Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/b8a6ebda0d0379478f4fb47f70edf50296213289.roa
File: b8a6ebda0d0379478f4fb47f70edf50296213289.roa (raw, json)
Hash identifier: XIW5dOBfuxx5gBXeehajMGfbyO85BCOqK23tCjXX1mM=
Subject key identifier: E5:23:CE:EE:9E:68:E9:24:A3:3F:1F:CF:02:6F:1F:4C:80:5B:18:D9
Certificate issuer: /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial: 03D01A
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/b8a6ebda0d0379478f4fb47f70edf50296213289.roa
Signing time: Thu 05 May 2022 18:29:40 +0000
ROA not before: Thu 05 May 2022 03:00:00 +0000
ROA not after: Wed 05 May 2027 03:00:00 +0000
asID: 272086
IP address blocks: 189.85.42.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249882 (0x3d01a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Validity
Not Before: May 5 03:00:00 2022 GMT
Not After : May 5 03:00:00 2027 GMT
Subject: CN=b8a6ebda0d0379478f4fb47f70edf50296213289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:a5:1f:64:83:ea:5e:b9:3c:d5:2c:1b:73:
e8:07:2d:f6:09:6a:ef:d4:3b:a8:1c:31:47:76:ad:
8f:6e:b9:fc:09:a9:60:be:02:d5:b1:9e:4f:86:15:
dd:d3:75:0f:01:45:cb:30:b3:c5:e3:37:4c:ee:c3:
5d:d7:2f:25:e0:77:fe:20:c4:52:20:6b:45:60:91:
38:43:22:7a:99:f0:13:9d:a9:45:8f:11:cd:95:6f:
ce:c9:87:01:88:87:ba:69:43:44:04:0f:57:ee:d0:
0e:d6:2b:b6:2c:a4:43:e0:ca:4e:54:b9:b9:aa:a5:
e4:e8:05:d8:a3:3c:c6:bf:dc:3f:31:8b:a2:69:0c:
b6:92:ae:f4:d2:18:dd:af:94:cd:9e:00:57:a2:28:
1b:fd:a7:4a:c3:f4:8b:05:ed:25:7c:21:7a:df:e9:
19:39:b1:12:ca:e5:89:af:2f:cb:1d:04:29:8b:b1:
ad:dd:dd:92:2d:0f:14:a1:e8:73:0a:63:00:80:27:
66:52:49:d4:69:f1:ce:d6:ca:ab:fb:02:29:70:de:
44:c8:1e:5b:89:86:ac:a0:87:60:47:c7:af:49:41:
61:2d:61:52:d4:ae:75:91:64:1a:1b:29:0c:7c:f2:
3e:30:ed:4b:75:bc:7e:cf:96:df:05:0e:7f:22:ff:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:CE:EE:9E:68:E9:24:A3:3F:1F:CF:02:6F:1F:4C:80:5B:18:D9
X509v3 Authority Key Identifier:
keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/b8a6ebda0d0379478f4fb47f70edf50296213289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e6:e6:af:46:29:8a:c5:51:a4:c3:6c:60:93:02:39:d7:7b:
a3:d7:fc:55:ba:f2:4c:59:4b:80:d2:9e:c1:44:c1:5e:2f:7c:
a4:66:c0:65:0b:ed:6b:45:e0:c9:56:9f:89:ea:fe:8f:f8:7f:
f8:c3:7f:19:c8:af:7e:5a:02:32:cc:18:94:69:c8:66:54:a3:
ae:7a:4d:5f:cc:c3:e0:4f:49:d8:98:52:b3:9c:c7:57:18:43:
c0:c4:47:69:36:91:36:69:7e:c8:94:69:38:55:04:49:72:26:
75:b9:3b:c8:4b:9f:81:82:c5:68:89:56:67:8b:99:b8:3d:ed:
23:57:7a:c7:db:b8:da:ae:e7:2c:cd:94:61:81:93:5d:d0:80:
43:46:08:21:2d:01:94:49:0a:ca:2c:51:e4:dc:5f:16:70:da:
de:29:23:7b:ed:53:3d:f0:2e:ab:fb:14:26:77:a6:21:c0:b3:
25:66:a5:29:d1:ad:3f:25:f8:e7:73:96:d4:8a:b9:ce:82:8f:
4a:b1:9d:67:22:ec:63:0c:95:88:a3:f7:f1:f8:ac:0c:4d:7c:
b5:03:87:58:25:4e:37:38:92:a3:50:c3:2e:e9:30:ee:33:d0:
9b:33:77:84:48:f6:95:11:a4:1c:29:86:19:2a:ae:59:9f:6a:
03:d2:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org