Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa
File: 8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa (raw, json)
Hash identifier: uHoHvC/TBh/uCJLRAMuzRslLqGz+D+iYKijh2dFrLI4=
Subject key identifier: 02:A1:FD:B3:77:3D:41:48:EA:93:48:55:5A:14:9C:2B:D9:E1:2E:00
Certificate issuer: /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial: 0E7E47
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa
Signing time: Sun 25 Feb 2024 20:19:35 +0000
ROA not before: Sun 25 Feb 2024 20:19:35 +0000
ROA not after: Wed 25 Feb 2026 20:19:35 +0000
asID: 272812
IP address blocks: 2803:f890:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 30 Mar 2024 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949831 (0xe7e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Validity
Not Before: Feb 25 20:19:35 2024 GMT
Not After : Feb 25 20:19:35 2026 GMT
Subject: CN=8cc1f18481b74461339fe9bf4ebcf096e6f99640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:3a:33:d2:55:11:39:3b:e9:ea:17:8a:dd:
f0:fc:6a:0d:b4:cf:2c:0c:29:a6:48:b3:0e:72:5c:
fa:cc:47:85:6e:10:57:1f:1c:3d:4b:f0:9c:87:81:
c0:3b:d9:b4:c6:59:bb:e1:10:12:69:88:9c:0a:d9:
00:f0:cc:10:55:31:11:ac:d0:fc:37:27:d0:ec:30:
59:1d:56:4d:9f:2a:88:ff:6f:82:3e:f9:86:ee:75:
ef:89:10:48:d5:58:00:0e:96:e5:55:53:89:10:ed:
d8:c5:47:f1:05:da:eb:db:75:a3:58:ec:3f:54:1c:
07:73:c0:a5:a3:db:c0:6b:83:23:1b:6f:f2:f5:0e:
4f:05:9a:af:f6:87:3a:3c:79:1f:78:35:92:82:82:
36:80:c1:5b:65:d4:28:8c:4a:7c:d1:a6:e3:40:8b:
19:8c:01:ac:7d:a9:ce:9d:26:83:f8:68:37:eb:bd:
3e:63:22:71:2c:b2:b2:9d:f4:9f:a2:69:52:b4:6a:
9a:b1:0a:80:3a:34:af:38:c3:da:e2:06:f8:88:a6:
a7:90:0e:5f:97:b0:11:8e:44:02:24:da:07:85:3a:
ed:1f:27:40:24:df:85:9b:d9:0a:28:7c:57:4a:19:
ef:7a:fe:6b:42:9f:35:72:2a:c4:a6:36:2d:c6:e8:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A1:FD:B3:77:3D:41:48:EA:93:48:55:5A:14:9C:2B:D9:E1:2E:00
X509v3 Authority Key Identifier:
keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/8cc1f18481b74461339fe9bf4ebcf096e6f99640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f890:1000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:f4:d3:e8:31:e2:df:0c:16:7d:ae:ef:f9:22:ab:f0:ec:f8:
54:1f:a6:a0:bf:39:49:85:3c:bd:47:28:37:1a:2c:4a:36:3c:
0b:a2:91:51:8e:8e:e6:f7:7d:70:ba:3f:66:b8:0c:a8:7e:43:
62:eb:1b:38:d8:d1:28:fb:56:ce:fc:cc:50:9a:23:03:4e:86:
93:e5:37:b8:f4:19:8c:b9:f3:c7:1b:71:e9:3e:61:64:0c:1b:
17:d0:72:fb:bd:1e:50:69:16:d8:1d:6b:4e:13:eb:52:aa:a8:
c3:23:17:6a:36:b0:64:3c:7a:4b:55:19:f0:1d:4a:10:9d:8e:
d7:db:2c:47:3f:42:0c:21:83:64:8b:5b:2b:39:35:3d:01:3f:
0b:6f:8a:54:87:16:c7:dd:70:a9:55:25:d9:03:6c:c7:16:cc:
84:9f:79:c6:d0:e4:54:2b:be:2a:26:f9:d7:35:99:86:7c:81:
0c:93:01:f7:7e:41:2a:07:f6:b6:47:ac:0c:96:83:0f:b2:7e:
cd:b1:c7:ec:cf:e4:b4:7a:d7:f1:8f:67:f1:74:52:c8:71:01:
39:e1:2b:98:c3:9c:0f:3e:b1:91:24:ef:6e:55:a9:86:5f:7c:
ba:8b:6f:4a:e9:40:34:7d:d0:97:12:29:c8:ce:ef:1c:e7:a7:
de:09:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 04:21:40 2024 by rpki-client on console-fra.rpki-client.org