Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa
File: 5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa (raw, json)
Hash identifier: TJQ4Lh1yYXzpELb2sV6Jg14YsYKtj3MeWLuF3uileSQ=
Subject key identifier: AE:01:4E:8D:28:E9:8E:F9:54:15:38:50:4D:B8:0E:DC:5C:58:F2:35
Certificate issuer: /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial: 0C04A2
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa
Signing time: Tue 03 Oct 2023 17:17:41 +0000
ROA not before: Mon 02 Oct 2023 17:17:41 +0000
ROA not after: Fri 03 Oct 2025 18:17:41 +0000
asID: 272150
IP address blocks: 192.141.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787618 (0xc04a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Validity
Not Before: Oct 2 17:17:41 2023 GMT
Not After : Oct 3 18:17:41 2025 GMT
Subject: CN=5b1d2a63af33f8d409253dd804f91b7e161a50a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:46:6f:31:44:96:1d:61:2b:ca:85:05:a8:
9f:ba:55:7b:8b:b5:53:61:3b:0f:c7:1b:8c:37:7e:
b8:33:b1:d7:d1:63:16:23:2c:28:4c:6b:b4:c4:c5:
23:bd:b5:b1:23:51:d4:8d:8a:b2:6e:26:25:bf:85:
23:6f:56:63:aa:23:0c:f8:30:2e:64:e9:2a:57:cd:
14:41:53:87:ba:ab:2f:fd:f0:90:9d:54:02:65:df:
93:da:97:a5:0b:16:ce:c6:7d:ee:f2:1a:03:e1:5c:
7a:fb:d3:28:c9:67:ca:e9:ef:8a:f8:e3:44:8b:3d:
06:30:13:1c:6f:f3:94:ad:da:be:5a:4a:78:6c:43:
95:71:f7:c7:1e:d3:73:89:05:a4:58:56:42:14:48:
0e:83:39:4c:14:85:2b:d3:28:62:87:6f:71:63:26:
1f:86:ae:ab:b5:b0:a9:30:e0:26:a1:fd:12:aa:6d:
70:6c:3f:ee:a3:2d:7a:a2:e8:5a:38:7b:e9:f2:3e:
0c:75:bc:ef:42:97:02:c0:14:25:58:20:86:2e:f8:
45:94:20:64:00:02:fb:dc:d3:95:7b:ea:0c:94:01:
98:d2:87:4c:f4:56:5f:3e:ed:4d:24:d6:7c:1e:aa:
2b:71:50:c2:0f:25:6b:20:31:fe:ad:36:b0:0c:da:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:4E:8D:28:E9:8E:F9:54:15:38:50:4D:B8:0E:DC:5C:58:F2:35
X509v3 Authority Key Identifier:
keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5b1d2a63af33f8d409253dd804f91b7e161a50a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:83:bf:da:ed:63:ef:b7:91:71:e9:49:25:e6:83:9c:3a:32:
13:02:98:37:36:af:9f:17:84:51:af:12:01:7d:2a:c4:0f:c1:
ff:2c:b3:b3:a3:90:fc:ca:56:ab:12:a7:22:d4:9c:f4:2c:3c:
64:34:ae:57:ab:b7:9f:12:83:25:f2:90:e8:44:bc:67:a4:de:
da:39:bf:ce:25:54:d5:9d:c1:fa:f8:11:c1:d0:cd:a3:ad:28:
6d:73:21:fd:ea:1b:e9:f5:27:76:e9:1e:90:89:59:ad:b6:15:
3d:97:44:99:87:35:97:dc:fb:81:d7:39:4b:7f:1a:2b:5a:31:
3d:00:02:2a:62:b1:b9:8b:ca:79:1f:76:1f:fd:18:fd:78:c2:
d3:c2:02:23:3f:4d:b4:62:38:b8:3d:cf:29:54:a8:6a:9f:d4:
57:bc:83:f5:2e:13:17:7a:77:6a:86:29:df:6d:fd:a4:bc:02:
6a:58:67:74:dd:b4:4e:39:ce:a4:35:72:c3:02:30:9f:91:2a:
63:19:79:03:e6:75:68:6a:8b:f4:50:3a:b2:bf:fd:e2:15:43:
db:29:0e:61:a7:5d:21:55:83:36:9c:9a:6e:d5:69:3d:bc:bc:
b6:26:27:e5:84:d5:59:75:66:78:ad:35:62:a5:03:ae:b0:43:
58:70:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 10:59:39 2023 by rpki-client on console-ams.rpki-client.org