Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/c031080479bd7c457e87684bcd15155b9fb46856.roa
File: c031080479bd7c457e87684bcd15155b9fb46856.roa (raw, json)
Hash identifier: Ba10jFrlWSQ/Sld7giF8LSrYcrKpMFs6kP4P0VZmf3k=
Subject key identifier: 98:21:58:A1:C6:0E:57:76:E1:AB:69:A7:76:06:B5:02:A9:B8:22:EE
Certificate issuer: /CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Certificate serial: 248AAD
Authority key identifier: 2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/c031080479bd7c457e87684bcd15155b9fb46856.roa
Signing time: Thu 02 Nov 2023 11:47:59 +0000
ROA not before: Thu 02 Nov 2023 11:47:58 +0000
ROA not after: Sun 02 Nov 2025 11:47:58 +0000
asID: 61452
IP address blocks: 198.12.37.0/24 maxlen: 24
198.12.38.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394797 (0x248aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Validity
Not Before: Nov 2 11:47:58 2023 GMT
Not After : Nov 2 11:47:58 2025 GMT
Subject: CN=c031080479bd7c457e87684bcd15155b9fb46856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:a2:2b:33:89:02:a9:e0:b0:9e:e8:1d:ca:
9d:ee:7e:44:b4:4e:45:89:35:94:f3:69:d5:a1:63:
5f:f5:6e:aa:ef:c6:d0:91:45:a3:05:66:56:64:61:
5a:87:91:8d:93:52:13:45:04:4b:5d:1b:7d:3a:db:
71:fd:c7:ea:29:e6:d2:eb:6b:dc:b5:02:40:bb:29:
df:24:fa:14:ba:9b:23:c5:d2:66:4f:6b:42:dd:bf:
38:fc:ee:28:c2:9e:5f:05:7e:b8:f4:62:79:a7:b0:
94:88:45:0b:cf:ca:47:48:9b:02:c4:fe:3d:3f:4e:
71:57:ad:98:45:b4:f2:e5:0f:1f:1c:fb:1e:ef:06:
8f:a1:5e:52:60:9f:f6:9c:e7:4a:c5:bb:2b:cb:10:
6f:a6:c9:8a:a2:db:17:c6:90:29:ee:12:a6:85:f0:
8c:b8:64:0a:3e:3c:4c:2a:a3:bd:b1:3d:90:ef:da:
bd:1d:2f:2c:6a:05:fe:48:28:a1:c2:36:c3:38:58:
cf:a5:1a:b9:72:b9:65:fa:e3:bb:2e:e3:42:71:7b:
93:fa:5e:a1:e3:50:94:6e:bd:fd:90:89:9d:7b:44:
81:95:a7:92:39:c7:79:43:e3:67:d3:2a:0c:c4:f6:
13:3d:32:3f:dc:92:2a:af:cb:ce:d6:b5:f5:ef:d6:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:58:A1:C6:0E:57:76:E1:AB:69:A7:76:06:B5:02:A9:B8:22:EE
X509v3 Authority Key Identifier:
keyid:2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/c031080479bd7c457e87684bcd15155b9fb46856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/419e23f1fa27160195e5e3ab407b2d1b2f418f98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.37.0-198.12.39.255
Signature Algorithm: sha256WithRSAEncryption
70:ce:fb:6f:b0:45:57:17:8a:39:cc:35:56:75:b2:e2:cb:1b:
07:22:e2:82:a2:aa:ad:97:a1:a2:da:e9:0a:cd:04:4f:b4:be:
21:ec:02:79:1e:ab:ed:5d:3c:76:b3:6d:3d:9c:f7:1c:63:47:
50:87:5f:cb:11:0e:5e:73:5d:09:83:40:d9:9e:de:68:e4:ac:
96:49:a3:47:32:17:50:d2:fd:59:e1:af:3b:ff:a0:cc:a7:8b:
66:5c:56:c2:18:8b:df:9b:91:8b:4e:4d:8a:af:91:0e:ef:fa:
bb:ac:df:c8:94:ca:aa:78:a8:17:2e:16:88:6f:da:70:36:b9:
66:c5:4c:6d:ca:82:85:b6:23:e2:38:08:6b:ac:22:22:fa:3d:
b6:04:6a:1c:e0:0a:df:50:77:55:ee:42:bc:87:5a:5c:08:e5:
0b:90:89:f7:24:0b:3d:ab:ac:0b:8e:fd:95:b4:f2:76:8d:1e:
aa:9b:18:38:e0:dc:09:a9:06:f4:a4:4e:44:29:93:59:c1:ba:
1b:75:44:f4:c0:77:cf:86:f9:c1:89:95:ff:1f:bf:d6:a9:3a:
c1:0d:f5:cc:54:eb:d8:d0:10:7b:da:dd:d1:4b:be:2e:fc:5e:
cb:53:c8:f0:28:25:cb:a2:a7:1f:63:70:0c:89:d5:db:10:3c:
ca:32:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 14:03:16 2023 by rpki-client on console-ams.rpki-client.org