Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/3b3d00122e8e54b842d1f6473f34037ae6df5638.roa
File: 3b3d00122e8e54b842d1f6473f34037ae6df5638.roa (raw, json)
Hash identifier: 5z82Whn4M9G+h6vgD+Pu2esPeZR2NwUCdR671LV4HDw=
Subject key identifier: 4D:4C:29:2E:F4:9E:89:E8:59:0E:D3:3F:F7:BF:E3:C5:D5:AC:CA:2E
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 19CCBA
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/3b3d00122e8e54b842d1f6473f34037ae6df5638.roa
Signing time: Tue 16 Aug 2022 23:01:46 +0000
ROA not before: Fri 19 Nov 2021 03:00:00 +0000
ROA not after: Sun 19 Nov 2023 03:00:00 +0000
asID: 270049
IP address blocks: 66.231.78.0/24 maxlen: 24
66.231.74.0/24 maxlen: 24
66.231.72.0/24 maxlen: 24
66.231.76.0/24 maxlen: 24
66.231.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690810 (0x19ccba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: Nov 19 03:00:00 2021 GMT
Not After : Nov 19 03:00:00 2023 GMT
Subject: CN=3b3d00122e8e54b842d1f6473f34037ae6df5638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:4c:29:4c:95:bf:53:5e:5d:f6:13:1e:9d:
10:e8:6b:49:ee:00:21:a3:f3:5b:3c:8a:3f:72:26:
c3:7c:b7:7c:5e:01:2f:d6:39:e0:7d:d2:13:19:4f:
7b:95:31:28:19:f1:fb:e8:7d:36:e3:12:50:76:dc:
5b:08:e9:ee:4a:10:90:b3:8f:9e:07:1f:81:0d:8f:
d4:7d:19:37:b4:e4:8d:18:2a:13:c0:9a:73:bd:64:
67:0e:82:cc:d9:74:04:c2:b0:76:11:9e:ff:62:b4:
22:9f:4f:36:d9:3c:8d:f8:22:06:6f:74:0c:8d:9b:
25:38:58:f4:62:78:61:6b:66:46:ec:ea:04:ba:79:
50:31:ee:de:5a:a4:ae:38:00:d5:7f:29:ca:71:eb:
5a:3d:9c:7c:4c:80:5a:7e:89:8f:2e:df:86:bd:1f:
18:eb:cc:1f:83:14:ad:63:ea:96:64:3c:26:ea:c3:
87:68:92:10:25:df:33:2c:2a:6e:b3:99:aa:95:30:
9a:fa:a7:90:0f:d4:49:f2:1e:31:3c:eb:52:3e:f5:
3c:2a:0c:2e:d6:81:bc:b6:a5:22:0b:30:71:ff:86:
60:56:4b:e6:32:f0:42:47:b2:c9:3b:00:bf:56:a5:
cc:b7:aa:53:d3:7d:b5:b6:c4:f2:3b:9b:59:3a:4a:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:29:2E:F4:9E:89:E8:59:0E:D3:3F:F7:BF:E3:C5:D5:AC:CA:2E
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/3b3d00122e8e54b842d1f6473f34037ae6df5638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.65.0/24
66.231.72.0/24
66.231.74.0/24
66.231.76.0/24
66.231.78.0/24
Signature Algorithm: sha256WithRSAEncryption
79:dd:cb:d6:b5:6b:4a:25:70:03:db:3f:52:23:cc:e4:0c:40:
49:9f:66:1c:83:39:2b:c7:8f:8b:ee:ef:b2:05:f7:49:4b:b3:
cb:02:88:82:06:12:45:a2:cc:ba:17:bf:09:ff:22:05:11:9b:
52:ab:a1:80:20:7c:90:fe:c4:9b:57:b2:33:40:c9:a4:51:73:
10:4b:37:ef:45:f7:2d:88:55:ae:2e:f0:34:e4:19:d7:dd:a3:
af:1d:a3:b9:29:50:be:51:e6:82:1d:9e:e9:10:97:ea:26:d3:
d7:d4:dc:53:90:93:2e:bf:dd:bc:02:29:ef:fb:71:0a:d1:7c:
63:45:16:29:e7:cf:e7:92:be:23:85:65:78:c4:d6:4a:67:c3:
38:8a:b0:68:d3:83:f4:07:30:1d:be:28:a4:6a:a5:9b:50:c5:
13:3c:08:d7:47:4c:5d:fa:1b:27:5e:2d:18:13:6d:c2:e5:fb:
2b:5c:76:b6:16:42:5b:69:6e:ab:ab:32:9f:90:83:95:34:75:
90:37:00:6f:dc:eb:5c:81:0b:3c:83:dc:63:cb:2b:01:c0:f0:
ab:56:ce:12:cf:6e:d0:de:52:b3:bf:1b:88:9e:d8:54:4f:38:
15:3e:73:86:cf:67:18:b9:a4:42:9e:a0:e9:9e:b3:d4:80:88:
22:b1:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org