Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/bf523a26e7c6229cf4bd159954dbf72b88746a22.roa
File: bf523a26e7c6229cf4bd159954dbf72b88746a22.roa (raw, json)
Hash identifier: zYgPdC3ppsDbHtDnaoO1mPu9GNlU9fGaL1cn0IBMCTc=
Subject key identifier: F5:49:4E:17:99:AE:28:74:A7:15:0E:A8:7C:EC:5B:79:CF:C4:61:07
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 0C9EFB
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/bf523a26e7c6229cf4bd159954dbf72b88746a22.roa
Signing time: Wed 24 Mar 2021 14:35:18 +0000
ROA not before: Wed 24 Mar 2021 14:35:18 +0000
ROA not after: Tue 24 Mar 2026 14:35:18 +0000
asID: 3273
IP address blocks: 66.231.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827131 (0xc9efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: Mar 24 14:35:18 2021 GMT
Not After : Mar 24 14:35:18 2026 GMT
Subject: CN=bf523a26e7c6229cf4bd159954dbf72b88746a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:97:c2:65:64:5f:e9:73:50:e5:cb:f2:d2:
30:d3:00:6e:92:6c:fc:c7:e4:66:21:d9:ec:d8:9a:
93:96:1b:e1:2b:b8:34:6b:b7:13:14:e5:bf:75:d5:
79:80:c7:48:43:13:b7:68:2b:92:fc:98:61:70:db:
e4:7b:dc:02:c5:78:cf:2e:dc:a9:e2:12:d0:c1:62:
b9:6f:72:87:1d:2e:0f:f0:7f:7b:d7:47:bf:12:38:
2e:10:ef:e9:69:32:3c:f6:42:ea:2c:72:fe:4b:e2:
38:1d:5e:94:15:d1:66:56:cd:b4:4a:5c:33:38:3f:
15:68:72:57:84:b1:d2:3a:61:cf:4c:76:ca:4a:16:
a9:69:1e:9f:d0:83:ae:5f:2c:07:df:f5:03:12:52:
17:b1:d3:b9:85:1c:f9:7c:73:09:9e:63:fd:ef:8e:
48:c0:05:0b:12:f1:70:65:5a:65:ec:e7:6c:43:e0:
7b:0d:60:c6:a1:bb:da:6e:fc:50:3b:a1:e2:eb:99:
2e:1d:10:0a:26:d5:85:b9:f5:b0:60:a7:57:a4:57:
98:86:eb:f7:79:20:d7:10:ee:0a:8d:ed:b6:53:2d:
c2:df:d6:80:3a:8a:50:e7:f7:01:f4:81:29:15:eb:
35:9c:63:f0:ef:b1:c9:20:d2:54:66:e1:aa:0c:e1:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:4E:17:99:AE:28:74:A7:15:0E:A8:7C:EC:5B:79:CF:C4:61:07
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/bf523a26e7c6229cf4bd159954dbf72b88746a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e5:3e:2c:c0:db:b7:d9:e4:3d:d9:9b:9e:65:cb:e2:81:b8:
28:b8:43:79:a0:42:2b:be:29:b7:c3:d6:5f:83:6d:a6:dc:e3:
40:64:3f:47:e8:48:dd:b6:2d:dc:f1:41:f4:ba:4a:2e:38:c4:
38:5a:f1:25:1d:06:31:46:4a:de:e0:b7:aa:a9:00:8e:cf:5f:
f9:e1:86:51:85:86:30:ba:7f:c5:a1:71:09:0d:cc:55:63:d2:
f9:08:a1:5c:9c:e7:52:a2:1f:d0:6b:92:d2:36:f9:95:f1:02:
83:a4:42:d9:d9:22:15:f2:27:10:ea:62:86:32:13:0d:57:be:
8e:63:0e:87:4b:8a:23:d0:21:95:f3:d1:82:91:38:d7:98:69:
0f:0e:aa:3e:dd:9e:7c:ef:89:64:5a:33:d5:36:e5:9c:b5:49:
33:a6:43:f2:c3:20:28:6c:2c:f0:f9:7e:20:da:ee:35:d9:c4:
ad:af:5c:5f:e1:29:17:6a:e6:4c:bc:8d:a7:43:b8:ff:ee:b4:
26:f4:0e:25:44:4d:0b:a0:5b:67:88:ca:8d:80:22:f4:53:fe:
08:3c:d4:ee:1a:01:fd:e5:6f:53:73:3c:95:60:9d:b3:73:90:
5f:cb:52:b1:c5:d3:49:60:52:57:22:2b:56:d1:ef:a3:60:18:
42:96:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org