Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/9614dca3c5641f96bfd59260c0bd3610b8fe9156.roa
File: 9614dca3c5641f96bfd59260c0bd3610b8fe9156.roa (raw, json)
Hash identifier: bVJXFGND07cCXxRsUbtMQo/Pv4iXzfOwNs5Q7HN1aCU=
Subject key identifier: DD:00:01:25:DA:91:7A:54:29:A7:5B:DC:18:10:97:42:F1:7D:05:03
Certificate issuer: /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial: 1F6916
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/9614dca3c5641f96bfd59260c0bd3610b8fe9156.roa
Signing time: Fri 24 Mar 2023 08:31:24 +0000
ROA not before: Thu 23 Mar 2023 08:31:24 +0000
ROA not after: Sat 22 Mar 2025 08:31:24 +0000
asID: 263244
IP address blocks: 186.0.180.0/24 maxlen: 24
186.0.181.0/24 maxlen: 24
186.0.182.0/24 maxlen: 24
186.0.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058518 (0x1f6916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Validity
Not Before: Mar 23 08:31:24 2023 GMT
Not After : Mar 22 08:31:24 2025 GMT
Subject: CN=9614dca3c5641f96bfd59260c0bd3610b8fe9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:30:46:f8:45:29:13:55:53:91:22:c4:a1:
9a:20:f5:da:13:a7:1f:a1:8b:8a:c7:cb:54:31:a6:
39:19:64:5b:6d:a2:27:97:40:90:7e:33:97:5a:90:
7f:a0:8b:e7:3d:31:7a:3d:bf:d7:c4:26:b0:d5:28:
38:92:ac:41:9e:fc:22:6b:03:2d:7c:4c:df:24:42:
b2:27:b1:ab:d8:90:b0:a4:20:e7:48:47:43:cb:b8:
0e:56:eb:c0:bc:42:cb:e5:c0:bc:f2:f2:57:fa:08:
36:f0:1a:05:3b:9a:3e:9e:cb:a1:02:00:bf:68:d5:
b5:de:63:d4:e1:f3:88:27:7f:22:ed:83:5e:9a:c9:
14:39:73:90:bb:4a:f7:55:3a:97:78:40:28:1e:41:
e5:e1:88:43:f5:7a:04:c6:bf:a7:3e:3a:7b:ce:54:
36:bd:67:e5:bb:8a:b9:1e:42:f1:6c:a0:97:72:3b:
db:46:d4:a2:dc:18:07:5c:0f:d0:08:0d:a3:3f:f3:
cb:61:16:bf:84:eb:50:43:1a:ba:11:18:59:94:0c:
4b:56:bb:38:b8:2e:df:05:96:b6:26:bf:91:62:91:
aa:82:7b:fc:f3:3e:40:e4:a1:0e:51:59:08:4a:05:
0a:70:09:29:50:64:71:69:25:2f:5c:83:a1:c5:e7:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:00:01:25:DA:91:7A:54:29:A7:5B:DC:18:10:97:42:F1:7D:05:03
X509v3 Authority Key Identifier:
keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/9614dca3c5641f96bfd59260c0bd3610b8fe9156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.0.180.0/22
Signature Algorithm: sha256WithRSAEncryption
22:b0:c2:67:61:b4:47:25:eb:ef:84:60:63:ba:69:71:12:1c:
f5:52:3f:89:ce:67:40:28:08:95:23:cd:27:09:5e:45:99:d7:
c4:f4:97:04:2e:5a:22:40:da:a3:5a:93:bd:44:7d:cb:8d:f4:
c4:27:9a:04:82:30:4c:85:42:7f:43:84:34:f0:c2:d9:b6:fb:
e8:96:aa:cf:ad:95:45:9b:57:1e:f2:cb:ca:3d:ba:60:15:ee:
27:6b:ce:a1:e5:9f:73:c4:c0:9b:75:c6:8e:20:0f:ea:54:3d:
ca:45:99:07:29:12:04:f0:bb:4d:41:1b:fc:5b:5c:6c:0c:9a:
16:af:07:6c:98:6e:7a:60:32:c7:16:ab:f4:ec:ce:2b:e7:2e:
11:64:13:18:c1:c0:4a:5e:75:4b:aa:c2:92:ee:ed:28:52:5c:
21:9e:4a:3b:3f:46:1e:51:56:8c:3a:2b:26:ad:67:a2:71:7f:
8b:cd:b9:a2:f2:cd:28:a5:cc:87:8d:05:54:46:1e:f4:c9:96:
97:d0:f5:1e:ad:dc:b9:9d:48:a1:71:82:f6:84:9d:dd:6e:98:
20:82:d7:de:24:48:92:d8:ed:df:3f:7f:ca:c3:0b:33:f9:f4:
c1:70:63:54:d0:b8:8b:3a:3e:08:cf:ab:44:f2:4c:2d:cc:0c:
20:e0:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org