Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/f4338bfe198aa4abbf4a2d5ec041c3518865b6de.roa
File: f4338bfe198aa4abbf4a2d5ec041c3518865b6de.roa (raw, json)
Hash identifier: 7yrGGtXEsLF9iW/IYyxKf6fpCY/m2ouljm7toVhLGK8=
Subject key identifier: 69:2E:9B:D0:BC:3D:BD:23:E9:61:E7:3E:2C:2A:90:0F:F0:61:B4:EA
Certificate issuer: /CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Certificate serial: 06B3
Authority key identifier: FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/f4338bfe198aa4abbf4a2d5ec041c3518865b6de.roa
Signing time: Mon 03 Apr 2023 18:04:57 +0000
ROA not before: Sun 02 Apr 2023 18:03:33 +0000
ROA not after: Thu 03 Apr 2025 18:03:33 +0000
asID: 272973
IP address blocks: 181.224.220.0/23 maxlen: 23
181.233.152.0/23 maxlen: 23
2803:1590::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Validity
Not Before: Apr 2 18:03:33 2023 GMT
Not After : Apr 3 18:03:33 2025 GMT
Subject: CN=f4338bfe198aa4abbf4a2d5ec041c3518865b6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:75:61:47:29:72:f8:a7:ca:22:03:d1:9a:
3b:44:76:d4:19:db:fc:16:70:ef:54:af:dc:e7:72:
c3:b6:56:60:40:1a:69:e7:86:58:3f:83:a9:d4:fd:
db:7b:69:13:c3:2c:a9:19:a6:a2:5d:00:e1:2b:32:
e0:58:40:b1:8d:59:98:55:54:4f:7f:c1:db:da:b8:
af:bf:f2:22:19:48:51:2d:c6:ca:5d:d4:dd:7e:85:
c5:f4:9d:58:fa:69:c4:ec:31:8a:45:2f:69:34:c5:
33:65:82:42:51:a7:8e:4c:7a:93:ee:f5:e8:33:fe:
b1:a8:6b:5d:0c:66:d3:f6:76:d4:14:1d:d2:7e:50:
64:25:3b:e8:13:b1:2b:ba:55:1c:c2:26:8e:fd:2b:
92:5d:69:33:82:56:3d:64:b8:1e:fb:29:a6:cc:7a:
79:77:5b:01:cb:5f:7b:f3:4e:9c:35:1b:d7:69:38:
c8:ae:1a:22:9c:f9:8d:5f:ce:53:9b:36:ec:3d:11:
ad:f0:c0:d5:27:9e:c3:4c:f5:29:7b:83:25:c6:40:
8c:cd:41:f8:77:49:ad:10:e2:c0:29:11:71:92:76:
13:73:cb:60:d2:5b:1c:4f:17:a9:6c:de:8e:83:14:
97:97:ba:14:d6:a4:ad:3e:a1:81:07:9a:cf:64:99:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2E:9B:D0:BC:3D:BD:23:E9:61:E7:3E:2C:2A:90:0F:F0:61:B4:EA
X509v3 Authority Key Identifier:
keyid:FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/f4338bfe198aa4abbf4a2d5ec041c3518865b6de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.220.0/23
181.233.152.0/23
IPv6:
2803:1590::/32
Signature Algorithm: sha256WithRSAEncryption
52:1a:4f:aa:fa:cc:e6:3e:f3:47:a3:8e:cf:b1:26:49:ee:a8:
d0:94:07:a8:eb:7e:6c:41:cd:7a:a6:cd:df:98:98:03:9c:3b:
79:c5:1d:57:09:8a:1a:34:d2:b0:f3:a4:31:ac:af:ca:ed:ab:
4d:60:9b:1e:64:49:2c:3f:d7:4b:ad:eb:6e:f6:0b:d0:40:e5:
b8:64:a7:61:84:95:11:c7:96:c5:84:40:3f:2b:d1:23:2d:d4:
47:2a:dd:d6:fa:58:ec:96:16:ca:d0:05:f5:a0:f2:5b:85:0e:
5e:93:de:2b:01:3a:5c:3b:5a:ec:1f:00:9b:28:7b:49:16:46:
05:43:4b:41:1b:84:70:b1:7a:e8:9c:1e:45:6b:fe:05:06:23:
de:5f:54:24:bf:99:8a:53:80:1c:70:75:bc:20:0d:59:18:a6:
be:e2:13:64:90:ee:81:6e:96:34:46:3b:62:76:3b:21:61:11:
f7:35:65:cd:b9:c7:f3:4a:52:11:00:4f:f3:2e:4e:8f:3d:ab:
b7:d1:15:74:5c:91:5d:da:fd:61:5d:fa:4e:cc:81:18:f2:19:
1d:6a:dc:45:47:27:2f:df:9e:eb:64:30:26:c6:24:48:30:73:
b8:c9:c6:bc:b1:82:27:ba:81:fc:6c:f9:e2:12:83:c5:0c:e4:
e3:0b:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org