Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/06e511881b8927ebf62da97044fe47e72a545f76.roa
File: 06e511881b8927ebf62da97044fe47e72a545f76.roa (raw, json)
Hash identifier: d+Zwohfv7r6t+Li/WAGgrv8OZ37lI7miNdpcdSw97Bc=
Subject key identifier: 44:54:0E:8E:29:2C:F5:30:15:DC:05:C4:0E:12:4B:A8:E8:EA:1B:B2
Certificate issuer: /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial: 1C8756
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/06e511881b8927ebf62da97044fe47e72a545f76.roa
Signing time: Wed 06 Dec 2023 15:22:48 +0000
ROA not before: Wed 06 Dec 2023 15:22:48 +0000
ROA not after: Sat 06 Dec 2025 15:22:48 +0000
asID: 264845
IP address blocks: 201.219.252.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869654 (0x1c8756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
Validity
Not Before: Dec 6 15:22:48 2023 GMT
Not After : Dec 6 15:22:48 2025 GMT
Subject: CN=06e511881b8927ebf62da97044fe47e72a545f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:c2:2b:4c:b2:fe:ca:7f:d9:83:9a:19:55:
42:8b:34:33:ad:56:30:5e:70:fb:5b:cb:47:11:05:
41:61:ae:a7:95:41:e1:90:08:50:5d:53:42:e9:16:
64:84:16:c7:3c:1d:da:6c:10:4a:34:8d:0e:8a:62:
53:72:62:a9:35:43:df:ee:37:d6:84:ab:c3:99:72:
31:49:40:db:0c:79:49:0b:e2:49:91:56:4a:6c:4c:
d9:51:34:3d:45:fe:0e:5f:b1:dc:4b:2f:b8:01:4c:
bc:49:29:81:93:48:3d:e6:d9:eb:26:79:a6:ff:82:
ae:c8:51:e5:35:77:d2:a0:0b:e0:35:65:4e:cc:5c:
b2:bf:f7:73:be:97:a0:c2:d6:d5:53:e5:a3:67:20:
cf:70:f4:eb:01:7e:18:54:22:3b:38:fe:1d:6c:d5:
35:01:2e:ff:2d:ee:c9:a2:04:fe:4e:fe:79:da:12:
11:c4:41:52:b5:64:67:6e:fb:49:01:94:30:88:e4:
57:19:1c:86:5a:2f:09:2d:1c:93:2e:b6:58:05:01:
4c:90:63:d8:59:09:b2:86:09:7b:67:b8:36:37:3c:
44:02:de:e0:9b:73:83:bb:be:6b:64:35:e1:4d:00:
58:45:b2:c5:77:bd:ab:3e:4c:fa:7d:bc:be:38:68:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:54:0E:8E:29:2C:F5:30:15:DC:05:C4:0E:12:4B:A8:E8:EA:1B:B2
X509v3 Authority Key Identifier:
keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/06e511881b8927ebf62da97044fe47e72a545f76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/23
Signature Algorithm: sha256WithRSAEncryption
31:1e:f3:ed:a0:ef:59:d4:91:34:10:1b:11:25:f1:46:69:ca:
0c:59:0d:5a:2f:81:df:f9:47:89:d0:e3:7b:f8:90:d1:10:56:
c1:cf:6b:a6:eb:44:8f:6e:1a:09:28:9f:ae:ec:a1:8b:0f:eb:
14:19:79:3e:c5:f4:86:ad:51:3c:0f:0e:d9:33:db:88:b5:b3:
21:d9:6d:6f:02:18:c9:d0:15:7e:c4:22:0b:16:7f:eb:e1:56:
3a:f7:53:4b:e5:f4:a4:a7:3d:91:ac:59:7b:85:7f:60:f9:20:
a7:45:06:a9:39:3b:3f:0a:1a:f1:ad:4b:58:21:42:9b:bb:bb:
a2:3f:76:f2:6e:c4:c4:ad:a8:da:24:49:7e:a7:ec:9a:f2:8f:
d5:e0:c9:eb:38:3e:17:f8:99:56:bb:04:43:7c:32:25:5d:12:
2c:93:63:6c:7a:7f:9f:2b:8d:af:67:b0:ce:34:ac:bb:3c:23:
64:ac:29:46:74:f9:06:97:46:35:72:80:e4:2e:2f:85:0c:c1:
10:4a:16:99:dd:e6:b5:47:24:c7:b4:09:7d:e8:5c:c4:4c:b0:
10:d4:fb:cb:ba:ae:6c:5f:37:dc:6a:61:be:9b:f0:b3:80:a3:
a6:20:f6:bf:54:cf:39:e7:2a:ca:21:65:68:2b:c9:c5:91:e7:
d7:7d:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 18:30:05 2023 by rpki-client on console-ams.rpki-client.org