Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa
File: d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa (raw, json)
Hash identifier: pa06+USpCEg+p0w5McwJ5kforuBDhZCSbvbMkiE9syg=
Subject key identifier: 77:17:21:FE:B9:F9:C5:48:72:9E:F7:9D:E5:6E:72:07:EF:9F:05:E1
Certificate issuer: /CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
Certificate serial: 04FE7C
Authority key identifier: 5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa
Signing time: Fri 04 Aug 2023 16:02:41 +0000
ROA not before: Thu 03 Aug 2023 16:02:40 +0000
ROA not after: Mon 04 Aug 2025 16:02:40 +0000
asID: 272854
IP address blocks: 2803:c290:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 18 Mar 2024 19:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327292 (0x4fe7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
Validity
Not Before: Aug 3 16:02:40 2023 GMT
Not After : Aug 4 16:02:40 2025 GMT
Subject: CN=d52bbc67cea597140a12fbf7812f6dd8f8968ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:3e:5d:fe:39:1f:76:e2:29:9f:09:c1:ef:
1e:1e:27:57:77:0e:66:e0:c0:73:a4:de:10:54:84:
fc:25:62:ce:a4:99:c2:36:f5:c6:8c:2b:b5:fd:a2:
41:f7:6e:96:7e:13:2a:2f:3f:8b:66:67:2e:f2:b4:
e5:bb:cd:87:52:a8:9d:c8:a8:36:60:87:de:21:43:
75:13:ec:8d:d7:81:8e:95:48:70:01:d7:f3:a5:96:
d5:de:be:ed:93:60:fd:a0:eb:33:8f:8d:18:76:04:
c4:60:c1:d3:4e:7c:fa:c6:e0:4c:21:44:49:d4:49:
42:71:3b:a9:46:11:6a:f3:6d:64:cb:a9:b6:d6:48:
14:67:f7:bf:20:f4:1e:c3:f0:5a:c7:69:53:5e:74:
8a:56:57:63:12:c1:fd:65:1a:d5:3e:75:f5:60:d6:
40:b3:01:90:c6:98:11:b6:cd:1a:79:5f:e0:ef:68:
a7:2c:31:e9:f2:04:40:dc:71:ad:26:8d:3c:d8:c0:
e4:5a:52:19:d6:a3:70:b9:53:58:f3:6c:22:08:77:
65:63:7a:24:19:05:b4:2f:75:73:34:7d:8d:d5:37:
5b:91:6c:b6:22:12:31:c7:5c:36:12:f1:c1:3b:21:
47:0b:1f:f6:38:c0:e6:65:59:61:b2:48:39:af:fd:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:21:FE:B9:F9:C5:48:72:9E:F7:9D:E5:6E:72:07:EF:9F:05:E1
X509v3 Authority Key Identifier:
keyid:5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/d52bbc67cea597140a12fbf7812f6dd8f8968ada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:c290:100::/40
Signature Algorithm: sha256WithRSAEncryption
70:ba:ce:5e:7b:f4:45:9d:74:fe:f6:93:fe:94:39:cd:4e:47:
16:06:46:81:f6:6a:80:bf:26:a9:d5:97:e1:f6:f2:23:8f:21:
9f:a7:38:b8:f4:13:f7:d7:fc:cf:d2:a2:7b:fd:42:18:87:99:
41:2a:62:86:1e:c6:b6:09:9e:7c:e9:ea:54:a1:4d:9b:4e:d3:
3e:fd:b8:57:12:45:34:43:53:b0:24:e2:da:ea:39:2b:80:99:
11:d8:1a:dc:40:25:27:47:43:6a:f4:9a:28:ed:c8:5a:4a:6b:
c6:60:da:2c:74:38:c3:35:25:62:69:98:17:df:93:dd:fa:f2:
95:41:ff:fe:1a:23:d1:1e:e3:24:8b:e9:8b:af:65:f4:2c:5f:
23:b1:61:27:3d:10:1c:28:c2:37:32:b1:05:a1:f1:9a:fe:23:
1f:17:45:f3:0f:aa:af:e7:e7:16:16:79:c4:eb:81:60:28:80:
e6:8c:e7:bd:48:c5:ed:92:fb:0b:da:26:dd:b2:09:4c:3f:2d:
71:f2:9d:8a:5b:d4:2f:46:07:9d:70:77:58:86:04:f1:82:a6:
da:3a:33:34:dd:e2:0d:6b:4a:c4:52:11:2d:4b:d9:ec:5a:ff:
69:e8:88:40:43:24:d6:15:3b:1d:3c:d8:ee:a6:cf:08:02:e4:
2e:6e:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 22:01:00 2024 by rpki-client on console-fra.rpki-client.org