Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2c4095e7fb2382264ffb6bb510a58525fecb4095.roa
File: 2c4095e7fb2382264ffb6bb510a58525fecb4095.roa (raw, json)
Hash identifier: xeP3FgRImUXngXHhVByDSn06/h5WDn/f9i7+MWx/CKk=
Subject key identifier: A8:2F:4C:F2:28:F2:A8:07:22:D3:FC:9E:21:61:93:F5:A4:71:9C:A6
Certificate issuer: /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial: 2345DB
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2c4095e7fb2382264ffb6bb510a58525fecb4095.roa
Signing time: Mon 14 Aug 2023 20:07:28 +0000
ROA not before: Sun 13 Aug 2023 20:07:28 +0000
ROA not after: Thu 14 Aug 2025 20:07:28 +0000
asID: 6535
IP address blocks: 179.4.0.0/16 maxlen: 18
186.20.0.0/15 maxlen: 16
179.2.0.0/16 maxlen: 18
Validation: Failed, certificate revoked on Tue 06 Feb 2024 15:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2311643 (0x2345db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Validity
Not Before: Aug 13 20:07:28 2023 GMT
Not After : Aug 14 20:07:28 2025 GMT
Subject: CN=2c4095e7fb2382264ffb6bb510a58525fecb4095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:78:4c:56:2e:b1:ce:d2:dc:f2:2f:27:6c:
7e:7f:cd:36:63:5c:2a:30:ee:5a:90:30:51:1e:82:
12:ee:ed:1c:9a:d4:20:86:d5:07:45:c8:43:ae:c8:
2b:29:ea:97:39:69:7c:78:9d:55:cf:ea:c3:9e:d3:
49:4e:68:15:13:ce:1d:12:43:86:09:b5:ec:1a:31:
64:fa:3e:6f:74:78:ca:d7:6e:1e:e2:a1:ed:03:d2:
da:5b:eb:33:8d:56:93:6f:2c:6d:ca:4c:48:c9:b7:
65:a5:93:a9:27:37:88:59:b1:51:29:d4:71:c6:42:
b7:23:c3:55:cf:6d:77:1a:cd:9f:c0:7d:96:20:0f:
2f:d5:cf:9c:51:e4:20:d9:c7:1b:53:8d:49:51:03:
1d:fb:a1:47:3f:af:12:70:70:f8:b5:cb:e2:9c:6a:
0a:52:04:31:4e:3a:d3:4d:e5:51:a6:4d:12:56:ee:
0c:49:50:bc:bc:43:d9:ac:26:6d:09:fb:0e:03:fa:
27:42:58:af:9b:24:e4:17:fa:03:e0:23:6a:c9:fa:
a1:22:4e:76:19:c5:fc:cb:36:f2:dc:f2:27:6e:b7:
c1:8e:86:57:b9:df:81:e3:52:e0:a0:3a:dd:68:01:
c7:f4:44:f6:04:71:2a:e1:da:93:1c:e1:9c:7a:38:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2F:4C:F2:28:F2:A8:07:22:D3:FC:9E:21:61:93:F5:A4:71:9C:A6
X509v3 Authority Key Identifier:
keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/2c4095e7fb2382264ffb6bb510a58525fecb4095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.2.0.0/16
179.4.0.0/16
186.20.0.0/15
Signature Algorithm: sha256WithRSAEncryption
94:d3:3c:b7:18:f0:fa:97:23:60:fe:88:52:d5:5a:7d:5d:4e:
5b:71:1f:27:51:79:16:83:30:2d:ff:da:f7:c9:f0:95:63:6f:
b1:a7:5f:b0:5b:79:cb:42:9c:98:bf:47:a9:78:cf:ab:18:6e:
dd:67:b2:84:74:64:19:dc:58:10:01:6f:44:29:39:61:89:3d:
49:62:7b:78:69:6d:e7:af:78:8b:24:28:1a:e4:5f:53:2b:76:
9e:2b:30:44:50:09:24:c2:a0:0f:f3:8a:87:e3:c9:24:12:a9:
d7:54:37:88:78:f2:7a:d5:93:5c:04:56:7a:74:6a:28:40:6a:
1f:c5:fa:78:a8:d2:57:d2:10:24:40:10:0c:d4:35:9b:75:83:
ed:81:58:e8:6e:74:2f:b2:31:e5:b6:a8:c9:51:6a:65:ac:45:
cf:b1:65:3c:15:a4:ac:be:de:d7:cc:90:31:54:05:d6:6f:97:
3b:7f:f9:a4:21:ac:e2:37:4e:12:2a:cc:8a:cb:55:ec:c0:33:
6d:82:98:5a:50:65:8a:50:05:d6:f5:a1:12:4a:74:e3:2d:d5:
63:24:fe:ce:f8:f8:df:56:71:a6:93:2e:be:80:20:d9:72:6b:
2f:3f:e3:eb:08:7c:28:45:86:55:af:37:b0:84:0a:a4:a3:30:
df:93:af:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 21:13:18 2024 by rpki-client on console-ams.rpki-client.org