Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33342e302f32342d3234203d3e203531323032.roa
File: 36362e3132382e33342e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier: gONYsgjkF67O7pbfwevB3iZmGBvHRCniJuKL2uDVSbs=
Subject key identifier: 20:FA:40:F3:B8:33:05:92:55:90:C4:90:D7:F4:94:97:AE:83:67:64
Certificate issuer: /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial: 09902891FA51FF6E9BFDD1A12DA3B9F267DCC01C
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33342e302f32342d3234203d3e203531323032.roa
Signing time: Thu 11 Jul 2024 19:25:00 +0000
ROA not before: Thu 11 Jul 2024 19:20:00 +0000
ROA not after: Thu 10 Jul 2025 19:25:00 +0000
asID: 51202
IP address blocks: 66.128.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:90:28:91:fa:51:ff:6e:9b:fd:d1:a1:2d:a3:b9:f2:67:dc:c0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
Validity
Not Before: Jul 11 19:20:00 2024 GMT
Not After : Jul 10 19:25:00 2025 GMT
Subject: CN=20FA40F3B83305925590C490D7F49497AE836764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:84:df:eb:82:5d:5e:e5:7e:b9:49:8b:68:
08:30:58:55:6e:5c:e3:2e:11:00:84:f8:aa:d2:4e:
2a:ef:d7:43:7c:6a:45:f9:9d:a3:9e:6d:d2:bd:fc:
93:34:7c:12:47:9b:94:f5:88:7a:c2:8e:bb:bd:75:
4d:09:1a:64:c8:2d:8c:a2:45:89:db:d8:8f:50:e6:
f5:11:ee:ac:2d:a2:5e:ab:35:a7:bc:64:17:2b:39:
d2:70:bd:1d:b7:39:80:d3:58:fe:4c:38:fb:89:8b:
f1:7f:b1:3a:42:69:0c:cd:d6:9a:12:21:4e:be:00:
85:01:a8:59:2c:d7:b5:bc:73:59:8a:90:e2:f9:6b:
b6:21:d1:fa:3b:85:09:6b:d3:be:de:e4:98:ee:10:
3d:06:69:73:6c:2b:b4:78:27:ad:72:09:24:56:e0:
54:85:24:d5:bc:68:b0:b2:d9:c4:ac:52:3a:32:11:
0d:03:37:1c:0e:35:f1:cd:63:09:70:80:0c:a2:26:
d1:2a:27:0c:44:04:50:f0:49:ba:41:d7:b4:8b:b3:
60:e3:93:10:24:ea:52:aa:95:55:cb:64:fe:42:06:
bb:a5:1f:a9:96:7d:81:a0:d0:3a:57:67:0d:51:fb:
57:d0:13:76:31:6f:4f:83:68:8a:11:47:92:1b:eb:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:40:F3:B8:33:05:92:55:90:C4:90:D7:F4:94:97:AE:83:67:64
X509v3 Authority Key Identifier:
keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33342e302f32342d3234203d3e203531323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.128.34.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c7:70:05:53:37:f1:e4:6b:48:56:55:0c:f4:27:e7:cb:cb:
6a:df:d9:ae:b9:16:6f:db:9f:4b:e2:5f:19:a8:d3:28:b3:a2:
1e:58:92:c1:b6:1c:f5:31:af:a1:46:e2:a8:cf:06:22:72:8a:
b0:2c:04:3d:81:fe:59:64:dc:d7:90:c9:47:c0:18:45:a0:7a:
41:48:7c:f8:df:c8:0c:97:93:60:43:90:bb:54:14:89:cb:fd:
3e:2f:c9:cf:10:b4:e7:c0:5c:58:3c:59:16:44:62:04:2a:e8:
18:d4:85:6d:e8:ae:c3:04:bd:d5:38:d5:0e:00:12:14:9e:29:
79:ac:95:32:30:72:98:4f:e3:1e:85:54:6a:ed:52:2b:b8:10:
22:db:be:2c:9d:30:95:eb:54:33:d3:4e:ca:fe:0f:6b:26:a3:
3e:0b:18:6e:bc:cc:28:7f:4e:db:48:e9:08:f1:aa:99:26:90:
2e:71:4f:2b:56:72:6b:90:8a:b3:9d:7a:c9:20:ca:cf:8e:27:
8d:69:68:82:2d:1e:2a:59:9b:bb:df:b9:8c:6c:09:63:a9:eb:
58:e3:58:f6:53:30:d2:1e:0d:2e:fd:13:09:b2:27:c2:53:cd:
36:d6:bc:1d:ba:85:c3:60:51:2c:50:89:f5:c8:42:78:0b:64:
21:a0:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 00:08:12 2024 by rpki-client on console-ams.rpki-client.org