Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/78baaa4cb4b10d3e89e6b85cd17e7beb6f2fe089.roa
File: 78baaa4cb4b10d3e89e6b85cd17e7beb6f2fe089.roa (raw, json)
Hash identifier: TPvdOckXpcD9E5qSVYKLyXL44rJ2Ds7PyccgSImgB8k=
Subject key identifier: B5:5A:92:C5:03:E7:A5:F5:5F:F3:75:B8:69:71:8B:DA:F5:77:0D:42
Certificate issuer: /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial: 24BB17
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/78baaa4cb4b10d3e89e6b85cd17e7beb6f2fe089.roa
Signing time: Fri 22 Sep 2023 20:30:22 +0000
ROA not before: Thu 21 Sep 2023 20:30:22 +0000
ROA not after: Mon 22 Sep 2025 20:30:22 +0000
asID: 52468
IP address blocks: 179.60.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407191 (0x24bb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
Validity
Not Before: Sep 21 20:30:22 2023 GMT
Not After : Sep 22 20:30:22 2025 GMT
Subject: CN=78baaa4cb4b10d3e89e6b85cd17e7beb6f2fe089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:aa:16:35:a6:00:30:50:50:76:02:96:b9:15:
e2:81:34:15:51:c3:6f:99:23:cb:16:0e:0a:6b:cf:
71:eb:11:f4:00:89:8b:19:02:d7:01:24:fc:3c:45:
ad:1e:11:e3:40:32:60:22:52:8e:6f:49:cf:5a:44:
1a:38:6c:28:b9:8d:73:c3:e2:90:0c:ae:cc:44:93:
ad:9b:5b:ce:a0:e0:49:8d:ac:8c:e0:4e:f7:b6:b3:
bc:ac:9b:21:c1:0e:ea:b5:83:3f:41:ea:a1:81:95:
0f:05:f7:b6:39:bd:28:14:3f:61:96:ad:11:55:9b:
3a:88:d9:fe:b1:61:c7:22:36:db:01:11:11:16:ad:
92:cc:a1:f4:0a:5a:99:cf:0b:05:3e:87:44:ce:34:
95:76:ed:dc:05:01:da:7d:0a:05:61:6f:33:22:39:
26:f7:12:dd:c8:58:d5:2a:0c:a6:60:2a:af:8a:52:
2c:4b:0b:3f:31:2d:b6:e7:42:7e:fb:7f:d5:83:56:
7b:7d:52:83:9c:81:78:41:4a:92:e4:85:c6:dd:ce:
80:01:a0:fb:19:0d:eb:02:a9:1e:ed:6a:d0:3e:eb:
af:96:84:df:e5:1c:e0:34:87:b1:0c:99:90:a4:28:
db:11:08:af:d5:18:70:8a:27:d2:02:ef:80:f8:f8:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:92:C5:03:E7:A5:F5:5F:F3:75:B8:69:71:8B:DA:F5:77:0D:42
X509v3 Authority Key Identifier:
keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/78baaa4cb4b10d3e89e6b85cd17e7beb6f2fe089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f5:43:84:4d:f1:44:3c:67:9c:7c:f4:91:ae:77:f3:6d:7e:
ab:0d:63:e6:b6:7a:9f:78:4c:3f:da:64:ea:be:63:de:28:84:
e0:d1:1d:c6:9c:9f:77:f5:eb:2a:d4:68:8e:71:d5:14:1f:15:
7b:2c:8a:04:02:e8:15:99:cd:14:6e:4d:08:76:33:a1:da:2d:
e3:86:af:59:dc:72:5d:a9:fa:f3:9d:36:61:be:96:28:d1:89:
22:ee:94:94:80:89:75:a1:42:49:55:e8:41:e0:ab:8b:71:6f:
78:d3:b3:fd:71:47:f3:dd:4f:e8:36:9a:71:c6:d4:58:a6:fa:
35:33:e6:57:cb:65:4c:51:f5:11:e2:b9:93:38:79:0b:b9:fe:
b7:e1:a4:c0:f5:b5:33:8f:9d:f2:04:19:c7:13:1d:77:86:57:
08:5e:fe:5b:6c:76:7e:f1:92:f4:85:68:9e:e4:ee:a6:fd:e1:
af:12:9b:6a:44:6d:4b:7f:ee:cc:28:a6:d1:b5:14:7c:f2:3d:
60:54:b7:31:e1:08:37:2e:ec:84:16:fe:ef:08:90:18:81:b4:
07:65:7a:a5:7a:e9:a3:46:bd:1e:43:cf:14:94:65:bc:a0:b5:
b9:42:1b:39:39:94:6c:14:16:be:49:3d:e0:e2:b5:73:0c:b8:
72:b6:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 21:45:27 2023 by rpki-client on console-fra.rpki-client.org