Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/165ff992c512f6222008f5e9000516a0d38fe57d.roa
File: 165ff992c512f6222008f5e9000516a0d38fe57d.roa (raw, json)
Hash identifier: goZNjWR06s+GUGK67pgxJIzlxjkI1cypEZNttUuUFQE=
Subject key identifier: D8:61:83:90:EA:1E:BB:89:47:30:E0:E9:99:98:C5:9A:02:C4:74:6B
Certificate issuer: /CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Certificate serial: 20A846
Authority key identifier: FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/165ff992c512f6222008f5e9000516a0d38fe57d.roa
Signing time: Tue 06 Jun 2023 15:54:43 +0000
ROA not before: Mon 05 Jun 2023 15:54:43 +0000
ROA not after: Tue 06 Jun 2028 15:54:43 +0000
asID: 61512
IP address blocks: 45.161.236.0/22 maxlen: 24
143.255.140.0/22 maxlen: 24
2803:6940::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140230 (0x20a846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Validity
Not Before: Jun 5 15:54:43 2023 GMT
Not After : Jun 6 15:54:43 2028 GMT
Subject: CN=165ff992c512f6222008f5e9000516a0d38fe57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:27:d6:22:e0:52:e4:9a:79:a2:47:1e:2d:ef:
3f:4c:45:d7:4c:3c:85:77:07:ef:30:4e:e3:b8:48:
c9:31:83:af:b6:8d:f4:6f:d9:63:95:37:72:3c:cf:
ce:35:05:10:a8:19:29:27:ef:08:2e:04:66:fb:fd:
41:24:bd:7b:65:bb:85:88:6a:26:08:70:f0:21:c6:
03:93:02:12:07:7a:76:8d:1d:72:6d:ba:fa:e7:fa:
43:98:88:73:b5:b8:c2:73:b0:e1:c1:eb:33:f7:0d:
42:8a:30:2e:54:7c:cc:b5:68:c6:42:52:5b:19:42:
73:f4:27:55:d2:dd:2d:dc:db:21:1f:60:4c:06:96:
c9:7d:3a:d7:1f:5c:b1:6b:3c:04:83:66:c0:ff:7c:
23:40:ea:67:da:9c:3f:7b:1b:f6:17:a5:f1:81:f5:
c4:b8:9f:b2:5d:2c:65:64:7c:b2:25:86:de:ef:8a:
49:5c:02:c2:85:71:19:1e:a0:76:50:61:7f:08:e9:
44:cf:82:fe:17:6e:9a:9d:2d:a5:d5:cc:01:ac:a5:
67:a8:2b:15:cd:ce:a7:a8:f4:83:3a:9d:a1:1f:a9:
d6:de:70:23:85:47:3c:39:73:68:45:a3:08:a6:ad:
67:1a:13:30:0a:22:0e:18:5b:25:f9:0f:e2:6a:20:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:83:90:EA:1E:BB:89:47:30:E0:E9:99:98:C5:9A:02:C4:74:6B
X509v3 Authority Key Identifier:
keyid:FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/165ff992c512f6222008f5e9000516a0d38fe57d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/7855868bb89dd668c1f57896b07b3922fccf8b7a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.236.0/22
143.255.140.0/22
IPv6:
2803:6940::/32
Signature Algorithm: sha256WithRSAEncryption
00:6b:55:c7:ed:70:e2:28:d8:23:03:32:58:cd:1e:cb:58:06:
f7:b0:1c:61:66:d8:ce:7b:49:34:e2:35:b6:ad:ea:1b:e5:79:
a4:91:45:0d:8f:08:e2:7c:2e:fe:c4:9f:23:ea:0f:75:6f:2e:
a3:16:20:47:71:c2:38:ed:f3:17:91:df:4b:fd:6b:a5:db:12:
58:ff:48:49:94:77:a5:2e:d7:5d:e6:f0:6b:14:8f:ea:8e:7e:
a8:ae:8d:72:53:bf:83:df:ba:c4:5f:f1:38:bf:05:fd:29:05:
d7:3c:02:3a:ef:71:02:ef:ae:15:60:a8:7d:7f:13:d0:8d:72:
69:16:96:25:de:9a:79:94:5d:43:18:b3:1a:35:83:9a:5d:98:
d9:ac:5b:f7:b7:18:de:12:84:0d:fa:b1:39:85:9e:98:5c:fe:
3f:b1:bb:d3:a2:d1:78:85:b7:47:c9:1c:c7:72:b4:b6:47:68:
fb:e8:25:e7:59:f6:df:9d:d6:d1:67:65:ed:18:f2:bc:8f:f2:
c7:02:b2:5b:db:0b:fd:03:4b:c5:58:5f:25:7e:c1:47:2c:de:
eb:f1:76:4f:a7:00:b6:c5:ef:c4:e4:6d:b0:c8:eb:18:70:2d:
bb:83:f2:8e:22:b9:20:66:6a:9a:de:90:2c:6f:48:0a:b9:5e:
b5:e2:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 14:02:15 2023 by rpki-client on console-ams.rpki-client.org