Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa
File: 3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa (raw, json)
Hash identifier: B1yugwJOy+2YM/CKbFaehlHS1N5Aybm9jToG3pMvheI=
Subject key identifier: 4C:51:9D:ED:B3:5D:22:40:3F:48:76:0D:80:BD:0F:AC:D7:6F:BA:34
Certificate issuer: /CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Certificate serial: 0E0289
Authority key identifier: B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa
Signing time: Sat 24 Sep 2022 02:23:27 +0000
ROA not before: Tue 06 Sep 2022 01:52:16 +0000
ROA not after: Fri 06 Sep 2024 01:52:16 +0000
asID: 64139
IP address blocks: 207.248.0.0/22 maxlen: 24
207.248.0.0/24 maxlen: 24
207.248.1.0/24 maxlen: 24
207.248.0.0/23 maxlen: 24
207.248.2.0/24 maxlen: 24
207.248.3.0/24 maxlen: 24
207.248.2.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918153 (0xe0289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Validity
Not Before: Sep 6 01:52:16 2022 GMT
Not After : Sep 6 01:52:16 2024 GMT
Subject: CN=3170e64a127bf589ddb1b6bb21d33e5dc532d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:6d:ba:39:0f:2f:eb:88:1e:0f:11:81:c8:
ba:4f:d1:90:48:ff:e7:1b:98:1e:03:fe:b0:e4:a9:
cd:12:9f:9e:49:fb:9b:4f:da:72:bd:c3:1c:5f:49:
0b:6e:f3:24:3e:3a:d2:b1:cf:c6:00:f1:b9:b4:13:
0b:35:e0:35:4c:f5:91:fc:36:e1:43:79:67:ea:8d:
89:7c:3f:af:5f:12:32:a2:a8:fb:1d:9d:a2:c1:02:
f5:49:3f:de:1c:fe:55:fd:af:bb:ab:58:84:28:9b:
62:17:2c:fa:e7:dd:01:08:6e:13:fd:1e:69:87:e5:
db:ef:0e:23:88:84:24:c1:84:bb:4e:7f:e9:4e:b4:
92:dd:6b:af:67:a2:21:6e:4d:d0:d1:b7:1b:87:69:
dc:66:be:4d:cf:66:da:e4:0f:97:fa:c3:b1:3c:9b:
11:56:6e:29:55:f6:a0:66:a9:ba:06:c1:15:6f:7d:
df:45:cd:f5:1d:98:ee:e6:c3:ae:13:bc:61:6a:b3:
cb:0e:44:37:18:83:e9:6c:85:68:76:df:de:be:f9:
6a:65:d5:b5:33:23:6e:17:76:72:3a:c6:f6:e2:5d:
a3:11:03:14:e5:bf:34:8b:bc:b1:be:76:2a:0f:11:
26:62:40:c5:8e:3a:0e:a3:34:0a:c2:2a:ed:29:e5:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:9D:ED:B3:5D:22:40:3F:48:76:0D:80:BD:0F:AC:D7:6F:BA:34
X509v3 Authority Key Identifier:
keyid:B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/3170e64a127bf589ddb1b6bb21d33e5dc532d639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.0.0/22
Signature Algorithm: sha256WithRSAEncryption
80:aa:f7:e0:14:14:37:fa:b4:74:b5:9a:82:27:a8:b3:47:73:
02:6d:db:4e:7e:cf:32:61:e1:a6:8a:aa:33:7d:78:fb:f8:e8:
ef:a1:f9:b3:58:8c:56:f1:70:7d:29:78:e1:77:ab:4d:05:65:
dd:ab:49:33:66:08:a7:a9:47:db:9f:e7:11:ec:12:e8:0c:b5:
cc:b6:f4:0e:90:26:07:3a:6b:d0:88:b6:b3:7c:f1:16:50:72:
4b:e1:d0:24:67:54:88:b4:5a:2f:dd:34:b8:ec:1d:fa:9e:51:
ac:26:e5:e5:5c:7d:b6:ff:f7:92:a2:b9:26:0b:18:94:23:fd:
20:e4:d6:82:61:d9:7d:0b:06:e7:22:88:ad:dd:34:48:65:4c:
d3:cd:b6:13:ab:05:8c:b1:47:3e:ba:8a:4e:56:66:b1:ea:b1:
10:2b:94:e5:a2:d6:2e:70:e8:bc:52:02:4f:37:0d:dd:ff:c1:
35:54:6c:c8:9f:4e:18:62:fc:b0:bc:09:ce:15:30:76:50:92:
71:22:e3:40:13:1e:a4:7d:ce:b5:90:71:88:12:93:c3:96:cc:
e6:b2:31:47:07:01:14:43:65:bf:f7:81:5b:e3:45:52:8d:fa:
96:53:25:1d:da:fb:e7:1b:7f:6b:7f:81:f0:82:68:fe:4b:6a:
8e:60:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org