Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa
File: aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa (raw, json)
Hash identifier: psFrYj2M+cygZ2Kl5svkxRQ2kNSdtq3Yth+FOKKoVRI=
Subject key identifier: 90:62:99:62:D4:47:D9:1B:41:81:10:CB:A2:A5:4E:82:3F:A7:4F:F2
Certificate issuer: /CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Certificate serial: 259C22
Authority key identifier: DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa
Signing time: Mon 06 Nov 2023 20:02:48 +0000
ROA not before: Mon 06 Nov 2023 20:02:48 +0000
ROA not after: Thu 06 Nov 2025 20:02:48 +0000
asID: 269918
IP address blocks: 2803:dd80::/36 maxlen: 36
2803:dd80:1000::/36 maxlen: 36
2803:dd80:2000::/36 maxlen: 36
2803:dd80:3000::/36 maxlen: 36
2803:dd80:4000::/36 maxlen: 36
2803:dd80:5000::/36 maxlen: 36
2803:dd80:6000::/36 maxlen: 36
2803:dd80:7000::/36 maxlen: 36
2803:dd80:8000::/36 maxlen: 36
2803:dd80:9000::/36 maxlen: 36
2803:dd80:a000::/36 maxlen: 36
2803:dd80:b000::/36 maxlen: 36
2803:dd80:c000::/36 maxlen: 36
2803:dd80:d000::/36 maxlen: 36
2803:dd80:e000::/36 maxlen: 36
2803:dd80:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 31 Mar 2024 11:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464802 (0x259c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Validity
Not Before: Nov 6 20:02:48 2023 GMT
Not After : Nov 6 20:02:48 2025 GMT
Subject: CN=aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:46:e7:28:26:a4:60:d0:a8:c1:bc:da:03:
3e:7d:c4:8e:db:ce:7a:6e:d0:0d:7e:29:7d:08:79:
5f:b7:02:15:aa:6c:90:4d:f2:5e:cf:91:33:c7:0e:
fe:98:a2:c5:f9:d4:51:1d:6b:a1:08:e5:f3:16:46:
07:6d:0f:fc:71:88:10:bc:8d:45:cc:7c:ab:57:e5:
b4:11:b0:81:28:d7:a0:ac:1d:02:1a:a8:2d:e6:51:
a0:7d:ca:a1:8c:20:36:34:e9:6d:10:33:4a:09:9e:
e5:65:52:e8:24:f9:8d:8c:cf:c2:41:b3:ec:85:31:
91:99:5d:e8:f9:65:81:3c:c6:ca:7f:5b:b0:ad:2c:
e9:75:5c:a5:5a:93:41:aa:7f:22:90:db:59:05:c1:
1b:8c:61:0c:ba:b4:d3:c2:7c:f9:8c:45:e4:3b:6e:
f1:b6:a1:69:48:b0:3d:85:c7:76:a5:ce:db:10:19:
bf:0a:9e:ee:b1:0e:79:f5:71:41:3e:0a:c7:5b:cd:
e1:ed:d8:f8:4f:40:2e:5f:52:09:23:b6:22:ed:12:
24:16:d8:2a:a8:b4:3f:80:f6:61:70:be:25:76:82:
4f:c2:cf:54:8d:b6:fd:0d:22:99:d7:52:42:de:0e:
0c:ef:ff:f6:df:d2:b6:a9:d3:0e:77:f0:d8:a1:5c:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:99:62:D4:47:D9:1B:41:81:10:CB:A2:A5:4E:82:3F:A7:4F:F2
X509v3 Authority Key Identifier:
keyid:DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/aadf9b5a60e7e3aa89c3181ee17c9a142a9ece10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
3f:08:7f:3e:72:13:4d:bf:12:be:1e:15:d2:b4:55:ad:67:7d:
aa:80:04:0d:66:2a:f8:1d:80:13:3a:29:5d:b4:15:c0:21:97:
2c:d0:40:cf:45:5d:4e:76:23:ea:ae:fb:3f:92:48:f0:8b:13:
bd:10:ac:e8:8b:2c:db:1e:39:2f:92:ca:31:19:55:f6:c7:c9:
97:6e:37:e3:89:6f:05:38:cb:62:98:7a:f0:f9:89:8e:ed:48:
9d:28:f9:c3:15:af:32:a4:b6:f5:04:0e:7a:af:49:88:6a:45:
89:1c:69:83:c6:0a:a5:0a:ce:97:aa:a3:2b:73:e1:8b:7e:bb:
89:82:89:93:50:05:04:55:03:c5:3f:94:14:ed:44:62:d0:86:
87:b0:2f:b4:96:0f:21:c0:5c:30:c5:00:9c:4e:6b:ba:c7:63:
09:be:55:a9:bd:18:2a:da:e1:84:f7:ea:ee:0c:76:b8:0b:74:
f3:1d:49:d4:ee:09:c0:6b:99:9d:85:79:5b:45:ed:bf:6c:c1:
0d:b8:99:d4:6e:00:ef:3e:7f:97:ec:ec:6b:fd:ab:c8:0a:02:
12:dc:92:a3:39:7c:8e:20:f0:7a:29:09:b1:1e:59:d6:be:94:
9e:56:93:8c:3f:f8:8b:c3:ee:8c:7f:d4:62:93:d9:a9:64:69:
31:a8:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 16:36:42 2024 by rpki-client on console-ams.rpki-client.org