Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/9ec9a28e5b499220d9293d927ad427ac2f5220ee.roa
File: 9ec9a28e5b499220d9293d927ad427ac2f5220ee.roa (raw, json)
Hash identifier: 7PZlO5K+6/VyRtT3JmjJvHeA1tHkoKv1/0jwASWs8ok=
Subject key identifier: F6:9B:7D:54:51:4B:70:01:4E:15:C1:06:0E:79:08:16:89:3C:26:4E
Certificate issuer: /CN=c355af2587e04fcb2db519de3ca0af885d613b77
Certificate serial: 23F195
Authority key identifier: BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/9ec9a28e5b499220d9293d927ad427ac2f5220ee.roa
Signing time: Mon 02 Oct 2023 18:28:43 +0000
ROA not before: Sun 01 Oct 2023 18:28:43 +0000
ROA not after: Thu 02 Oct 2025 19:28:43 +0000
asID: 0
IP address blocks: 168.227.20.0/24 maxlen: 24
168.227.22.0/24 maxlen: 24
168.227.23.0/24 maxlen: 24
2803:fd40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355605 (0x23f195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355af2587e04fcb2db519de3ca0af885d613b77
Validity
Not Before: Oct 1 18:28:43 2023 GMT
Not After : Oct 2 19:28:43 2025 GMT
Subject: CN=9ec9a28e5b499220d9293d927ad427ac2f5220ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:c0:e5:57:e8:05:c0:92:17:af:e1:92:9c:
d0:e5:68:44:99:07:b2:e2:37:a8:85:55:54:50:db:
fe:68:ee:75:22:1d:84:8d:c4:14:0b:59:0c:f2:0b:
8f:73:fb:72:0b:91:fb:c1:0f:21:bf:d7:33:72:cf:
c6:ac:a6:5c:13:76:48:d1:e8:1c:6c:65:87:9c:42:
3b:7d:9e:a6:34:9a:79:6b:3c:d4:d2:b8:02:da:94:
d5:fa:04:a9:93:dd:0b:d4:6e:95:58:04:0c:4c:67:
4b:5f:ec:3d:72:06:a0:57:9c:d7:9e:39:00:94:93:
85:9b:e4:86:bc:23:ea:db:8d:ab:ac:d3:3e:31:c6:
a4:51:37:e0:a2:b1:86:36:1f:27:c9:7e:07:aa:24:
d4:2c:7f:bd:d8:e1:8b:d9:24:06:b4:16:de:7e:27:
32:75:73:2f:07:32:91:4a:2f:9b:e8:5f:9a:26:10:
1c:ba:c4:07:0e:d9:b4:25:18:97:eb:bc:ba:49:1e:
56:6e:c3:f6:4b:33:eb:27:3d:d9:f0:b8:14:fc:9e:
1d:cf:a3:04:2f:c7:76:06:2d:57:74:d2:42:20:a2:
1e:4e:28:fc:1b:ac:b0:83:6e:28:e0:3f:51:bc:e5:
9f:54:12:e0:59:ba:cc:78:08:24:ea:bc:1f:a1:b6:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9B:7D:54:51:4B:70:01:4E:15:C1:06:0E:79:08:16:89:3C:26:4E
X509v3 Authority Key Identifier:
keyid:BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/9ec9a28e5b499220d9293d927ad427ac2f5220ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.20.0/24
168.227.22.0/23
IPv6:
2803:fd40::/32
Signature Algorithm: sha256WithRSAEncryption
85:26:3e:eb:df:38:8c:83:ff:d5:7d:cf:92:04:cc:6d:f7:25:
23:6b:a4:fa:44:5d:ed:1a:ef:4b:ce:22:2a:ff:25:83:3a:74:
c9:a8:f4:e4:84:32:e9:a3:7a:6f:45:53:08:a2:8c:bd:fc:88:
5a:b4:9a:32:66:2f:b8:3d:f0:e2:c5:fe:2a:8f:40:bc:31:cc:
bb:93:b0:a8:3c:4f:c4:53:f4:dd:ab:63:a7:a6:57:39:0d:9f:
ca:20:5c:6d:3f:68:7c:74:49:b2:6f:de:3e:b8:bc:5a:1c:99:
41:ce:b7:78:79:fe:cf:17:75:c1:ac:1b:97:25:2f:93:32:6c:
78:50:0e:08:7f:41:72:48:4c:96:76:1f:e2:b7:46:ef:ff:38:
76:bc:91:4e:30:f9:cd:ed:02:b2:27:ce:3a:29:d4:8e:35:79:
2b:16:04:05:9e:0e:3a:2b:50:bc:7c:9d:bf:e0:fb:80:da:11:
e0:65:ae:82:bb:5a:55:9c:43:d9:41:15:74:54:40:26:7f:14:
7f:8d:8a:2d:ba:0f:ca:8b:d8:0a:ca:83:47:39:df:ed:3b:9d:
81:4d:f4:6e:f5:14:01:c7:00:d6:9a:d5:37:60:c5:6f:de:f4:
ac:9d:5b:fd:47:4b:70:24:36:1b:bc:c1:9a:52:61:04:78:7c:
7f:31:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 20:19:09 2023 by rpki-client on console-fra.rpki-client.org