Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/a298830bc4dfbf3e8cceaa4bea5c34bb5336554e.roa
File: a298830bc4dfbf3e8cceaa4bea5c34bb5336554e.roa (raw, json)
Hash identifier: lezDd/HobT+NEYV9VOegEgIGlNIOaLYaHDbObk4tvyc=
Subject key identifier: CB:94:D1:7E:E5:D5:4B:EA:C4:4E:55:34:6E:B7:DD:1B:E8:D5:DB:00
Certificate issuer: /CN=0ed37484359538a0379fdd6ff6c7c133f1bdbee3
Certificate serial: 078F6B
Authority key identifier: BB:3C:AB:A2:D0:A9:6B:FC:17:DA:9E:33:33:72:83:38:A6:08:E2:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ed37484359538a0379fdd6ff6c7c133f1bdbee3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/a298830bc4dfbf3e8cceaa4bea5c34bb5336554e.roa
Signing time: Wed 24 Mar 2021 14:41:20 +0000
ROA not before: Wed 24 Mar 2021 14:41:20 +0000
ROA not after: Tue 24 Mar 2026 14:41:20 +0000
asID: 269992
IP address blocks: 179.60.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 14:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495467 (0x78f6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed37484359538a0379fdd6ff6c7c133f1bdbee3
Validity
Not Before: Mar 24 14:41:20 2021 GMT
Not After : Mar 24 14:41:20 2026 GMT
Subject: CN=a298830bc4dfbf3e8cceaa4bea5c34bb5336554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:0c:c5:47:2d:14:0e:0d:f9:8a:2f:46:12:
95:1d:6f:dc:48:2e:19:4f:6b:0b:ed:40:f3:17:ab:
a3:5e:d9:d7:89:a9:5c:d5:37:0c:00:dd:d3:d2:2b:
0e:66:c4:74:e9:5f:1c:59:02:a4:c4:7a:d6:ef:d5:
de:9c:b6:11:f2:5d:9d:d6:01:a8:82:52:b7:20:f1:
f5:3b:74:64:fa:6f:e0:b0:4f:0b:9c:cf:f6:0c:54:
04:11:30:fc:f9:3a:c7:48:6c:51:5c:40:46:75:74:
4a:41:1c:dd:71:8f:a3:06:05:ff:37:63:1c:50:29:
d2:78:8c:fb:79:df:cc:34:04:0c:0e:cc:ed:8d:1c:
67:dd:cf:2d:a5:e7:5e:ee:87:ea:ea:cb:60:ba:66:
26:b4:e1:45:a8:c3:5b:74:23:75:80:a7:75:a8:6c:
21:86:ae:1d:cb:38:4f:41:f4:c1:2c:b3:76:e1:d6:
06:02:7e:0b:53:ab:01:f6:04:9b:0f:7a:b8:8f:12:
33:a0:3b:c9:f7:ff:7e:01:11:ac:dd:42:9a:b5:c5:
b8:fd:66:4b:6a:a4:01:23:7b:3c:e0:f5:34:3e:e6:
d4:2d:76:8a:63:9e:ef:4a:66:9d:0b:4a:b2:cd:85:
01:9b:f2:b8:43:53:2c:a3:10:3d:3a:fe:62:60:96:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:D1:7E:E5:D5:4B:EA:C4:4E:55:34:6E:B7:DD:1B:E8:D5:DB:00
X509v3 Authority Key Identifier:
keyid:BB:3C:AB:A2:D0:A9:6B:FC:17:DA:9E:33:33:72:83:38:A6:08:E2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ed37484359538a0379fdd6ff6c7c133f1bdbee3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/a298830bc4dfbf3e8cceaa4bea5c34bb5336554e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/924b526c-e497-4466-9ac5-b833e70a326a/0ed37484359538a0379fdd6ff6c7c133f1bdbee3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:15:61:cf:ee:33:7f:1a:76:19:97:34:6d:9f:ca:d1:66:4e:
e4:6a:8b:f3:53:57:f2:a8:81:15:d4:d2:cb:65:3d:68:0b:d7:
b3:5e:df:bc:a7:16:77:8d:27:20:1b:0a:17:73:98:67:cd:bb:
78:7e:32:71:19:49:5f:6f:8f:9b:ba:ee:ea:02:f4:ac:57:07:
fd:4f:43:f3:e3:0e:56:70:b2:c9:14:6c:bc:6e:d1:e9:4a:18:
80:9f:27:c9:87:ae:c4:c3:44:a1:27:f2:61:37:8e:2a:40:55:
f8:7c:2d:48:95:ca:64:71:cb:4c:5b:b6:7b:aa:29:8b:3d:e9:
a8:05:36:9e:e7:8c:17:82:cb:4e:34:7d:20:30:54:6c:09:3d:
23:41:0d:05:e3:a0:98:fb:27:ce:8f:f4:16:e4:40:6b:2b:c3:
fc:97:a0:c5:84:c5:df:1b:88:31:bd:71:db:a2:57:17:cc:8a:
43:1f:69:db:3b:62:fe:c8:67:bc:ab:9d:67:be:16:08:ae:e2:
fa:a8:b8:60:ea:18:94:a2:c2:17:18:0a:3e:e7:e8:2f:42:10:
7c:f4:a8:ae:f7:85:e1:2f:29:45:53:3f:cc:71:f4:c7:3f:6c:
60:1c:30:a5:b7:eb:3a:d3:61:7c:2d:9e:48:e1:9c:1b:14:fe:
bb:a4:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 17:51:35 2024 by rpki-client on console-ams.rpki-client.org