Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/b60ed0df18241937d9d65071b72e3e04334f0b1e.roa
File: b60ed0df18241937d9d65071b72e3e04334f0b1e.roa (raw, json)
Hash identifier: UIER3pCjycwPv3MyOwzcs/pmnte7QWxZGnfzCXxRjEg=
Subject key identifier: E1:1B:11:AB:E4:D4:C1:9F:46:2A:DE:E3:14:5C:5A:97:79:FB:A5:9F
Certificate issuer: /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial: 1DC6DB
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/b60ed0df18241937d9d65071b72e3e04334f0b1e.roa
Signing time: Fri 05 Jan 2024 18:11:42 +0000
ROA not before: Fri 05 Jan 2024 18:11:42 +0000
ROA not after: Mon 05 Jan 2026 18:11:42 +0000
asID: 264845
IP address blocks: 2800:700::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951451 (0x1dc6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
Validity
Not Before: Jan 5 18:11:42 2024 GMT
Not After : Jan 5 18:11:42 2026 GMT
Subject: CN=b60ed0df18241937d9d65071b72e3e04334f0b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:27:dd:42:93:f3:b8:53:fe:a9:1f:eb:14:
cf:46:41:e0:7b:b4:bb:90:36:31:0e:1c:37:cc:99:
6a:20:cc:ce:78:29:6a:3c:44:34:6d:a7:68:6d:7a:
43:86:7b:e9:a6:17:f4:6e:b2:31:6a:8c:a3:18:23:
d7:e1:83:b6:74:87:68:e2:7f:8f:ba:31:09:80:c0:
a5:0b:73:7d:05:7d:0b:2a:8a:69:97:a7:79:a5:aa:
da:87:34:cf:2c:a0:3c:e4:f1:f9:39:1c:22:53:1c:
d0:de:5e:be:b1:e5:45:ec:82:ec:b5:59:76:91:02:
78:fa:7f:05:c6:b0:61:ce:bf:38:6a:fb:db:59:b2:
9c:cb:4d:05:c4:4d:70:4c:72:8d:af:1d:29:f6:35:
e6:67:97:c6:90:40:7e:2b:8c:00:78:d6:f5:b3:c1:
b8:65:3c:bd:30:f0:de:15:74:84:96:26:88:17:b0:
1b:36:84:f5:06:a1:be:37:93:bf:c5:97:40:92:bb:
af:62:29:85:dd:3f:64:96:c6:33:43:b4:fd:b7:d6:
23:6d:ad:65:cd:02:76:b9:65:17:8e:a8:40:84:50:
09:d8:a0:27:e4:84:72:3d:d3:fa:34:80:d6:69:bb:
7a:de:3c:c4:99:98:6b:21:cd:26:8f:de:5a:e3:87:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1B:11:AB:E4:D4:C1:9F:46:2A:DE:E3:14:5C:5A:97:79:FB:A5:9F
X509v3 Authority Key Identifier:
keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/b60ed0df18241937d9d65071b72e3e04334f0b1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:700::/32
Signature Algorithm: sha256WithRSAEncryption
88:90:f1:93:76:18:60:a5:78:91:4f:74:47:3a:ec:9b:9a:1b:
8c:b5:4d:7d:d7:30:73:73:3c:ac:72:98:e7:a2:ee:12:28:14:
93:53:1b:77:ff:3f:99:19:e5:28:6a:9c:af:7c:2a:4d:57:fe:
14:74:32:b6:da:43:6b:ab:f9:04:6a:17:17:dc:e6:9a:f9:21:
3e:65:1b:e6:9c:df:b4:bc:20:af:46:4c:02:fe:c4:b4:7f:aa:
a9:22:e2:c6:75:ad:b6:07:da:26:56:ed:55:a3:15:9b:5d:55:
f2:a5:87:ea:33:57:f4:d3:11:56:0f:ac:f9:3d:0a:df:a1:b6:
9b:d4:f6:91:25:03:b3:cf:60:84:3c:7b:00:74:54:2b:28:f7:
4b:5e:47:f1:9d:4a:b9:de:66:31:84:cb:46:f5:3c:1c:43:ef:
ba:b3:a1:50:e3:10:ef:7c:c5:d9:0e:0d:e8:0b:bf:fa:a1:b7:
4b:c5:bd:8b:43:aa:04:de:e5:7c:e1:3a:54:55:6b:3e:ea:91:
e4:00:1f:e6:57:4c:a1:96:d4:a1:b5:0c:15:ea:49:7d:8e:61:
63:e4:c8:ec:25:22:55:d0:45:cc:2f:bb:ca:35:01:1e:35:9c:
a7:00:f0:44:7f:e2:2e:f5:20:12:4c:3c:08:d9:b4:f2:4d:0b:
e1:e8:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 21:04:01 2024 by rpki-client on console.sobornost.net