Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136382e3230352e39362e302f32322d3232203d3e2036353638.roa
File: 3136382e3230352e39362e302f32322d3232203d3e2036353638.roa (raw, json)
Hash identifier: 1dkzLCO78vbgavworOfyO8pIFoCJQ6haPliBKptJZ98=
Subject key identifier: A8:E3:90:1D:DA:FE:A4:2C:73:43:FF:D2:54:12:36:F6:21:5E:3B:56
Certificate issuer: /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial: 33238899C6EB584765152C7B2646E258284E848D
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136382e3230352e39362e302f32322d3232203d3e2036353638.roa
Signing time: Tue 05 Mar 2024 18:06:19 +0000
ROA not before: Tue 05 Mar 2024 18:01:19 +0000
ROA not after: Tue 04 Mar 2025 18:06:19 +0000
asID: 6568
IP address blocks: 168.205.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 May 2024 16:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:23:88:99:c6:eb:58:47:65:15:2c:7b:26:46:e2:58:28:4e:84:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
Validity
Not Before: Mar 5 18:01:19 2024 GMT
Not After : Mar 4 18:06:19 2025 GMT
Subject: CN=A8E3901DDAFEA42C7343FFD2541236F6215E3B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:c8:98:1a:34:3b:90:3a:e0:5b:41:85:ef:
4f:74:ca:df:af:6d:9e:ab:f2:8e:36:88:50:31:fb:
7b:47:36:dc:b2:83:7f:b9:9c:01:f2:25:4b:66:78:
17:76:2f:97:90:72:eb:23:11:42:a9:49:d0:cb:e9:
a9:7d:42:8a:6d:e6:23:f9:4b:48:97:cb:2b:79:07:
08:d0:96:d7:d5:cf:41:32:8a:07:b4:6a:17:97:e2:
2f:4c:3c:62:6c:81:6e:ed:74:b6:ce:f2:83:bf:b1:
01:60:72:d1:dc:05:dc:ed:65:1e:26:2e:be:e4:84:
0f:52:e9:67:96:94:a5:61:7a:39:98:10:20:a6:e1:
68:e4:49:49:86:cf:76:1f:3e:f2:56:c8:ff:1d:cb:
9e:9a:0b:15:2a:0c:02:e9:23:18:61:ab:14:23:eb:
85:ef:18:55:cb:6c:e2:7b:82:34:c0:5b:b6:59:a9:
f7:e4:64:09:3e:43:a0:dd:c8:64:b3:ba:4c:65:a6:
f7:36:04:b5:eb:7e:ee:85:0c:7c:5d:56:b2:ed:4b:
5f:0d:83:77:8c:53:5f:bd:e8:3c:3b:67:43:be:ed:
bc:bd:7b:49:20:c7:7c:47:46:14:3e:27:4d:92:ee:
13:bb:86:c0:c1:b0:8f:15:cb:d6:ba:d3:03:1e:29:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E3:90:1D:DA:FE:A4:2C:73:43:FF:D2:54:12:36:F6:21:5E:3B:56
X509v3 Authority Key Identifier:
keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136382e3230352e39362e302f32322d3232203d3e2036353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ba:62:dd:f7:6a:92:d0:13:81:dd:36:cb:31:cc:fb:b8:6a:
00:c9:ba:46:ed:42:76:8a:0b:a6:f4:ec:df:25:99:82:03:91:
bd:e3:b9:04:f3:72:35:42:3f:b8:9e:4e:b8:4f:ac:a4:d9:e8:
b5:78:a5:aa:2e:50:31:e3:10:73:48:ca:27:cb:bd:d6:0e:46:
1a:f1:41:94:f0:84:d0:62:24:7b:76:41:6c:0d:74:12:8c:cd:
a6:9d:4a:6d:63:eb:4e:f4:41:b5:bb:80:95:9b:a9:c1:7a:a8:
c6:d2:7b:33:2d:62:9b:70:21:0d:58:37:6e:66:7f:8d:ea:d8:
34:8e:40:9e:c4:ee:bc:d0:e5:3e:13:98:9a:86:0b:86:b3:6b:
ac:56:12:06:52:43:d8:05:1b:ac:b6:03:bc:e6:47:e0:1e:69:
ae:b5:32:2f:cf:20:65:e6:a7:e2:01:29:ea:23:bb:cd:79:30:
ff:2f:b3:4e:1d:e2:1c:39:5f:e8:e4:42:59:db:96:de:67:23:
55:35:c1:4d:ab:4b:fa:4a:93:97:d0:78:33:58:c9:69:0d:4f:
be:72:f3:c5:36:f4:d4:78:08:cc:83:0d:c6:2d:b5:0f:99:4b:
ba:e8:9a:dc:02:4a:16:00:93:ce:bb:04:6d:9c:66:9c:ce:a4:
22:65:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org