Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa
File: 2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa (raw, json)
Hash identifier: U7pFyOmuNL0Do4i9e2qw/hYwDOUJnwNA7dCdZ5UE0Q8=
Subject key identifier: F7:4B:05:4F:E1:41:7B:08:D9:5D:EF:1C:29:56:44:57:93:5F:80:CB
Certificate issuer: /CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
Certificate serial: 0E0303
Authority key identifier: 8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa
Signing time: Tue 09 Jan 2024 01:35:50 +0000
ROA not before: Tue 09 Jan 2024 01:35:49 +0000
ROA not after: Fri 09 Jan 2026 01:35:49 +0000
asID: 270080
IP address blocks: 186.195.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 16:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918275 (0xe0303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
Validity
Not Before: Jan 9 01:35:49 2024 GMT
Not After : Jan 9 01:35:49 2026 GMT
Subject: CN=2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:bb:9e:aa:e7:24:c4:d4:e9:c0:2a:44:7b:
11:3d:38:24:25:cf:6d:b0:e4:2f:21:32:1e:c9:b1:
7b:4a:3a:68:72:29:16:b6:fe:0f:1e:0d:98:05:ef:
da:bc:71:e3:84:30:35:11:09:33:55:44:5a:1e:1c:
5f:12:1c:2d:42:9e:69:04:6f:d1:a4:26:02:85:63:
86:93:e1:1b:f6:0c:93:63:94:87:81:28:bc:8e:a4:
b3:1c:52:45:ab:b4:cf:ac:ad:90:ee:d6:1a:d2:3b:
d1:38:34:12:df:1d:e9:31:ca:35:a5:24:04:a7:de:
40:d8:24:13:d9:54:df:81:05:8b:9f:ea:c6:7f:ec:
32:f7:45:89:50:40:f3:c2:5a:5a:bd:6f:0d:74:fd:
bd:12:6b:f8:39:64:15:71:da:0d:ed:c5:90:04:f8:
ab:0b:ce:82:97:68:be:89:e3:fc:5f:01:d6:7b:34:
c9:da:d0:4b:d1:a0:fe:c0:6a:1a:df:d8:cc:f2:1a:
31:e5:38:25:1c:1c:ab:f7:38:6e:95:73:85:f8:8a:
7b:1e:4e:10:b1:9c:1d:43:1a:3b:64:14:fc:57:b5:
9d:4c:c3:2b:b5:34:ba:b1:9a:f2:0d:3e:c5:bb:9a:
bf:73:f5:a1:15:43:a1:21:e8:90:da:7d:49:0c:fb:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4B:05:4F:E1:41:7B:08:D9:5D:EF:1C:29:56:44:57:93:5F:80:CB
X509v3 Authority Key Identifier:
keyid:8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/2a2c194fb032ba4b9fb341f9ddd0298e1b6a34f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/32b7dede0ee425fb7f77655ae699df21e4d9273b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.195.247.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a1:a9:8b:03:d1:67:75:6d:b2:0d:cd:b0:9e:90:56:5a:e7:
dc:fe:eb:02:6e:fd:79:07:f4:3f:98:0c:fa:6f:83:90:17:8a:
f1:01:bf:c7:60:06:17:e0:94:4e:ef:89:53:2f:a1:6b:23:dd:
72:d3:61:2a:57:44:ac:f4:ec:0f:34:ed:e9:e2:05:b7:46:32:
69:f9:18:e2:4f:30:06:84:ab:57:67:70:4d:8b:c2:ca:8f:20:
bc:7a:c9:dd:81:15:91:b1:a8:8b:06:07:e6:c1:e0:b0:be:da:
e9:b7:9b:22:2e:9c:77:2d:e6:44:14:89:2e:ce:47:f4:78:a5:
85:6c:bd:f7:e0:0b:0d:6c:e7:a2:13:b4:89:90:1f:61:2f:ad:
80:09:16:b1:33:ae:53:79:ec:41:e1:e8:91:16:71:d6:41:75:
7f:a2:64:58:7d:fb:ae:09:4b:0d:8b:4d:e0:05:a9:78:49:c4:
79:9e:5d:0a:a9:16:ed:c1:f8:92:17:0f:92:6b:aa:2d:87:ff:
2b:a0:5f:18:72:fa:5d:0b:b3:47:d5:d9:39:4b:a1:7a:61:fd:
36:0d:20:23:1f:d3:bc:99:37:0c:6b:30:05:5d:c4:ab:48:18:
c0:29:8d:47:2c:f6:5c:ae:cc:63:c8:fa:54:46:46:7e:48:99:
c2:99:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 19:43:18 2024 by rpki-client on console-ams.rpki-client.org