Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/7b4c83fb98ac21dbcbafb18e03f172c05a09da41.roa
File: 7b4c83fb98ac21dbcbafb18e03f172c05a09da41.roa (raw, json)
Hash identifier: mHLypkfP0Uhnsvq3qBnqIQgFKphugKdSAd1/ft3jqds=
Subject key identifier: 45:26:70:86:FE:02:5D:38:F7:C9:E3:93:71:BF:31:BA:5E:A9:71:38
Certificate issuer: /CN=0a22b2d0a072d0d716973baadd546791926ae121
Certificate serial: 1F05F6
Authority key identifier: 2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/7b4c83fb98ac21dbcbafb18e03f172c05a09da41.roa
Signing time: Mon 02 Oct 2023 13:38:25 +0000
ROA not before: Sun 01 Oct 2023 13:38:24 +0000
ROA not after: Thu 02 Oct 2025 14:38:24 +0000
asID: 269964
IP address blocks: 24.152.52.0/22 maxlen: 24
2803:96e0::/32 maxlen: 34
Validation: Failed, certificate revoked on Fri 02 Feb 2024 22:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033142 (0x1f05f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22b2d0a072d0d716973baadd546791926ae121
Validity
Not Before: Oct 1 13:38:24 2023 GMT
Not After : Oct 2 14:38:24 2025 GMT
Subject: CN=7b4c83fb98ac21dbcbafb18e03f172c05a09da41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:bd:03:e5:7f:87:fe:0b:0f:0f:33:dd:7c:
e1:4b:f7:12:8c:42:e0:63:7e:10:6d:79:59:6d:00:
d4:77:e5:b1:33:3e:19:00:35:33:88:dd:ea:6d:1e:
80:60:35:65:4a:f3:e2:b7:e7:72:67:3b:68:96:0e:
df:54:9f:62:a7:86:87:d0:81:36:fb:0a:a9:25:0b:
71:32:3e:ee:49:bb:74:c1:91:ef:2f:da:8d:9d:35:
35:96:77:cd:0f:02:18:0a:e4:6a:30:37:43:e7:8e:
00:ee:60:fd:4f:7a:a8:9c:a0:14:8f:0c:31:38:9d:
e0:fe:4c:aa:72:c2:22:ee:12:fb:3b:03:03:86:3e:
8b:4c:ae:ac:1c:69:c2:39:c0:41:36:ad:41:d3:f7:
bd:a1:f3:46:2f:2b:32:74:48:9b:30:35:ef:6b:1d:
4c:1f:bd:f8:b2:cd:57:09:58:1b:63:d5:d0:5e:e7:
5e:c8:f3:05:f5:b6:8e:d0:93:5d:f4:c8:20:4f:dd:
16:8e:b5:1b:1e:09:de:e7:3b:25:68:08:00:74:b4:
c1:ff:8c:1d:58:0a:3c:25:76:8f:88:1a:ff:ff:1a:
ab:41:05:6d:80:30:cd:90:8c:2b:8a:6c:11:e9:c3:
26:4f:da:5d:22:ac:13:d9:9f:ee:95:de:cc:c8:d1:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:70:86:FE:02:5D:38:F7:C9:E3:93:71:BF:31:BA:5E:A9:71:38
X509v3 Authority Key Identifier:
keyid:2B:C5:A8:D9:B1:F6:9A:B6:46:AA:55:5F:AF:CA:37:5E:CF:67:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a22b2d0a072d0d716973baadd546791926ae121.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/7b4c83fb98ac21dbcbafb18e03f172c05a09da41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e277427-b95f-444e-8eba-c548cdfbb422/0a22b2d0a072d0d716973baadd546791926ae121.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.52.0/22
IPv6:
2803:96e0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:0a:77:84:e5:f0:a2:b5:2d:a7:6d:53:a6:cb:56:56:0c:f1:
bb:70:f7:62:b2:81:ed:9b:0f:5a:72:74:f3:cd:34:39:61:96:
b4:45:ce:03:fe:b0:b3:d7:2b:90:86:d2:d6:5a:da:1b:26:52:
de:26:15:09:47:d0:a9:50:36:cc:81:6b:ca:74:c4:5a:f0:7c:
ea:77:38:d0:b1:22:6f:e2:63:d6:bd:d0:5c:72:fc:19:30:d0:
c5:c3:c8:ae:a1:09:6e:26:8c:f3:cd:cc:85:fb:67:8c:04:7a:
3f:7c:ab:fe:00:f6:7c:44:05:af:3a:34:a5:a2:8e:6a:23:f3:
51:93:30:e2:e5:27:1e:46:ba:5c:0f:bf:14:c1:e9:ba:25:5f:
8d:14:49:5b:30:bf:ff:50:86:17:32:e5:7e:96:a2:c4:67:3c:
36:40:42:3d:96:bd:04:04:d3:32:65:e9:00:bc:1d:25:6e:3e:
98:84:6b:be:c6:d5:25:85:6b:e4:85:be:24:f6:99:07:5e:be:
7f:c4:0c:6a:ed:ee:ad:2a:39:09:c9:33:6c:cb:38:76:4f:7d:
31:f9:df:8f:76:a7:44:8a:1f:54:d5:b8:cd:eb:00:2c:5b:ab:
d1:0f:68:fe:55:16:27:46:00:82:2b:e5:ad:68:28:1c:95:de:
95:84:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 02:09:46 2024 by rpki-client on console-ams.rpki-client.org