Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/4f3db3fb7f1ca4c0e0349d36c744a2a6137832b6.roa
File: 4f3db3fb7f1ca4c0e0349d36c744a2a6137832b6.roa (raw, json)
Hash identifier: ewdPuDGFC7H6lCIEHRr2suZmEYIOYmDEqtL96zavIJY=
Subject key identifier: 89:17:C2:21:9B:C1:A6:6F:6B:7D:93:FC:C1:5D:D7:4A:AB:78:DC:E8
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 16CE5F
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/4f3db3fb7f1ca4c0e0349d36c744a2a6137832b6.roa
Signing time: Wed 27 Apr 2022 15:00:00 +0000
ROA not before: Fri 19 Nov 2021 03:00:00 +0000
ROA not after: Sun 19 Nov 2023 03:00:00 +0000
asID: 270049
IP address blocks: 66.231.78.0/24 maxlen: 24
66.231.74.0/24 maxlen: 24
66.231.72.0/24 maxlen: 24
66.231.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494623 (0x16ce5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: Nov 19 03:00:00 2021 GMT
Not After : Nov 19 03:00:00 2023 GMT
Subject: CN=4f3db3fb7f1ca4c0e0349d36c744a2a6137832b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:ea:86:97:b6:85:b5:8e:ce:1f:4e:46:21:
de:cf:fc:d7:07:ca:14:69:a5:9a:db:7a:ae:98:a6:
7f:98:59:b8:5c:84:6b:d7:c0:69:8d:e0:87:45:d7:
f3:55:cf:10:ed:eb:1a:ac:2d:7f:85:c1:b9:5f:95:
40:7f:5a:72:19:62:73:e5:a6:ca:5a:f5:63:cf:d2:
af:e8:4d:e6:ce:8c:7c:81:6d:ae:77:01:ee:e7:91:
98:4c:3b:51:da:29:7d:e8:85:54:0c:75:86:12:97:
7e:20:cb:62:5c:d9:5c:7b:a1:de:43:87:a1:5d:fd:
31:98:32:6c:1d:0e:e2:0b:ed:2b:6b:ec:33:19:1c:
bf:e8:88:63:05:db:3f:f1:97:fb:40:7d:18:98:9c:
e6:00:18:40:33:67:5d:50:49:31:79:c5:96:4c:c0:
1b:f5:4b:59:31:8c:50:11:f0:d0:90:54:e4:42:55:
d4:96:59:4e:b5:d6:22:23:95:94:b4:ea:0f:f2:f6:
f5:b3:be:52:77:fd:19:b0:bb:84:83:b5:43:62:c4:
ac:af:0e:43:7a:03:a7:20:f8:6b:3c:ae:00:20:1e:
1e:30:a0:33:6f:a8:d9:39:01:da:02:c9:bc:d1:d7:
96:99:bb:40:25:35:d3:81:aa:05:60:60:02:cf:14:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:C2:21:9B:C1:A6:6F:6B:7D:93:FC:C1:5D:D7:4A:AB:78:DC:E8
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/4f3db3fb7f1ca4c0e0349d36c744a2a6137832b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.72.0/24
66.231.74.0/24
66.231.76.0/24
66.231.78.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e3:a0:93:d8:10:41:7c:67:00:2e:21:6b:87:1d:e7:ca:09:
d3:e6:a6:20:29:7a:17:c1:c4:d6:a8:9a:db:f8:0b:fd:0a:26:
d7:98:3b:d9:ce:f3:ba:68:93:e1:f4:76:4e:69:8e:75:43:db:
82:98:5b:c3:99:2f:2d:31:4a:07:5b:49:ee:5a:b1:a6:a7:0f:
1f:76:07:f4:07:a9:c8:c5:95:92:89:3f:6b:2d:c4:d6:7b:ca:
10:83:79:d2:47:09:5a:c3:b9:f9:01:ec:ba:73:9a:29:f2:a1:
16:99:25:9f:63:28:bf:74:19:fc:3c:04:98:07:55:25:8c:03:
81:ca:39:4a:4b:a1:50:c4:b2:4d:f1:ea:f4:29:e0:1d:e8:6c:
3d:98:28:bb:b6:78:02:8c:29:57:24:d9:63:1b:b0:54:00:9e:
0f:15:5b:2d:02:38:cb:5d:55:bb:39:88:df:8f:7b:cf:c2:e1:
8c:af:7f:5e:ed:96:43:4e:42:65:3e:72:57:cb:ba:19:74:59:
ac:34:cb:1e:95:68:32:e0:72:78:69:78:30:55:d1:c2:6d:13:
b3:e3:2c:e9:e8:2b:da:a2:42:42:8c:94:fa:f0:ae:8d:65:5c:
d8:c9:d3:38:9b:57:80:5e:de:40:84:1c:fb:fe:d2:59:46:1f:
f6:aa:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org