Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/43664c71a32f6e0b7743fb21d451e186edc975aa.roa
File: 43664c71a32f6e0b7743fb21d451e186edc975aa.roa (raw, json)
Hash identifier: BVJX6f1pqWEZfhiLS5NqIfd8UC3bNpufkZqAj0tIFDE=
Subject key identifier: 6A:B7:E7:F5:34:B4:D3:D5:2E:01:32:48:A2:28:0E:4A:0A:21:A9:5F
Certificate issuer: /CN=dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152
Certificate serial: 03D6
Authority key identifier: 24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/43664c71a32f6e0b7743fb21d451e186edc975aa.roa
Signing time: Thu 10 Feb 2022 20:18:03 +0000
ROA not before: Thu 10 Feb 2022 03:00:00 +0000
ROA not after: Sat 10 Feb 2024 03:00:00 +0000
asID: 272032
IP address blocks: 181.224.88.0/22 maxlen: 24
2803:b510::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 Feb 2024 07:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152
Validity
Not Before: Feb 10 03:00:00 2022 GMT
Not After : Feb 10 03:00:00 2024 GMT
Subject: CN=43664c71a32f6e0b7743fb21d451e186edc975aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:44:c3:01:28:db:49:64:cf:37:e8:fd:9a:
76:5e:c1:f9:31:b3:4a:e0:5d:53:a9:4a:4f:d6:08:
2c:93:d1:40:1d:72:85:bc:42:27:2f:24:79:ef:2e:
73:0a:c7:3d:71:23:85:2b:73:c9:a6:66:3c:e2:9f:
65:a2:a2:32:4c:23:11:de:8c:23:f8:b9:06:6b:e4:
49:8b:b6:d1:29:0b:6f:e5:e5:f9:d5:76:d0:12:0d:
12:54:8d:54:73:27:75:15:87:15:6b:30:50:1d:e2:
fa:1c:62:ce:be:93:d5:e7:6b:e0:45:92:60:92:60:
cb:9e:89:26:4a:90:91:a5:42:b8:88:2d:f1:50:27:
03:a5:c0:8b:b1:60:4c:62:45:78:d6:90:77:a4:31:
bf:c4:e6:e9:0d:47:11:e6:95:7a:91:fa:f7:0d:56:
b5:87:c5:0e:59:dc:6d:cc:da:d9:c4:6a:7a:0f:83:
cb:2c:5c:1b:c9:ba:42:ab:99:aa:b5:69:21:9a:a9:
4c:ef:7f:76:16:13:a5:fe:b5:3c:87:30:4b:0c:1d:
4b:f5:e7:3a:11:94:3f:00:38:be:cf:a8:2f:c5:3c:
a7:e9:0b:bb:cf:19:c7:9c:99:0d:61:89:1b:a3:84:
74:b8:c0:6e:0a:b2:a9:0d:17:61:ab:43:51:2b:9c:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:E7:F5:34:B4:D3:D5:2E:01:32:48:A2:28:0E:4A:0A:21:A9:5F
X509v3 Authority Key Identifier:
keyid:24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/43664c71a32f6e0b7743fb21d451e186edc975aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.88.0/22
IPv6:
2803:b510::/32
Signature Algorithm: sha256WithRSAEncryption
14:38:7f:52:55:4b:05:5a:65:19:47:03:67:8e:6d:4b:3f:28:
70:75:32:8c:08:48:19:43:c6:da:b1:b2:39:d6:13:aa:76:5c:
e7:dc:83:9d:a3:56:92:a3:ee:b3:0b:36:ce:f9:8b:2b:92:51:
41:57:53:ec:97:e4:a9:da:a3:1a:ad:26:23:76:a2:49:18:a9:
6d:34:c6:53:ea:6c:3b:1a:3c:14:1d:85:24:9e:27:bc:a8:6e:
ca:fc:1f:a0:c1:ef:d8:46:e7:ce:b9:97:77:83:7b:d1:11:56:
7c:12:00:c4:54:42:a3:26:d6:5a:0c:ef:fb:59:a6:2f:cf:52:
ed:e0:67:96:6b:66:ac:95:43:42:bb:6e:1d:f8:2e:80:a6:57:
fe:26:fc:5d:8b:d9:03:b0:96:19:b7:36:33:5a:e7:72:0b:5b:
8d:96:12:98:67:64:d7:ad:a1:34:a3:e4:d4:94:2c:22:02:6c:
8b:fb:1a:8c:21:4d:88:85:59:c2:ee:b1:fc:7a:0a:ce:06:5a:
a8:7a:64:db:f9:9a:b2:5a:fe:bd:0b:f2:ee:78:bc:0d:cc:69:
ef:35:d8:27:f8:88:3f:3d:44:17:9b:a7:b7:e8:e5:93:8d:d9:
e1:18:25:f1:83:56:1a:c0:12:8d:c7:83:43:94:61:b0:ee:a1:
3c:37:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:53:15 2024 by rpki-client on console-fra.rpki-client.org