Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3139312e39372e32342e302f32322d3232203d3e2030.roa
File: 3139312e39372e32342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: ShGLSBLbV6/4o34895cINdQuzHyd3kxl13Yku34zCf4=
Subject key identifier: 34:96:42:3D:9D:DC:39:99:C2:D7:F6:D6:98:4C:E2:26:32:EA:C1:BC
Certificate issuer: /CN=53B392C71D73A953C0321875651DEFD6AC96AE92
Certificate serial: 2A6F2080539669A7881D709D6F5A24CB47219632
Authority key identifier: 53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3139312e39372e32342e302f32322d3232203d3e2030.roa
Signing time: Thu 05 Dec 2024 16:00:00 +0000
ROA not before: Thu 05 Dec 2024 15:55:00 +0000
ROA not after: Thu 04 Dec 2025 16:00:00 +0000
asID: 0
IP address blocks: 191.97.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 05 Dec 2024 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6f:20:80:53:96:69:a7:88:1d:70:9d:6f:5a:24:cb:47:21:96:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B392C71D73A953C0321875651DEFD6AC96AE92
Validity
Not Before: Dec 5 15:55:00 2024 GMT
Not After : Dec 4 16:00:00 2025 GMT
Subject: CN=3496423D9DDC3999C2D7F6D6984CE22632EAC1BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:63:96:f7:06:27:c4:eb:b4:b7:c0:9b:f4:
62:aa:7d:d7:80:3c:20:73:2c:8e:03:7a:1b:26:37:
8f:b9:2e:2e:05:33:64:20:f7:6e:0a:b8:2e:1c:ec:
57:2e:5e:5b:48:fa:71:6e:08:2d:b1:1b:d8:72:1e:
9e:ab:57:d6:82:c6:1c:7b:9f:42:22:49:17:08:fe:
0f:8c:bb:b8:81:df:55:7c:f3:9e:f1:18:b3:8e:e1:
95:0d:29:8c:53:2d:4e:84:3b:25:d6:0a:66:2a:c4:
4e:09:bc:ef:8b:bc:d8:4f:3f:87:52:ce:21:a0:ad:
b4:84:b9:41:a5:bc:37:fd:63:6d:13:99:58:72:d5:
07:d6:f0:2a:b3:97:61:fd:c3:4c:5f:b7:84:43:d8:
0b:a1:9e:75:6d:b9:59:af:c1:38:5e:d6:dc:2f:58:
cf:8e:67:0d:d7:20:6b:bf:e2:af:8e:ac:d7:2f:7f:
e2:35:9b:8c:58:41:82:3f:67:83:fd:61:87:ba:ab:
f6:20:fc:b9:c6:ab:05:33:6e:9c:63:10:75:e6:4f:
12:00:8b:80:a6:29:1b:ed:21:84:8a:b5:8d:5f:fc:
a3:f3:5e:d6:96:38:34:1b:b3:bb:98:76:90:a8:22:
8b:34:7a:e0:82:75:97:d8:3d:19:12:b3:df:04:c3:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:42:3D:9D:DC:39:99:C2:D7:F6:D6:98:4C:E2:26:32:EA:C1:BC
X509v3 Authority Key Identifier:
keyid:53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/3139312e39372e32342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.24.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a8:20:13:84:b8:d0:c6:9a:78:b8:4c:a2:ce:44:2b:06:a9:
e5:4f:6f:8a:55:f5:a5:d1:76:bb:27:22:d4:46:7e:40:5e:c6:
c6:f1:37:7a:14:37:b0:07:c4:b0:b6:38:23:d4:27:03:aa:61:
24:e6:30:7f:43:18:3a:1a:dd:cc:9c:bc:c9:0f:d2:02:13:c1:
8e:ab:16:02:e4:5e:b5:3f:40:38:93:73:af:12:31:fe:8f:7b:
d2:d9:51:69:01:3d:0e:e2:9f:a4:41:45:63:f3:5f:c5:7c:70:
5a:91:7b:53:27:e8:bc:1f:91:23:27:31:2e:81:ec:5b:06:32:
00:f0:ea:03:7d:13:2a:5e:2e:a5:4e:ce:59:13:77:b2:35:65:
08:3c:05:90:78:5a:c4:6b:f6:cf:9a:f7:e1:4a:ce:98:2b:22:
eb:70:ce:6a:30:df:72:d8:22:8b:59:07:87:40:e1:cb:9f:a4:
fb:7e:ec:bb:bd:62:12:8a:f4:8d:78:c7:ef:43:eb:d8:4a:07:
95:13:f5:ff:a0:f1:bd:72:64:aa:51:1c:e7:87:a1:3d:30:2e:
11:78:c0:40:63:c6:d6:5d:a8:9b:4b:ce:4c:a1:36:62:ec:32:
b1:df:84:85:9e:06:47:fa:17:6f:d1:eb:11:9d:c8:6d:a2:8b:
ba:51:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 5 23:58:02 2024 by rpki-client on console-fra.rpki-client.org