Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/cc855728ffc23c453bdb5436cc2844e68e7f6980.roa
File: cc855728ffc23c453bdb5436cc2844e68e7f6980.roa (raw, json)
Hash identifier: NQshxJ8Ss6H36p8JY+jvJxXT9ehOxM+QzfJIB/f62Sc=
Subject key identifier: D4:85:D3:E0:0C:B0:58:82:B0:75:19:24:34:7C:11:6B:F3:A2:C6:9B
Certificate issuer: /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial: 0E12F5
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/cc855728ffc23c453bdb5436cc2844e68e7f6980.roa
Signing time: Mon 12 Jun 2023 16:16:27 +0000
ROA not before: Sun 11 Jun 2023 16:16:27 +0000
ROA not after: Thu 12 Jun 2025 16:16:27 +0000
asID: 263824
IP address blocks: 131.255.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922357 (0xe12f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Validity
Not Before: Jun 11 16:16:27 2023 GMT
Not After : Jun 12 16:16:27 2025 GMT
Subject: CN=cc855728ffc23c453bdb5436cc2844e68e7f6980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9c:57:95:e2:9f:39:27:1e:82:5d:ae:48:b7:
ab:46:70:66:5c:21:6f:aa:74:d0:35:cb:6a:db:2e:
97:8b:0c:3c:33:04:76:8a:2c:38:fb:a8:b9:05:58:
b7:95:dd:01:7d:0f:4d:83:54:a6:ea:1d:dd:e6:18:
42:6f:3d:e3:04:e7:59:07:92:1b:d2:45:e3:4d:b1:
f3:a2:07:96:2c:3e:7e:0f:5a:3e:32:c9:b1:87:8d:
ae:b6:2c:4a:65:ba:52:71:29:11:3c:f0:b0:34:d8:
ee:54:4f:44:57:80:a3:d4:71:90:48:d2:10:52:30:
12:fc:36:d5:6f:d9:cb:20:86:c5:9d:ff:31:6e:d3:
1c:8c:07:bb:72:8a:1e:dd:e2:4e:82:c7:ff:50:76:
ea:ff:3b:fa:34:b2:49:5f:bf:10:20:3d:70:51:c8:
a4:f3:e4:a7:c4:8e:52:5c:f9:4e:03:28:fc:f8:a0:
f3:69:71:52:3f:03:7f:da:9a:6d:72:d6:9b:9e:8e:
76:0b:73:e5:97:50:1e:84:cf:a3:f3:a1:c4:5f:f2:
26:6e:9f:c5:03:f2:46:d4:70:49:7c:ee:58:7e:5f:
c6:fb:76:84:e7:8d:09:ce:b6:54:ad:10:2e:4d:6b:
4a:3c:9e:8f:02:a2:de:d5:fb:b4:ef:71:23:cf:28:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:D3:E0:0C:B0:58:82:B0:75:19:24:34:7C:11:6B:F3:A2:C6:9B
X509v3 Authority Key Identifier:
keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/cc855728ffc23c453bdb5436cc2844e68e7f6980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.43.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d7:6a:d0:c4:22:fe:a3:a3:28:1c:20:95:c0:c3:4b:48:0f:
a4:cc:df:87:3e:9e:9a:66:c3:6b:96:2b:90:4b:9f:4d:2a:f3:
ec:db:0b:54:25:47:ca:19:44:f2:61:04:6b:c4:43:9d:cf:dd:
f5:cf:c1:26:56:b4:84:62:e0:da:2e:eb:15:56:1f:3f:8b:6c:
8a:79:e0:73:ad:30:46:2d:81:dd:2a:24:c8:65:e3:4c:ea:66:
91:52:c0:d3:8e:14:50:1e:90:66:53:92:82:16:70:ec:6a:1a:
52:7a:27:7a:6d:6e:81:21:eb:a2:c3:41:46:7b:0c:d1:3c:7c:
ea:84:26:85:94:f1:fc:8a:34:95:46:a6:18:67:2b:c3:08:d0:
ea:55:f2:be:69:9c:4a:a4:65:94:4b:7e:ff:d8:83:ed:51:9f:
9b:3a:7e:67:97:56:3c:6b:a6:42:7f:32:34:8f:b2:ca:94:c9:
ce:cf:67:be:51:f1:7b:73:2d:4d:6c:a9:40:d3:d7:9c:46:4e:
fe:2d:05:e1:14:4a:d1:10:7a:9e:b7:c4:51:93:f6:4c:51:e8:
07:b7:34:c8:38:7f:54:43:c4:5f:19:ce:1b:d9:da:a3:c4:fd:
8e:f0:65:7d:bd:a5:ca:14:e4:14:bb:5a:d2:a8:44:ff:24:fd:
9b:55:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org