Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/f96f6c883f32bc3fc55dac3e66a9f53cc479ba9d.roa
File: f96f6c883f32bc3fc55dac3e66a9f53cc479ba9d.roa (raw, json)
Hash identifier: 3+MHocnz1hiegM7XT5wh8E6fzGruOKQDuIrCYQqoBLc=
Subject key identifier: A0:CB:38:5F:58:77:B3:3C:03:DB:59:05:D9:59:F9:94:9F:7E:BE:11
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 2345E1
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/f96f6c883f32bc3fc55dac3e66a9f53cc479ba9d.roa
Signing time: Wed 23 Aug 2023 18:47:27 +0000
ROA not before: Tue 22 Aug 2023 18:47:26 +0000
ROA not after: Sat 23 Aug 2025 18:47:26 +0000
asID: 264806
IP address blocks: 200.31.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2311649 (0x2345e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Aug 22 18:47:26 2023 GMT
Not After : Aug 23 18:47:26 2025 GMT
Subject: CN=f96f6c883f32bc3fc55dac3e66a9f53cc479ba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:4d:ec:0b:e5:aa:73:66:0b:f9:e9:9c:77:
8b:7d:c0:33:59:fe:97:76:b7:39:61:f7:f0:d3:71:
9c:18:ab:5f:98:e5:09:95:dc:5d:00:68:6f:63:eb:
cd:70:e2:ce:e4:10:87:eb:a9:e3:c6:82:f2:d5:62:
e7:5b:ee:28:ba:ff:ab:81:50:58:90:de:5b:92:94:
63:a6:86:04:ea:33:85:2a:ec:e0:82:cf:3e:49:c1:
90:c6:39:b3:9d:76:96:fb:0a:15:72:23:fb:75:90:
4e:3a:ed:e2:53:68:3e:b5:23:b6:95:1a:80:86:84:
17:be:aa:d0:2d:58:a6:f3:53:29:eb:6f:da:bf:21:
74:d8:76:bb:89:b4:0a:b0:e4:90:23:5a:87:c3:4b:
de:3b:16:e4:92:91:f4:be:4a:45:6e:68:3e:ba:8c:
4f:9b:0c:f8:06:c4:fd:13:3a:b3:d8:07:8b:f5:68:
31:68:df:5c:45:cf:b5:ec:33:9a:4e:07:9c:8b:36:
da:71:51:67:3a:aa:1f:44:8d:0d:30:d4:5b:98:e2:
53:d9:1b:6c:5a:d9:94:09:0e:7c:34:24:f7:cc:15:
9a:b4:ce:55:76:dd:46:1e:cb:97:f6:ae:6d:d1:58:
2f:61:94:b3:92:6d:cd:e3:68:66:8e:8a:04:34:62:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CB:38:5F:58:77:B3:3C:03:DB:59:05:D9:59:F9:94:9F:7E:BE:11
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/f96f6c883f32bc3fc55dac3e66a9f53cc479ba9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.46.0/24
Signature Algorithm: sha256WithRSAEncryption
53:79:96:66:1e:28:5f:4b:26:ba:6a:b0:c1:ef:52:a0:2a:4c:
11:8a:10:a3:3d:05:11:c0:5f:0f:68:e6:b6:82:19:46:61:da:
28:83:98:f4:92:f7:5f:56:5d:8d:11:8d:b1:a5:f2:ea:54:16:
ac:2f:05:96:ae:25:69:df:8a:40:18:fb:16:d0:4b:9a:a7:26:
b1:61:6f:b7:1e:09:00:a9:f8:a5:1f:83:ca:4a:35:82:91:63:
5b:52:f2:1e:31:01:a2:f8:e6:50:1d:20:2a:d6:d8:f5:f5:ae:
97:b4:58:dc:5b:46:e0:40:99:54:a5:87:b8:5c:cd:19:82:3c:
ad:89:19:20:e0:44:c3:50:55:c6:8c:97:f4:89:5c:98:c0:58:
b8:62:c5:af:a3:87:b7:85:79:83:a0:7d:ff:7d:7b:77:28:34:
4e:34:ab:cf:3c:e9:a7:90:66:b1:a6:84:79:ac:ca:4d:85:15:
63:7a:f0:52:1d:e6:8d:1a:36:b1:d1:f9:93:9b:81:b5:7d:22:
50:34:3e:8e:78:dc:46:29:a8:f0:11:fb:1c:13:11:68:b3:00:
17:16:e5:fc:94:67:a2:ae:ea:3c:1e:9b:27:a3:ea:83:f9:ca:
41:d9:dd:16:2e:da:15:65:bc:d0:78:8b:a8:a2:7d:a9:fc:d6:
16:2c:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 19:44:56 2024 by rpki-client on console-ams.rpki-client.org