Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/f5538953262e4a96c568c7a3623adbf5c7dc6b3b.roa
File: f5538953262e4a96c568c7a3623adbf5c7dc6b3b.roa (raw, json)
Hash identifier: M/za5iajztZV631mEVy1BqNjGN7SMWdPMgWVzvA/sd8=
Subject key identifier: F5:AC:07:D2:F8:B5:4D:DC:D6:BC:C5:C2:20:B1:80:FF:47:91:97:7B
Certificate issuer: /CN=b0c720a9a69baef973dad173f853967bbc985a77
Certificate serial: 124A98
Authority key identifier: B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/f5538953262e4a96c568c7a3623adbf5c7dc6b3b.roa
Signing time: Sun 07 Apr 2024 08:30:04 +0000
ROA not before: Sun 07 Apr 2024 08:30:04 +0000
ROA not after: Tue 07 Apr 2026 08:30:04 +0000
asID: 269800
IP address blocks: 2803:7360::/36 maxlen: 36
2803:7360:4000::/36 maxlen: 36
2803:7360:b000::/36 maxlen: 36
2803:7360:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 12 Apr 2024 20:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198744 (0x124a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c720a9a69baef973dad173f853967bbc985a77
Validity
Not Before: Apr 7 08:30:04 2024 GMT
Not After : Apr 7 08:30:04 2026 GMT
Subject: CN=f5538953262e4a96c568c7a3623adbf5c7dc6b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:80:bd:7a:8d:59:fa:a0:98:54:02:01:9b:
e9:47:d1:60:1c:fa:84:7b:45:b9:35:1d:60:67:62:
5f:e5:d8:e7:d4:b4:f1:9a:0b:b0:c5:18:71:72:1d:
b9:ce:78:7a:27:04:15:32:cb:d7:98:94:20:22:15:
65:b8:03:e0:1e:ab:d0:34:d2:8f:7f:fe:79:9a:20:
fd:ff:fa:62:d9:da:fc:56:81:07:c2:d1:db:8f:e1:
86:6c:29:ad:d2:47:d2:2f:29:be:b4:e1:46:c8:fc:
8e:bc:95:c7:f3:6a:ef:69:41:2f:d6:52:88:a9:fa:
99:17:3c:a5:06:4a:4b:6f:56:d0:77:48:58:a3:7d:
e7:0a:b1:b0:43:e8:87:35:95:05:e8:9d:5f:6a:d8:
da:9c:7d:aa:c8:f4:d1:99:79:70:96:67:73:84:73:
67:bc:dd:17:ef:c6:d7:f3:86:4d:5b:7c:d3:e6:43:
55:f8:0f:76:7a:df:d9:bc:65:45:39:62:e4:5a:dc:
d4:b9:e5:10:f3:46:1c:8a:39:1f:ef:b1:99:c8:cc:
d7:93:3b:f7:e1:ef:e7:9d:5b:e9:5f:1e:e7:fe:7d:
fd:f7:18:eb:b0:41:28:a7:fb:87:31:04:d9:49:44:
ea:9e:48:74:33:17:d8:00:ac:1a:45:23:7f:87:0f:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:07:D2:F8:B5:4D:DC:D6:BC:C5:C2:20:B1:80:FF:47:91:97:7B
X509v3 Authority Key Identifier:
keyid:B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/f5538953262e4a96c568c7a3623adbf5c7dc6b3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7360::/36
2803:7360:4000::/36
2803:7360:b000::/36
2803:7360:f000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:27:60:7a:5e:3e:f5:33:b4:8e:f9:af:17:9e:15:ab:2e:8b:
05:a1:a2:f7:e6:4e:a8:e4:02:22:f7:73:38:c1:fc:91:3e:89:
8b:32:3c:f1:65:a2:ec:21:a3:7d:9a:83:83:71:da:92:50:8c:
e0:b7:71:43:0d:61:c9:c8:67:4c:49:ab:43:9a:90:74:ee:56:
ad:78:6d:f6:73:3d:5c:ea:59:df:07:93:44:95:9d:fb:d4:ad:
0e:a4:fe:dd:93:1e:cd:7c:70:4e:49:6d:af:d3:ea:e5:9b:46:
ce:0a:a8:de:19:33:8b:8e:66:35:8d:17:c5:b0:5f:3a:1e:cf:
f9:e0:61:29:b5:7c:90:72:e4:58:22:49:be:c5:87:c7:f6:82:
ce:e6:d6:9f:f1:29:6b:7f:1a:de:ff:e2:f1:e8:fa:7d:15:2d:
88:07:a3:b6:8b:7a:16:ba:f5:47:e7:5b:7a:6c:bb:ab:bc:d3:
85:88:a7:bd:00:48:da:c0:90:e7:76:c6:cb:f3:94:4a:d7:02:
b5:82:ce:2b:32:d2:38:39:1d:a9:4e:ed:5c:16:23:0a:ed:70:
3a:6b:9c:de:53:49:d5:f0:30:5f:ae:44:1e:bd:9d:db:57:2c:
3c:c4:e7:5b:31:51:24:d9:86:65:8e:ab:d3:eb:5c:a8:f5:a2:
7f:39:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 21:43:27 2024 by rpki-client on console-ams.rpki-client.org