Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/9b6c2fdfa48d4403a4f959b13de83fb0864e5104.roa
File: 9b6c2fdfa48d4403a4f959b13de83fb0864e5104.roa (raw, json)
Hash identifier: ef/Xp9J1oYTuvmyx8cMApv2Vh2QWWtyhvQq2BNY26ZY=
Subject key identifier: 6B:13:C5:13:DB:5D:10:D8:E3:E9:DB:DC:78:A1:E7:7E:82:C6:AC:ED
Certificate issuer: /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial: 24343F
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/9b6c2fdfa48d4403a4f959b13de83fb0864e5104.roa
Signing time: Tue 17 Oct 2023 21:52:02 +0000
ROA not before: Mon 16 Oct 2023 21:52:02 +0000
ROA not after: Fri 17 Oct 2025 21:52:02 +0000
asID: 273041
IP address blocks: 168.234.75.0/24 maxlen: 24
168.234.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372671 (0x24343f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
Validity
Not Before: Oct 16 21:52:02 2023 GMT
Not After : Oct 17 21:52:02 2025 GMT
Subject: CN=9b6c2fdfa48d4403a4f959b13de83fb0864e5104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:1d:ed:b2:00:69:17:70:04:82:79:b5:2c:
a4:31:f8:c9:7e:24:40:97:1f:0a:a1:cb:38:b5:c3:
20:d6:de:f4:bd:e6:e2:4e:30:66:67:60:06:09:2d:
f1:3c:35:23:a1:55:a0:3e:f2:d1:ae:b6:00:4a:0e:
90:1d:a2:ed:89:de:19:ec:b5:de:b3:42:14:bc:ae:
82:c6:a3:e1:cb:6e:d2:e9:f5:c4:e4:79:3f:ab:8f:
20:99:a8:39:d1:9a:01:91:16:f7:c4:c7:ab:c4:dc:
08:20:2c:14:fb:17:dc:2d:af:fa:61:97:af:ba:2b:
b2:eb:cb:b9:82:ce:6a:aa:ac:23:9e:7d:5f:08:4c:
25:61:2c:8f:6c:31:32:74:46:9e:c6:c9:42:cf:d4:
2f:1d:f0:2d:56:48:0e:34:14:9e:18:c5:0e:6c:91:
9f:68:8c:11:bb:e6:61:f0:47:4b:ca:dc:83:a2:fd:
08:d3:13:f6:24:87:e6:2e:80:c4:f5:94:27:86:77:
80:fe:d7:24:13:76:8c:11:c3:64:9d:c1:13:15:b9:
22:da:0e:9d:cb:5b:53:28:4b:a4:97:d9:33:0f:d3:
09:e7:4c:2e:32:06:53:70:4d:3f:f3:df:82:72:da:
b6:44:67:b7:02:c4:df:04:bc:d7:d7:0d:e7:aa:f4:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:C5:13:DB:5D:10:D8:E3:E9:DB:DC:78:A1:E7:7E:82:C6:AC:ED
X509v3 Authority Key Identifier:
keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/9b6c2fdfa48d4403a4f959b13de83fb0864e5104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.75.0/24
168.234.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:12:e4:ee:e7:40:8d:2d:14:2f:0d:2b:3e:61:ab:e7:10:55:
91:30:e5:65:93:56:0d:f6:15:fd:54:da:9c:58:97:11:4c:47:
0f:47:ee:d0:9a:a5:88:2d:94:8a:a0:45:79:61:67:8a:72:4f:
e4:49:2b:93:f4:12:bd:e7:50:6e:1f:40:11:32:a2:22:5d:b4:
71:fb:e6:74:8d:33:78:99:49:b1:bd:8a:89:fe:99:c9:b8:44:
62:1e:96:cc:13:c1:74:cb:a6:46:fe:ed:f2:5c:fe:e5:88:2e:
84:ed:85:7b:9b:b0:f6:eb:06:ce:00:6b:a1:6c:a5:b1:dc:28:
95:f7:19:bc:fe:2a:b1:74:4d:10:24:c1:d8:e1:21:ae:d5:12:
16:0c:cd:5c:7e:1f:ae:4c:3f:29:9b:55:a7:f4:59:ec:73:04:
15:38:8d:93:e3:b7:7f:97:3a:c2:c5:44:0f:21:96:14:f0:bf:
cf:85:9d:1e:dc:ba:f0:5c:bb:2d:1c:f4:ae:99:11:e6:ab:a3:
c8:a7:7b:2b:3b:46:01:2f:e8:87:fd:cc:5d:9d:06:31:95:27:
d2:c2:17:22:a8:29:97:be:4e:8b:7b:e8:ed:7d:71:1f:08:83:
b2:96:95:5c:42:b2:dc:5b:20:43:d2:0b:ed:65:45:52:a7:fb:
39:7b:e4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net