Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3332203d3e20323635373737.roa
File: 323830333a346663303a3a2f33322d3332203d3e20323635373737.roa (raw, json)
Hash identifier: 5uuwDu0CGzxRcXIaQEae4ttk3VwiZKx68WlKNgKNDjQ=
Subject key identifier: 0A:4F:27:04:E2:93:D6:1C:8A:C8:14:4D:C1:13:C3:EC:46:BA:B5:A6
Certificate issuer: /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial: 4A273AE220DBA0424FCA47D16309476143ACB103
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3332203d3e20323635373737.roa
Signing time: Tue 05 Mar 2024 17:55:16 +0000
ROA not before: Tue 05 Mar 2024 17:50:16 +0000
ROA not after: Tue 04 Mar 2025 17:55:16 +0000
asID: 265777
IP address blocks: 2803:4fc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 10 Oct 2024 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:27:3a:e2:20:db:a0:42:4f:ca:47:d1:63:09:47:61:43:ac:b1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Validity
Not Before: Mar 5 17:50:16 2024 GMT
Not After : Mar 4 17:55:16 2025 GMT
Subject: CN=0A4F2704E293D61C8AC8144DC113C3EC46BAB5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:ef:48:ce:72:60:c4:05:50:44:22:af:e1:
6f:4e:84:60:ba:2f:36:ff:b9:ee:ae:c7:a4:94:01:
1d:66:db:fb:79:4e:61:15:bf:ab:da:99:5f:22:50:
6c:99:e3:7e:fb:32:a1:cb:de:99:f7:a7:a4:83:6c:
2f:aa:6f:3b:0f:93:bc:08:f3:63:62:72:aa:ae:0f:
5f:23:4f:a9:e2:b2:34:fb:83:4d:ee:cf:3c:78:f4:
1c:4a:c7:c3:84:19:03:02:3d:8b:fb:2f:44:38:b5:
26:6f:30:4a:0b:af:3e:8e:54:54:d3:5b:52:21:b1:
bf:16:41:5e:18:a0:2e:11:35:13:65:1e:85:dd:c4:
58:9d:ab:9d:3e:23:0f:a0:5f:99:e1:ee:0e:94:c5:
00:ac:6c:2e:0c:fe:5e:96:71:ff:a1:65:b1:f4:1d:
d6:d8:f6:f9:76:39:bc:51:57:10:e3:f9:73:f6:4e:
dc:1c:a6:86:fb:57:ad:4f:f3:95:32:4a:6d:9e:ed:
f1:ce:0c:95:33:a8:e1:b2:e4:8d:74:06:58:86:49:
43:6a:7e:7b:cc:20:02:5c:c4:ec:eb:72:68:3a:3b:
45:b2:46:5e:2c:77:b9:7a:21:fd:5e:65:68:85:7e:
c0:98:5e:61:92:f1:10:f2:37:39:78:1b:31:d1:90:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:27:04:E2:93:D6:1C:8A:C8:14:4D:C1:13:C3:EC:46:BA:B5:A6
X509v3 Authority Key Identifier:
keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/323830333a346663303a3a2f33322d3332203d3e20323635373737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
d5:3d:65:53:f8:c6:24:4d:a6:3a:d4:03:e1:de:50:61:61:dd:
e1:c9:92:28:66:07:df:75:58:5a:53:10:0c:de:2c:a9:59:27:
f4:7c:1f:9d:93:2e:fb:84:c2:9a:f8:ae:cd:b4:e7:a5:a5:e7:
87:ba:4b:f3:5b:da:ad:1d:0e:b2:a7:2a:5a:e3:c6:7c:b9:80:
27:4c:7e:93:99:c3:35:e3:64:c0:0f:f7:b9:0c:fe:7d:63:6c:
9e:df:d0:4b:5a:65:85:8d:d6:5f:3f:e4:61:3a:1c:e4:8f:dd:
f2:95:62:b9:5c:32:96:33:fa:2e:d6:58:be:4f:3a:10:96:c7:
6a:fc:55:34:31:03:e1:82:e6:ea:12:d5:9b:f9:73:0e:73:14:
26:29:54:09:4b:98:a4:21:df:34:4d:d8:41:00:4c:8e:15:35:
74:bf:f0:ae:ea:0f:5c:fb:91:3c:b6:3f:c0:11:86:95:d3:90:
f3:89:27:e3:53:f9:92:93:b6:ea:dd:1a:63:1c:27:d7:31:31:
71:82:d2:1d:c1:1f:86:3b:91:8d:c9:3f:31:f8:4b:87:5d:91:
6b:a7:d9:39:a4:46:9d:7c:ab:1c:e6:e7:b6:58:98:f5:35:10:
e0:f9:6e:79:94:3a:e9:61:eb:5b:7e:0c:79:88:7b:97:bc:34:
be:d3:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:21 2024 by rpki-client on console-ams.rpki-client.org