:e9:36:f1:0d:04:d9:0d:84:d1:
98:d9:d2:e4:bd:75:5f:08:e5:13:73:93:d8:7f:e0:
68:f0:55:75:77:9b:3b:3e:7f:b2:5f:ea:5d:40:52:
9e:cd:b5:8b:d5:5f:27:90:19:60:9e:59:b7:d2:ea:
95:8d:fb:e1:e2:3b:a5:81:8b:64:4d:21:0f:e1:2d:
71:55:bd:19:5a:35:a8:81:0d:21:36:a5:24:37:6c:
b1:39:ee:72:6c:1e:1b:7e:93:eb:89:6a:aa:76:52:
38:c0:d1:56:f4:c9:60:a7:c7:f8:3b:00:3c:1b:d9:
f7:ea:dc:73:52:a0:8f:c0:65:4d:5c:de:23:ae:5b:
01:ef:3f:54:a5:0c:c9:27:5a:c6:fe:2c:ab:1f:4c:
f0:38:2f:05:48:04:90:fa:1f:53:b8:b7:d7:84:45:
4e:56:d6:88:e9:23:15:92:1a:cc:83:60:5c:8f:3b:
b9:57:9a:d5:92:11:cd:90:65:e4:64:b4:72:16:11:
d9:c8:65:28:00:cc:c1:c9:29:45:2b:1a:6d:8b:2a:
0c:12:43:84:b5:4a:8d:d5:d3:cc:1a:e6:ed:8b:27:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:FE:02:D0:37:AB:16:31:66:73:05:E8:99:FF:35:6D:CE:85:B2
X509v3 Authority Key Identifier:
keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b10::/38
Signature Algorithm: sha256WithRSAEncryption
7a:78:1b:e8:d8:a1:c8:ae:f0:91:a3:91:50:2e:31:38:29:7e:
74:05:c5:6c:ae:82:a1:e2:8d:8c:49:18:9a:ef:98:d1:ef:b5:
05:13:9c:be:57:b3:1c:9c:23:c1:45:ca:f6:e5:29:d8:5e:c4:
ca:83:5c:af:50:2f:2d:ce:0e:e0:f7:e8:03:24:cf:9b:61:91:
c0:cc:4c:33:e1:90:b1:22:d8:ca:d0:40:b3:d6:60:bd:72:19:
6d:bc:9c:25:83:f8:96:6c:53:5f:a9:44:11:45:7f:fe:0b:76:
80:0e:43:54:ca:c0:0d:9d:ba:b6:14:91:7a:24:c4:54:62:5b:
18:78:b1:78:16:34:9e:18:d5:58:a0:fc:dc:cc:be:9f:ff:71:
f3:26:aa:68:75:00:af:f8:1e:32:03:28:91:96:a1:72:e8:29:
4f:a7:d3:06:96:ce:bb:d2:db:a4:4e:2d:e9:28:a5:4f:0f:48:
2c:ba:97:f8:47:7a:b5:4a:6a:4f:d3:c0:5c:39:f0:d1:b8:5e:
d4:97:1a:9a:f5:7a:5a:39:ac:8c:aa:b7:f4:65:9f:20:18:c2:
54:73:9a:57:5b:d8:a3:b0:1e:42:3a:d9:a1:1a:c9:61:d2:a4:
6d:bd:2a:9f:c2:71:42:a5:88:d5:cd:db:6a:67:ee:44:d9:2a:
51:f4:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:32 2024 by rpki-client on console-fra.rpki-client.org