Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/f4e3df0405e37755f2389219704d958b8485d747.roa
File: f4e3df0405e37755f2389219704d958b8485d747.roa (raw, json)
Hash identifier: 9j6RBxaROM75PndVvyyHhC4m/q504lbB6ZQHESeXeQI=
Subject key identifier: D6:20:68:60:1D:3A:AD:6B:AB:76:C6:02:9C:6C:B0:DE:8F:DB:CD:A7
Certificate issuer: /CN=98a80d301d847e6c050c408da1b0efe36548fad8
Certificate serial: 159A2C
Authority key identifier: 44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/f4e3df0405e37755f2389219704d958b8485d747.roa
Signing time: Wed 02 Mar 2022 22:51:02 +0000
ROA not before: Wed 02 Mar 2022 03:00:00 +0000
ROA not after: Sat 02 Mar 2024 03:00:00 +0000
asID: 264659
IP address blocks: 179.43.104.0/22 maxlen: 24
179.43.108.0/22 maxlen: 24
190.211.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1415724 (0x159a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a80d301d847e6c050c408da1b0efe36548fad8
Validity
Not Before: Mar 2 03:00:00 2022 GMT
Not After : Mar 2 03:00:00 2024 GMT
Subject: CN=f4e3df0405e37755f2389219704d958b8485d747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:1d:36:38:39:51:eb:cb:49:fb:5b:61:b8:
8d:50:b5:26:0d:e1:a2:72:a8:a7:81:4d:30:fa:5b:
6f:a5:a2:9b:5a:98:c3:a9:a5:34:e2:6b:31:b5:01:
c2:d1:91:7a:26:e0:4f:e6:7d:2c:c7:c8:e2:33:2b:
08:6e:5d:67:a2:5a:e2:aa:cf:22:e3:8c:3d:68:f1:
60:02:92:64:8a:73:2f:c1:4a:c8:4d:1c:65:28:7c:
55:30:23:91:3d:1a:43:69:a8:44:27:c9:8d:ea:ce:
16:92:59:5a:d8:4a:06:41:a1:88:1d:f9:3c:20:c3:
f2:f4:85:47:cf:65:71:20:f7:08:3a:99:7e:2a:76:
05:ab:7d:27:e6:ca:0a:3e:ca:9d:af:94:2c:7a:98:
31:81:ee:c4:fa:c6:ef:47:ea:02:e3:f3:45:25:25:
19:88:6b:02:17:2a:60:ba:5f:67:e8:77:4d:5b:4a:
d8:0c:f4:ae:fa:00:5d:60:9b:d5:a1:8f:3a:1c:88:
26:65:af:bb:9c:1f:5e:ee:7c:56:3e:2f:81:9e:be:
6a:98:cb:82:4c:41:d4:c8:08:2e:21:d7:10:41:1b:
ab:04:97:63:04:aa:88:04:e3:63:c2:d3:6d:57:65:
46:db:47:cd:95:6f:af:1f:a1:f2:d2:77:58:1d:70:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:20:68:60:1D:3A:AD:6B:AB:76:C6:02:9C:6C:B0:DE:8F:DB:CD:A7
X509v3 Authority Key Identifier:
keyid:44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/f4e3df0405e37755f2389219704d958b8485d747.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.43.104.0/21
190.211.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:08:74:18:07:6f:d0:28:e3:a4:ca:10:58:9c:00:ce:61:34:
68:cc:7c:c7:b1:a5:d5:9b:af:d5:95:29:9a:fa:13:fb:07:98:
34:79:6c:77:de:8e:b4:8d:e1:12:de:9c:b0:56:87:a9:b8:bb:
eb:9c:2f:12:01:5c:d3:73:96:58:d8:32:a4:79:a4:7f:be:e2:
d8:5c:64:a7:65:23:95:ec:a5:91:b8:2a:db:55:f3:2c:c3:f6:
ed:64:ef:1b:58:29:a4:eb:70:d9:25:6c:0f:01:1d:b0:34:28:
97:98:de:5a:0e:dc:f1:f4:3b:68:40:54:db:90:3d:e0:bc:ea:
b7:41:46:5a:52:1b:aa:15:8d:ad:b1:20:f3:a0:60:ee:b4:04:
22:4d:b6:cd:16:08:5d:d3:1e:49:42:49:d8:d7:00:45:84:bb:
3f:e0:fd:0b:4c:de:83:da:ee:d9:18:ba:14:9a:b5:2a:69:76:
68:64:d2:c4:37:c9:31:55:6c:08:9b:f2:55:9e:9f:9f:a7:68:
54:99:99:42:8a:be:ce:57:32:4c:4b:3f:f3:73:c7:62:bc:f4:
71:0e:41:52:51:30:9c:7c:fe:dc:b4:00:eb:f4:01:15:37:06:
a0:60:90:87:a2:cf:74:ba:f2:41:4b:28:e2:da:20:13:89:1e:
d8:b2:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org