Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/3137302e3233382e382e302f32322d3232203d3e203532343635.roa
File: 3137302e3233382e382e302f32322d3232203d3e203532343635.roa (raw, json)
Hash identifier: 2VavXjRAe5hmjPONLscRUYzCbN/OWxkSEB2HYt0q+7I=
Subject key identifier: FC:87:97:63:BF:A1:07:9A:3B:E0:1A:39:D9:27:92:4E:4B:62:FE:30
Certificate issuer: /CN=4E987EE11A4D8C39E36727363E117EC929A11A78
Certificate serial: 6F3B665E218D71E2FC2A2615C5F45ECF6451C81A
Authority key identifier: 4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E987EE11A4D8C39E36727363E117EC929A11A78.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/3137302e3233382e382e302f32322d3232203d3e203532343635.roa
Signing time: Mon 01 Jul 2024 02:40:00 +0000
ROA not before: Mon 01 Jul 2024 02:35:00 +0000
ROA not after: Mon 30 Jun 2025 02:40:00 +0000
asID: 52465
IP address blocks: 170.238.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jul 2024 11:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3b:66:5e:21:8d:71:e2:fc:2a:26:15:c5:f4:5e:cf:64:51:c8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E987EE11A4D8C39E36727363E117EC929A11A78
Validity
Not Before: Jul 1 02:35:00 2024 GMT
Not After : Jun 30 02:40:00 2025 GMT
Subject: CN=FC879763BFA1079A3BE01A39D927924E4B62FE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:11:4e:9a:ac:a7:0f:e3:aa:f1:88:b4:b8:
16:8e:db:22:63:8e:b1:09:22:77:ae:6c:66:82:5c:
a5:0e:2e:7d:e9:11:a7:f0:e5:b8:1c:e9:8a:07:d6:
72:d4:c3:c8:2d:d1:0b:49:ca:4b:50:37:43:3c:87:
69:57:b2:ab:53:e4:ab:cf:97:59:f5:17:a3:14:ec:
4a:bc:99:41:e6:27:eb:82:54:19:f7:f1:09:06:90:
18:a8:18:b8:5c:a1:72:f4:b8:17:3e:8b:71:da:cc:
42:b8:f6:51:a3:e0:25:d8:97:2c:e7:3a:dc:c5:88:
e8:ac:20:bf:68:2c:5e:c7:24:63:41:c7:c1:eb:1f:
1f:36:ce:ce:1a:c1:ee:cc:46:56:9d:3a:2d:fa:67:
92:b5:33:ba:1b:71:38:d4:49:7e:42:69:8e:a7:ce:
3d:b0:c9:25:9b:32:f0:25:b6:aa:2a:95:23:86:6f:
b0:dd:30:0c:4f:21:42:30:0d:08:9d:6e:38:ff:15:
06:9e:21:a0:78:e2:8f:64:56:3e:5c:a7:b0:ea:60:
57:89:a2:da:55:d9:5e:8e:3b:79:9c:e4:ab:3e:bc:
52:de:1c:8c:63:e6:66:fc:43:ac:8c:e1:3f:4d:a8:
2a:8c:a2:4b:0b:86:8d:b3:9d:43:a7:bd:16:10:ea:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:97:63:BF:A1:07:9A:3B:E0:1A:39:D9:27:92:4E:4B:62:FE:30
X509v3 Authority Key Identifier:
keyid:4E:98:7E:E1:1A:4D:8C:39:E3:67:27:36:3E:11:7E:C9:29:A1:1A:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/4E987EE11A4D8C39E36727363E117EC929A11A78.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E987EE11A4D8C39E36727363E117EC929A11A78.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3C0CCC1A94CF82247D2FA8301F49A7549B34C0715B7E100C99CEBA265513C72/0/3137302e3233382e382e302f32322d3232203d3e203532343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.8.0/22
Signature Algorithm: sha256WithRSAEncryption
91:5a:bf:64:26:89:5a:32:37:87:ed:e8:68:26:94:d4:a2:16:
35:35:f0:a7:ea:53:ab:88:ff:4c:e2:b6:0f:64:53:01:e2:ce:
2e:a5:3b:c9:b0:c2:26:1d:d9:cd:05:b3:30:b2:53:13:d8:5b:
76:af:9c:be:d1:f2:de:ec:92:8f:0f:68:10:07:9e:98:e0:07:
54:76:08:cd:81:39:83:ba:34:f9:a6:a2:2d:24:7f:ff:ff:7c:
1f:e5:75:33:3f:99:35:a8:a6:34:c6:9c:db:93:80:33:70:2e:
87:dd:9b:8a:23:dd:32:27:d0:eb:ae:5b:30:ea:80:f7:41:0c:
37:d5:1c:3b:dc:70:eb:c9:3e:6f:47:16:e0:47:68:40:3f:f5:
70:34:c1:5e:96:63:63:9f:2f:59:4c:cc:d5:2f:7f:02:f7:8b:
d7:84:d8:59:c3:19:82:ef:98:cc:91:27:95:60:2c:b4:cf:40:
c2:a7:81:69:11:a0:a5:d4:43:d6:a1:f9:ae:e1:bc:46:53:e2:
bc:36:43:72:e3:e9:47:5e:b0:1d:b7:ee:5f:80:01:7a:7f:e8:
f2:0f:b3:ae:f3:c8:77:fc:6f:27:cd:d9:dd:17:51:3b:20:9f:
55:6f:4c:d0:f0:be:f8:cf:0c:ad:f5:50:1d:15:bf:2f:a1:a0:
3f:e6:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 13:01:25 2024 by rpki-client on console-fra.rpki-client.org