Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa
File: c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa (raw, json)
Hash identifier: NPpwJoB9GKSMa+8NGU+9kcO4Ou3CG37xx35WjZHqLS0=
Subject key identifier: 3F:7B:8E:42:B5:36:91:E9:44:98:54:68:83:39:F5:6B:00:98:6C:0D
Certificate issuer: /CN=b0c720a9a69baef973dad173f853967bbc985a77
Certificate serial: ABA4
Authority key identifier: B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa
Signing time: Tue 03 May 2022 15:49:46 +0000
ROA not before: Fri 08 Apr 2022 03:00:00 +0000
ROA not after: Mon 08 Apr 2024 03:00:00 +0000
asID: 269800
IP address blocks: 2803:7360::/36 maxlen: 36
2803:7360:4000::/36 maxlen: 36
2803:7360:b000::/36 maxlen: 36
2803:7360:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 07 Apr 2024 08:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43940 (0xaba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c720a9a69baef973dad173f853967bbc985a77
Validity
Not Before: Apr 8 03:00:00 2022 GMT
Not After : Apr 8 03:00:00 2024 GMT
Subject: CN=c27cceda8d59aaeeb8e61fce89f25fda55fe2605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:1e:a2:3f:d8:df:be:7f:fa:ee:31:30:d0:
52:4d:01:db:a4:b5:6c:09:05:13:bc:89:cb:3d:66:
b9:35:d4:cf:1f:df:71:d9:d0:ac:eb:28:9d:2e:b8:
4b:3a:63:09:00:44:d3:5b:ec:d7:4c:1a:ed:93:d0:
f1:ff:f5:9c:ad:46:81:43:02:20:97:69:29:56:11:
60:57:23:38:a7:48:44:9d:34:a2:96:19:60:f3:fd:
f9:fc:a5:6d:db:fe:1e:cf:97:fa:98:06:de:f8:57:
1d:28:56:9f:5a:22:19:42:e0:0e:99:ed:08:76:c4:
77:4d:ad:f0:a5:5a:d2:aa:bb:8f:cf:fe:55:81:06:
58:bf:cc:ed:06:65:81:b4:1f:bb:b9:8f:d2:9c:72:
d1:48:47:77:db:07:98:fc:3f:21:7f:94:1c:c0:16:
83:d5:61:9e:08:0a:1f:e5:db:74:40:9e:0a:79:a0:
37:97:10:cb:75:5f:35:3a:bc:0e:8d:d5:5e:08:9d:
47:c6:ae:d2:b9:8a:8d:7e:be:df:2b:86:75:f7:73:
87:9c:28:8e:95:f6:97:28:53:dc:11:f1:2d:3a:89:
e2:2a:a6:ce:81:5e:cb:ef:57:88:d9:72:8d:9b:4d:
51:ae:9e:24:06:0d:0a:f4:b5:2a:b6:d4:c1:b8:d3:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7B:8E:42:B5:36:91:E9:44:98:54:68:83:39:F5:6B:00:98:6C:0D
X509v3 Authority Key Identifier:
keyid:B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/c27cceda8d59aaeeb8e61fce89f25fda55fe2605.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7360::/36
2803:7360:4000::/36
2803:7360:b000::/36
2803:7360:f000::/36
Signature Algorithm: sha256WithRSAEncryption
91:86:9c:0b:6d:f7:df:9e:67:a7:f4:38:22:af:e1:f6:90:2e:
be:e4:86:5e:da:d0:3e:32:2e:0c:37:62:e6:0f:a5:9d:f0:15:
9f:8d:2e:77:bc:7d:67:69:8a:c2:fd:6e:76:55:9d:1b:b8:88:
4b:8b:dd:4c:b1:87:80:5a:0c:44:5a:e8:91:01:95:8b:d4:4f:
98:74:bd:df:c9:46:06:6d:c0:70:c6:b9:5f:5a:e9:8d:29:11:
51:a0:44:74:ba:02:74:57:9c:a8:97:32:1c:2c:6e:6f:fd:60:
69:1f:f2:6f:bd:00:ca:4b:b7:c8:ad:cb:b7:70:2b:4d:19:3c:
95:53:78:d9:a7:af:33:8a:2d:d1:65:70:6a:25:cf:fb:d9:f9:
dc:2a:42:68:4a:2e:86:a3:a3:16:a3:fc:cd:0b:86:63:e1:0c:
b8:f7:c3:a1:a0:a5:e4:02:36:bd:ad:ae:82:36:79:77:28:03:
b5:f4:e2:c6:5d:06:e3:2b:18:3a:3d:aa:1b:17:84:77:a9:8b:
09:e1:a0:02:ac:0d:58:79:96:47:e0:fd:dc:5b:19:0c:4d:d2:
51:12:96:a0:59:9d:1f:12:3a:b9:be:1c:2e:8c:bd:f5:7f:b6:
2a:5c:af:ea:af:56:c1:7b:1e:b3:7a:3a:5b:0d:31:ca:b0:9d:
2c:b4:20:ce
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDAKukMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
YzcyMGE5YTY5YmFlZjk3M2RhZDE3M2Y4NTM5NjdiYmM5ODVhNzcwHhcNMjIwNDA4
MDMwMDAwWhcNMjQwNDA4MDMwMDAwWjAzMTEwLwYDVQQDEyhjMjdjY2VkYThkNTlh
YWVlYjhlNjFmY2U4OWYyNWZkYTU1ZmUyNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnB4eoj/Y375/+u4xMNBSTQHbpLVsCQUTvInLPWa5NdTPH99x
2dCs6yidLrhLOmMJAETTW+zXTBrtk9Dx//WcrUaBQwIgl2kpVhFgVyM4p0hEnTSi
lhlg8/35/KVt2/4ez5f6mAbe+FcdKFafWiIZQuAOme0IdsR3Ta3wpVrSqruPz/5V
gQZYv8ztBmWBtB+7uY/SnHLRSEd32weY/D8hf5QcwBaD1WGeCAof5dt0QJ4KeaA3
lxDLdV81OrwOjdVeCJ1Hxq7SuYqNfr7fK4Z193OHnCiOlfaXKFPcEfEtOoniKqbO
gV7L71eI2XKNm01Rrp4kBg0K9LUqttTBuNNUcwIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFD97jkK1NpHpRJhUaIM59WsAmGwNMB8GA1UdIwQYMBaAFLVHIQkKWdtAS5KB
6ObiVyjZOpGeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBjNzIw
YTlhNjliYWVmOTczZGFkMTczZjg1Mzk2N2JiYzk4NWE3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWU2YTFlOWItZmIwNS00MTFhLTgwMDctMDgxMDhm
MGQ0NGNkL2MyN2NjZWRhOGQ1OWFhZWViOGU2MWZjZTg5ZjI1ZmRhNTVmZTI2MDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZTZhMWU5Yi1mYjA1LTQxMWEtODAwNy0wODEw
OGYwZDQ0Y2QvYjBjNzIwYTlhNjliYWVmOTczZGFkMTczZjg1Mzk2N2JiYzk4NWE3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAIwIAMGBCgDc2AAAwYEKANzYEADBgQoA3NgsAMGBCgDc2DwMA0GCSqG
SIb3DQEBCwUAA4IBAQCRhpwLbfffnmen9Dgir+H2kC6+5IZe2tA+Mi4MN2LmD6Wd
8BWfjS53vH1naYrC/W52VZ0buIhLi91MsYeAWgxEWuiRAZWL1E+YdL3fyUYGbcBw
xrlfWumNKRFRoER0ugJ0V5yolzIcLG5v/WBpH/JvvQDKS7fIrcu3cCtNGTyVU3jZ
p68zii3RZXBqJc/72fncKkJoSi6Go6MWo/zNC4Zj4Qy498OhoKXkAja9ra6CNnl3
KAO19OLGXQbjKxg6PaobF4R3qYsJ4aACrA1YeZZH4P3cWxkMTdJREpagWZ0fEjq5
vhwujL31f7YqXK/qr1bBex6zejpbDTHKsJ0stCDO
-----END CERTIFICATE-----
Generated at Sun Apr 7 10:03:47 2024 by rpki-client on console-fra.rpki-client.org