Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/04963b3e297c475c527a316ae2d3ea5fc9652f2b.roa
File: 04963b3e297c475c527a316ae2d3ea5fc9652f2b.roa (raw, json)
Hash identifier: iVJR5tV4uMIVOkTem9kBU4pyYcVh1fhEzbsgILym67Q=
Subject key identifier: 2F:84:D0:18:71:DA:98:6C:8E:4F:AC:85:9F:F6:FD:C8:2E:C4:AB:27
Certificate issuer: /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial: 0EB39C
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/04963b3e297c475c527a316ae2d3ea5fc9652f2b.roa
Signing time: Wed 24 Mar 2021 14:29:30 +0000
ROA not before: Wed 24 Mar 2021 14:29:26 +0000
ROA not after: Tue 24 Mar 2026 14:29:26 +0000
asID: 52323
IP address blocks: 181.16.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963484 (0xeb39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Validity
Not Before: Mar 24 14:29:26 2021 GMT
Not After : Mar 24 14:29:26 2026 GMT
Subject: CN=04963b3e297c475c527a316ae2d3ea5fc9652f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:e2:56:23:07:45:e7:cf:86:f8:51:2b:fc:
cb:1c:18:01:af:77:a0:d9:5f:c8:a2:bc:ed:5c:17:
b0:21:dc:23:e4:0d:2c:8c:0f:0c:4f:72:d6:6a:f5:
10:d0:12:8c:c4:1d:55:ab:3c:d8:6a:12:f6:86:c0:
af:1a:eb:cb:d0:f7:8d:5f:ec:69:28:d9:f4:32:03:
1c:e7:a7:bb:cb:81:bd:aa:48:76:bc:e3:82:ad:d1:
69:10:80:6d:6e:6a:91:2f:9e:f9:41:7a:bc:d9:39:
ae:09:04:92:40:4c:b3:8b:05:e7:d0:a1:ef:41:64:
a5:de:aa:43:6d:f7:50:57:eb:f0:da:91:93:f1:81:
17:db:67:08:ba:f0:c9:3d:6a:4f:a5:93:1e:a1:ba:
9f:cb:97:4d:af:ac:b4:4a:fc:44:ca:63:35:fc:87:
fc:e0:74:bf:73:67:5b:e5:38:fd:c4:4c:58:49:eb:
68:f4:8a:97:18:4e:1d:f6:51:78:f9:ca:44:be:1c:
9a:19:b4:ab:7f:c3:10:a0:3b:1b:b3:45:51:42:de:
68:f4:0c:5d:78:59:b7:34:e0:70:68:6f:87:49:b1:
22:3e:93:e3:64:3c:60:a5:e4:0f:1b:2e:ee:cc:35:
00:f7:e7:40:20:48:b3:41:22:52:77:cf:20:c0:d2:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:D0:18:71:DA:98:6C:8E:4F:AC:85:9F:F6:FD:C8:2E:C4:AB:27
X509v3 Authority Key Identifier:
keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/04963b3e297c475c527a316ae2d3ea5fc9652f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.16.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4f:2c:ac:6b:31:1b:f7:68:2b:d4:64:f3:b2:66:c0:2e:80:
fe:fb:b1:96:9b:bd:55:b3:32:a6:ef:af:61:d2:fd:04:15:e6:
6f:b3:6d:bd:e8:26:32:db:99:cc:18:47:c7:aa:0c:0a:f3:bc:
c6:93:01:d6:4c:d9:9f:86:10:cd:bc:0f:2a:33:bb:91:15:e1:
a9:ef:34:d1:33:d5:73:4c:f6:0b:e3:b6:2d:16:db:9c:78:24:
e3:e6:80:9c:eb:f2:f5:80:eb:5b:27:ab:c9:7b:e2:3b:e0:13:
28:81:c3:b7:fb:54:0f:53:9a:a6:9d:82:49:b0:6b:d2:c7:14:
44:b1:a7:17:74:5c:da:20:ed:5b:28:09:04:79:cf:08:7c:da:
27:88:95:89:16:15:ae:8d:d8:f3:ff:9f:13:d5:fc:90:a1:bf:
57:c4:3e:bd:7d:4a:4b:87:25:0b:ea:6c:d0:ca:86:b3:d1:b5:
73:2b:50:bd:e0:75:e6:c1:95:e8:89:5b:a9:99:1b:9a:66:cd:
5c:c2:c4:57:83:cb:b5:26:e1:a0:37:22:d2:d9:11:7d:51:9e:
7c:89:a4:81:b7:b4:df:23:63:82:7b:90:d5:fc:24:72:e7:72:
4e:ac:23:12:bd:da:c6:00:28:de:4c:56:70:44:a7:a7:95:42:
50:3c:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org