Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/8946a190ae25e7064529d29b15d5ddfe0f3b7056.roa
File: 8946a190ae25e7064529d29b15d5ddfe0f3b7056.roa (raw, json)
Hash identifier: 2yMhfdkpS8vGzNxyT1uEOnNvsuyG9ILS8LbQyNBWelE=
Subject key identifier: F2:59:7B:74:E9:63:1B:AE:0D:09:F5:95:79:41:3F:7F:D9:DC:AC:76
Certificate issuer: /CN=0fc0a5350730d95599a12c52d83db204dd0649b1
Certificate serial: 0CF023
Authority key identifier: 62:AC:59:8F:C5:0E:F9:E6:D5:14:5D:0C:EA:78:C0:4A:91:78:2B:DF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fc0a5350730d95599a12c52d83db204dd0649b1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/8946a190ae25e7064529d29b15d5ddfe0f3b7056.roa
Signing time: Wed 24 Mar 2021 14:42:20 +0000
ROA not before: Wed 24 Mar 2021 14:42:20 +0000
ROA not after: Tue 24 Mar 2026 14:42:20 +0000
asID: 264847
IP address blocks: 168.181.120.0/24 maxlen: 24
168.181.121.0/24 maxlen: 24
168.181.122.0/24 maxlen: 24
168.181.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847907 (0xcf023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc0a5350730d95599a12c52d83db204dd0649b1
Validity
Not Before: Mar 24 14:42:20 2021 GMT
Not After : Mar 24 14:42:20 2026 GMT
Subject: CN=8946a190ae25e7064529d29b15d5ddfe0f3b7056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:00:98:1d:8e:60:d7:23:3c:fc:63:f7:42:
19:cc:24:2a:bd:bf:8d:12:49:32:fd:22:3e:78:41:
c0:fb:d9:3e:8b:24:6c:4f:0e:5d:5d:28:97:75:5e:
b9:04:7f:1e:0c:f9:7e:b4:45:12:fc:62:1f:25:0e:
ed:da:b1:00:b9:a0:f1:7a:2e:a6:ab:ce:24:45:79:
7b:84:b7:5b:40:7a:ed:3f:38:d2:4e:2a:64:38:2f:
0a:3e:d2:ff:3a:1d:57:30:17:14:3e:5f:cc:af:34:
99:5b:f0:54:c9:79:06:da:be:69:15:1e:eb:74:3b:
db:e0:dc:f0:05:fe:8e:de:10:d6:5a:0e:1f:af:ea:
fb:8f:95:cd:91:9b:4b:7e:9f:bc:40:58:9a:65:8b:
f6:73:33:62:7f:3a:f2:85:12:6d:28:e9:f9:c2:7d:
72:10:d1:d9:b0:8a:48:b4:7a:c7:9d:7a:97:34:b6:
ef:b2:48:5a:a7:50:90:84:97:f5:38:2e:8f:d8:61:
eb:27:fe:86:ab:17:6a:ba:c0:97:68:c7:9e:ec:aa:
c4:02:e1:b9:d4:23:77:34:2e:57:c0:3b:1e:04:b1:
11:0d:37:ed:25:3e:45:d8:6f:90:c9:e7:aa:52:28:
51:a5:de:39:13:6a:de:1e:22:43:7c:bf:d1:43:52:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:7B:74:E9:63:1B:AE:0D:09:F5:95:79:41:3F:7F:D9:DC:AC:76
X509v3 Authority Key Identifier:
keyid:62:AC:59:8F:C5:0E:F9:E6:D5:14:5D:0C:EA:78:C0:4A:91:78:2B:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fc0a5350730d95599a12c52d83db204dd0649b1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/8946a190ae25e7064529d29b15d5ddfe0f3b7056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/19804360-d43d-43a2-9c29-fb0dfe93213f/0fc0a5350730d95599a12c52d83db204dd0649b1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:3e:ac:26:76:42:01:1e:b4:22:6e:95:05:68:46:3f:b1:f6:
08:fe:ef:94:00:5a:f1:ff:3e:8a:1e:b7:b3:87:88:6a:2e:d4:
e4:e3:23:ac:8f:85:8f:a6:d5:65:b7:32:79:2b:cb:ec:c2:a5:
f1:a0:ce:fb:7f:5c:71:65:2a:93:6d:fe:fb:f3:00:ef:04:0c:
4d:f7:a9:2a:cd:81:45:ca:0d:b2:66:3d:46:0e:e0:d4:f4:4d:
cb:35:1e:fd:55:4a:dc:c5:ca:36:2d:98:fa:98:70:1a:59:af:
b9:03:2e:40:34:07:d9:4c:0c:31:5d:37:60:af:83:5f:ba:6f:
25:40:19:c1:de:06:83:d7:a0:28:e8:b0:8d:87:c1:a2:c1:18:
59:df:d4:20:01:e3:a3:7b:a9:a3:64:55:a9:a3:e9:df:5c:f9:
8b:af:4a:67:e8:74:f2:9b:02:6d:86:d2:2a:ad:2e:bb:af:c7:
80:c9:8c:f4:0a:2c:7b:e5:b7:a4:f6:ce:e5:8e:18:67:72:df:
9f:85:ab:5e:1e:33:43:14:84:76:ea:aa:ff:80:9d:82:08:f7:
ae:f6:14:32:5b:2b:17:a8:64:9b:3b:69:77:70:f4:1a:6e:ee:
25:aa:2a:33:f8:95:12:90:2c:77:4f:25:d9:e4:af:25:d1:8a:
65:b0:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org