Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa
File: 5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa (raw, json)
Hash identifier: kC5ZQOaJi9wqN0fMUyQz6TmlPRepkG3QvDZZajHd+EU=
Subject key identifier: B8:F6:99:D5:3A:90:99:C1:18:1F:50:81:D6:94:68:76:13:B5:D4:F0
Certificate issuer: /CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
Certificate serial: 03B8F7
Authority key identifier: 3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa
Signing time: Fri 06 Oct 2023 12:39:30 +0000
ROA not before: Thu 05 Oct 2023 12:39:30 +0000
ROA not after: Mon 06 Oct 2025 12:39:30 +0000
asID: 263809
IP address blocks: 191.97.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243959 (0x3b8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
Validity
Not Before: Oct 5 12:39:30 2023 GMT
Not After : Oct 6 12:39:30 2025 GMT
Subject: CN=5128a9add3bd75fea858256a6dd4ea7a2c24f25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:cf:70:04:70:79:87:0e:88:22:e5:33:28:
a8:10:ba:ce:db:b4:ab:0d:4d:96:33:86:2a:f5:58:
3f:2d:34:88:aa:71:9e:17:5f:9e:ec:8e:2f:ae:0f:
3c:84:72:57:22:86:6e:ca:89:cf:c0:fd:e7:a1:57:
5c:3d:94:12:98:3a:84:f0:68:63:11:4c:71:1f:20:
17:bb:8a:af:8c:e8:41:72:2e:0d:cd:66:b4:ee:88:
2d:94:9c:fa:73:27:83:b2:ac:d6:52:65:b0:1d:72:
29:ae:f8:89:f4:c4:ba:67:bc:40:45:22:a0:c1:23:
5a:93:96:ce:fe:4a:d1:1e:3f:0a:0e:0a:37:ff:11:
dc:50:28:9a:eb:9a:94:94:82:8f:aa:e8:6d:15:7b:
95:0e:3a:e1:98:88:f6:ca:23:09:20:57:52:6c:80:
67:08:40:2e:08:80:f8:dd:5a:a5:e3:06:11:7f:a6:
57:66:51:83:5a:16:55:e2:fa:1a:7a:dd:80:e7:26:
c0:61:99:91:1e:a0:6c:c2:67:b2:79:54:80:9e:fa:
d8:01:dc:83:d0:fd:85:c1:58:a4:c8:4f:e8:d4:57:
32:36:52:0b:ef:56:e4:0f:2e:09:21:9c:2d:00:0b:
b6:12:70:ea:aa:a4:e2:a1:1e:36:db:9f:9c:65:ae:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F6:99:D5:3A:90:99:C1:18:1F:50:81:D6:94:68:76:13:B5:D4:F0
X509v3 Authority Key Identifier:
keyid:3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.97.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e2:d6:fd:bd:78:f4:3b:5b:f7:e6:76:af:3d:19:63:94:2a:
2b:54:43:4e:c3:c5:21:5d:77:58:51:34:9a:3f:14:13:c5:ac:
8f:cd:bf:fd:a3:ac:f5:20:ba:da:64:88:3f:9c:e1:71:e9:df:
10:e7:0b:e2:7f:bb:6e:94:83:56:d8:f6:05:52:11:57:62:ce:
ce:26:65:f6:be:7d:4b:1b:d3:b9:2f:02:1c:0a:53:6d:b9:db:
12:a4:89:e8:0a:24:a5:3d:01:aa:71:13:e2:99:cf:aa:1e:e0:
a8:b6:7d:e8:a2:93:29:49:18:b7:8e:4a:a5:30:ce:ed:93:f7:
c1:7d:38:21:a9:f0:97:48:f0:fe:92:da:10:48:6a:74:98:bf:
0d:64:3e:23:c3:cd:93:3c:0a:ad:11:7e:8a:f6:9b:42:34:2f:
47:1f:c1:35:6f:12:8d:93:1c:88:77:db:a6:8b:e0:49:51:d9:
8a:e7:ba:c1:54:ac:4e:f5:70:61:19:aa:5a:0a:ea:8d:75:a7:
13:0a:e2:ee:d0:08:7c:dd:ba:73:4f:56:34:6e:73:0c:18:2b:
b9:f2:cd:91:36:0e:c0:80:88:71:20:62:70:6b:b7:20:97:78:
da:b5:cf:08:03:7b:e5:aa:2b:3b:d2:9d:ea:77:f6:72:80:d1:
cf:c3:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 21:03:45 2023 by rpki-client on console-ams.rpki-client.org