Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/541ae65bbd1d7310e3ecbd7a0cb5657784090021.roa
File: 541ae65bbd1d7310e3ecbd7a0cb5657784090021.roa (raw, json)
Hash identifier: SnILbTK9ShInnRLLLKteC8KZxmF5pAofTJnQ/jOH1RI=
Subject key identifier: 06:3E:05:1E:17:91:D2:F6:F1:5A:85:01:57:52:AC:CA:07:60:E9:12
Certificate issuer: /CN=98a80d301d847e6c050c408da1b0efe36548fad8
Certificate serial: 157B49
Authority key identifier: 44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/541ae65bbd1d7310e3ecbd7a0cb5657784090021.roa
Signing time: Tue 01 Mar 2022 20:50:34 +0000
ROA not before: Tue 01 Mar 2022 03:00:00 +0000
ROA not after: Fri 01 Mar 2024 03:00:00 +0000
asID: 264659
IP address blocks: 179.43.104.0/22 maxlen: 22
179.43.108.0/22 maxlen: 22
190.211.140.0/22 maxlen: 22
2800:ae0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407817 (0x157b49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a80d301d847e6c050c408da1b0efe36548fad8
Validity
Not Before: Mar 1 03:00:00 2022 GMT
Not After : Mar 1 03:00:00 2024 GMT
Subject: CN=541ae65bbd1d7310e3ecbd7a0cb5657784090021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:5e:24:65:7a:c6:9e:c4:8e:17:bd:a9:6b:
93:d7:6b:0b:13:1d:27:d9:e6:1b:25:6e:23:f7:b1:
56:d9:e3:37:67:4f:fc:ef:3f:da:cb:47:96:df:16:
b2:f9:5a:1f:63:2e:29:b1:f9:f7:e9:48:1f:38:37:
b8:0c:de:97:d7:47:fe:ea:61:76:43:f7:16:55:d8:
de:e0:09:30:d4:69:0a:ec:98:d8:12:4f:4d:10:88:
46:d9:72:82:f6:28:30:90:cd:2d:6c:ce:87:41:a6:
eb:f5:cf:5d:0b:c2:a7:20:d8:81:7c:2b:d0:e6:e5:
97:85:b0:97:9d:33:95:ca:3a:0c:d4:55:d5:81:82:
77:83:2a:68:6d:6e:4c:d9:e2:b1:a6:1a:ff:60:8e:
c4:71:93:75:7e:95:b8:65:1e:56:bb:d6:b5:08:19:
f4:69:1f:d0:ed:2b:bf:a0:fe:13:1c:63:01:1d:f1:
3a:a8:68:bb:7c:85:31:2b:b2:9e:b5:4d:b9:63:44:
e5:74:4b:9a:c1:3c:f6:e0:7e:11:63:8f:6f:1e:dd:
f4:42:f7:e2:0d:c1:f9:38:81:39:35:8c:e7:34:4b:
5a:79:c3:1c:f5:1a:e5:10:3f:71:85:7e:03:7c:38:
6b:65:d2:59:e4:1a:22:f6:74:dd:8c:08:3b:37:70:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:05:1E:17:91:D2:F6:F1:5A:85:01:57:52:AC:CA:07:60:E9:12
X509v3 Authority Key Identifier:
keyid:44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/541ae65bbd1d7310e3ecbd7a0cb5657784090021.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.43.104.0/21
190.211.140.0/22
IPv6:
2800:ae0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:da:44:60:44:e9:ed:61:f0:63:3a:1a:ce:2a:1f:6c:4c:12:
b8:f9:cd:9a:aa:8b:1c:4c:ce:e3:b4:0c:6b:55:93:75:4b:bb:
d7:de:01:19:81:87:fe:87:ad:15:99:80:59:1e:9c:3d:ca:f7:
7b:ed:5a:89:f8:fa:07:e9:6b:79:75:6e:e8:b2:b8:27:fe:47:
01:fe:50:2f:f5:f6:96:37:63:4e:5b:b6:b2:8d:36:15:9c:cc:
d9:88:2a:7f:5b:9e:0c:7d:14:50:ae:83:6c:24:ed:5c:b1:2d:
bb:70:dd:85:66:c9:51:0c:c5:8c:8f:6a:b9:39:b3:3c:5c:a2:
5f:3f:9a:ba:40:48:94:e0:8e:de:89:b6:bf:c2:05:a3:a5:58:
a4:36:80:0d:5c:93:dc:a6:08:de:71:e7:7b:2a:33:fa:ee:3e:
09:82:71:1b:d7:01:8b:25:5f:55:2e:4b:7b:ef:f0:eb:99:40:
3f:4b:65:6e:19:e0:15:06:e9:66:0b:8f:0b:d5:46:7d:79:93:
e3:54:e1:89:87:bf:e7:e1:50:68:20:ce:9b:84:39:a5:ae:3c:
95:43:4f:3f:2e:97:53:f7:af:b6:d0:7a:03:ed:7e:23:21:63:
3c:a5:90:27:1a:69:ee:07:4b:d8:74:ff:ef:16:c5:81:12:ae:
84:8f:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org