Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/c689d09f90b802271a7136a68b1f91a544e6e4d3.roa
File: c689d09f90b802271a7136a68b1f91a544e6e4d3.roa (raw, json)
Hash identifier: sCir3enlJDszT0Kupt6hklngoWUY81zin99P1zxsq7k=
Subject key identifier: 18:5F:BC:8E:6A:AE:CB:A9:DF:2F:3B:23:3C:07:C9:82:CF:73:A7:BB
Certificate issuer: /CN=bd538999ee55467c979dac5d0250cd64761520ee
Certificate serial: 02F8
Authority key identifier: 3C:55:F7:60:A8:6B:D8:4B:16:EE:B2:41:95:46:1C:62:38:AF:31:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd538999ee55467c979dac5d0250cd64761520ee.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/c689d09f90b802271a7136a68b1f91a544e6e4d3.roa
Signing time: Mon 05 Dec 2022 19:04:31 +0000
ROA not before: Sun 04 Dec 2022 19:04:08 +0000
ROA not after: Thu 05 Dec 2024 19:04:08 +0000
asID: 52335
IP address blocks: 185.74.16.0/22 maxlen: 22
190.8.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd538999ee55467c979dac5d0250cd64761520ee
Validity
Not Before: Dec 4 19:04:08 2022 GMT
Not After : Dec 5 19:04:08 2024 GMT
Subject: CN=c689d09f90b802271a7136a68b1f91a544e6e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:f9:27:89:27:f6:16:49:c1:f2:bf:a2:e0:
2f:e4:a1:7f:c5:2a:0a:96:48:5b:e5:89:94:a1:82:
17:33:45:92:5b:06:a1:fd:ef:ec:44:76:8d:7e:5a:
42:55:98:15:1c:bb:41:18:4b:88:7c:40:3e:db:85:
c0:33:3b:9a:7d:97:06:a4:96:b2:9a:ad:bb:09:d4:
91:c1:b4:ef:f6:81:1c:47:ec:fa:01:56:05:88:28:
8a:10:14:08:42:9e:e1:68:62:e5:95:a3:ee:fa:09:
5f:da:f5:b4:64:d7:f3:7a:c2:9d:ef:0c:a9:51:f1:
e5:e1:e6:b3:0f:9a:a6:9a:96:16:ec:6e:6f:9e:bd:
f7:25:08:2d:ba:8f:82:fe:e1:72:47:88:ca:74:14:
ea:bc:bb:1a:09:af:6a:3f:6d:35:11:68:af:a2:b1:
ec:67:be:c9:fb:bf:e3:21:ae:d3:e1:99:14:da:ba:
28:a5:56:4a:54:7d:d6:ad:1d:ef:26:45:82:8e:75:
fc:8d:b2:b4:c5:23:b1:a7:cb:22:1b:81:3c:a5:dd:
00:a9:e6:cd:e3:9b:f1:9f:0c:cb:57:70:1b:e5:5b:
4e:56:c4:26:f5:a0:93:20:1a:d2:78:e6:35:2c:df:
c3:77:52:31:79:23:b1:83:17:23:6e:d2:cc:1d:9f:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:BC:8E:6A:AE:CB:A9:DF:2F:3B:23:3C:07:C9:82:CF:73:A7:BB
X509v3 Authority Key Identifier:
keyid:3C:55:F7:60:A8:6B:D8:4B:16:EE:B2:41:95:46:1C:62:38:AF:31:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd538999ee55467c979dac5d0250cd64761520ee.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/c689d09f90b802271a7136a68b1f91a544e6e4d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/23ffdfe0-c9af-4f34-a46f-568a26055b0a/bd538999ee55467c979dac5d0250cd64761520ee.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.16.0/22
190.8.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a4:b5:ad:21:e4:bb:5a:bc:35:e1:5f:db:f5:39:57:1f:2a:
b9:1c:01:88:c9:3c:72:7c:f3:62:d4:b6:07:1c:f2:a2:c7:8f:
93:92:41:1a:1a:63:dc:d5:7d:14:8b:88:65:5f:01:27:1c:bb:
51:78:d6:da:df:91:05:98:2f:d2:07:80:15:4c:a8:be:82:03:
fe:6f:fe:af:05:60:82:85:64:fd:e6:09:47:5f:61:f0:fd:aa:
1d:48:c1:a0:cc:b8:5c:2d:5f:c2:cd:61:cd:44:6f:43:08:37:
47:58:ee:57:46:00:b7:5b:8b:3a:65:03:32:87:91:42:fa:4d:
66:b2:34:96:17:8e:bf:f7:32:18:32:57:14:7e:66:3b:ca:42:
84:d3:bc:10:19:0b:c5:ac:24:e3:51:28:31:1c:40:01:0f:99:
0e:a5:f7:79:63:7c:38:90:86:4f:61:84:13:2b:3e:2b:0d:94:
9e:06:fe:6b:27:e3:6b:4d:b2:d1:e4:9f:86:46:75:0f:e8:7c:
ce:c3:35:1c:1b:6b:47:a6:9e:c6:2b:18:7d:16:25:83:fd:ee:
5b:61:04:bb:e7:4c:75:a6:77:d0:5d:9b:fc:e9:a8:2c:dd:99:
79:7e:e5:26:e3:ed:47:a8:df:4a:bc:5b:bf:7b:f0:81:93:63:
96:c5:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org