Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/1d0f01009e97ea1393382faf45fcbb3328637536.roa
File: 1d0f01009e97ea1393382faf45fcbb3328637536.roa (raw, json)
Hash identifier: 5o/HqB/FpEHnLgsrZgqqqEFHbNJtrJjs4dKBx3wVjhs=
Subject key identifier: 28:22:5C:70:B7:F9:02:E3:E7:FB:46:4D:EF:70:F5:82:77:D0:F5:27
Certificate issuer: /CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
Certificate serial: 0E1233
Authority key identifier: 8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/1d0f01009e97ea1393382faf45fcbb3328637536.roa
Signing time: Tue 09 Jan 2024 23:46:51 +0000
ROA not before: Tue 09 Jan 2024 23:46:51 +0000
ROA not after: Fri 09 Jan 2026 23:46:51 +0000
asID: 270080
IP address blocks: 191.241.62.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 03:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922163 (0xe1233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
Validity
Not Before: Jan 9 23:46:51 2024 GMT
Not After : Jan 9 23:46:51 2026 GMT
Subject: CN=1d0f01009e97ea1393382faf45fcbb3328637536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:04:25:2a:42:db:45:9a:57:29:96:48:0b:
2f:ff:5d:50:57:3b:79:aa:68:9a:b5:66:3a:d8:30:
b7:f2:b7:58:aa:94:ac:05:6d:24:3b:be:07:22:6e:
42:25:0f:50:c0:c2:d6:d6:7c:24:3b:0f:c4:34:69:
e2:90:bb:b8:b1:17:b2:60:09:ce:25:cc:3c:72:0a:
3f:ff:82:e0:97:43:05:4b:f8:34:05:01:92:0e:3f:
a8:f2:34:e8:d8:80:da:37:49:f1:2a:aa:a6:81:41:
1c:c9:fb:10:4e:2e:8a:a1:78:92:45:6f:bf:59:3a:
cd:75:c8:47:19:40:f5:9d:3f:06:13:8e:d9:ab:9e:
05:83:20:fc:59:d8:d9:4b:f0:5c:b3:bb:fc:33:a4:
d8:c0:8e:c4:4f:a5:9b:39:d3:3e:97:93:d0:00:5f:
7a:8b:3c:85:3a:ad:58:9c:43:7c:f7:85:d7:8d:84:
78:45:e1:d5:c6:21:e9:a8:4d:70:97:62:d6:e5:71:
fe:3d:c9:f6:18:bb:a3:98:f5:b2:1c:ce:24:eb:b3:
b2:69:53:26:d6:3a:76:66:c0:7c:e4:c5:3f:5d:73:
15:53:43:e3:04:5a:81:b1:b6:7c:6a:0b:ce:5c:b9:
08:0d:dd:d5:9b:3b:4c:52:79:d7:15:91:3b:96:67:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:5C:70:B7:F9:02:E3:E7:FB:46:4D:EF:70:F5:82:77:D0:F5:27
X509v3 Authority Key Identifier:
keyid:8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/1d0f01009e97ea1393382faf45fcbb3328637536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/32b7dede0ee425fb7f77655ae699df21e4d9273b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.62.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:53:11:26:05:19:05:0a:bb:2d:6a:d6:17:01:57:af:40:6e:
2a:96:b9:93:76:5b:4e:fc:51:1b:7a:04:43:08:73:b8:0f:80:
36:5e:ef:76:f5:53:30:ff:98:93:a3:79:03:d4:6e:63:d2:c5:
bc:d2:de:3f:6a:10:8b:1d:22:f1:7e:cb:de:cb:51:d7:fe:94:
d2:9f:67:28:0e:dd:13:b6:58:cf:1c:ab:39:e5:41:70:f9:63:
6b:19:1c:0d:7f:73:5d:25:ec:8b:ae:17:9c:c6:96:96:01:67:
2c:02:9b:00:1e:06:5d:7c:d0:b6:b0:76:48:b2:ab:ea:3b:be:
17:c5:9e:40:ba:f7:6f:d6:4c:53:78:1a:f5:52:9e:3e:ca:a5:
a8:45:07:4c:d4:5c:84:00:2e:e6:e4:58:6a:d1:dd:ef:a1:79:
7a:2e:fd:48:80:be:72:cf:52:45:78:71:ea:88:87:c3:7a:4a:
d0:a2:03:6b:30:05:82:89:95:48:1f:68:c9:5a:b1:de:00:03:
ca:62:f6:49:ad:c1:bd:08:eb:d2:57:31:79:7b:a9:22:78:3d:
f2:9a:93:dc:12:0e:53:13:e1:33:ca:af:5e:2e:30:57:3b:be:
05:57:af:42:18:63:93:5e:51:7f:53:44:e8:34:c1:88:7a:2e:
bb:b3:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 05:10:52 2024 by rpki-client on console-ams.rpki-client.org