Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/fe6b1e754c15d083c20de6b660dfadd33a2eb77e.roa
File: fe6b1e754c15d083c20de6b660dfadd33a2eb77e.roa (raw, json)
Hash identifier: TnseMLnKSHk3uK/vZmDPEdFGZmIE8/rNKshn6ynvG1I=
Subject key identifier: B1:54:6B:18:7C:F0:C6:8B:D3:73:7A:54:49:52:DC:67:E4:15:1B:6B
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 1425A4
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/fe6b1e754c15d083c20de6b660dfadd33a2eb77e.roa
Signing time: Tue 18 Jan 2022 15:54:05 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 23031
IP address blocks: 66.231.65.0/24 maxlen: 24
66.231.66.0/24 maxlen: 24
66.231.67.0/24 maxlen: 24
66.231.72.0/24 maxlen: 24
66.231.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320356 (0x1425a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=fe6b1e754c15d083c20de6b660dfadd33a2eb77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:4b:0e:8b:f4:bc:29:ae:bc:57:d3:c4:28:
c3:cc:c0:3a:08:10:dd:12:2c:e4:08:9e:2c:5a:eb:
35:54:8d:21:7c:b3:e8:c5:1b:cb:ba:c0:70:82:ae:
78:06:1d:36:42:d2:ab:7e:ba:91:fa:b5:33:9a:8c:
93:8f:ed:93:53:8b:ee:8e:95:7d:cb:1f:09:38:69:
40:ff:c5:70:e9:b3:63:d9:be:82:a3:be:d7:be:61:
a1:a6:4f:f7:de:b7:98:12:8b:48:a6:01:c8:c3:c7:
e4:09:79:fc:81:b3:aa:d0:9d:4b:e4:45:84:28:58:
a6:ac:c2:1a:dd:0d:ec:05:36:04:ed:bb:47:01:d4:
d8:10:11:e4:35:6b:89:e8:f4:73:b9:f6:75:64:ff:
a8:43:a0:1c:53:b7:9d:d2:53:08:23:8b:4f:f1:10:
d9:42:c8:09:ca:1b:10:47:2b:a9:d5:52:71:5f:11:
6d:e3:1a:9b:a0:b1:04:f2:c4:07:90:81:db:4d:40:
c0:70:8d:4b:80:21:86:5e:0f:23:97:5c:c8:4e:a6:
11:7d:42:d8:8e:4a:fd:b6:99:52:84:3c:01:8a:ae:
f2:dd:80:b9:e8:2b:29:6f:7c:79:49:62:3e:9f:c8:
92:1b:e6:d2:33:66:42:77:7e:48:9d:50:ec:dd:59:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:54:6B:18:7C:F0:C6:8B:D3:73:7A:54:49:52:DC:67:E4:15:1B:6B
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/fe6b1e754c15d083c20de6b660dfadd33a2eb77e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.65.0-66.231.67.255
66.231.72.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:2b:02:0d:dc:eb:85:17:79:c3:5e:d9:7f:6e:c8:82:4f:e3:
5b:23:e9:a4:1b:27:f4:0b:05:69:85:6a:c3:6c:8e:4e:d2:35:
48:42:19:2b:5d:f1:20:d5:48:b2:f4:be:59:2e:67:ff:6f:3f:
f1:75:34:d5:3e:8f:4a:de:46:d4:92:c0:17:68:04:0b:cb:ce:
49:9f:d0:f2:11:0c:5c:a8:7c:6a:5e:bf:88:a0:2b:13:07:60:
5b:b0:2a:9f:a8:a8:16:5a:3e:d9:f9:52:71:e7:5e:75:16:07:
b1:4e:68:52:d2:8c:ed:9e:54:7a:d5:e1:85:f4:3f:ce:52:55:
38:ea:51:8f:6b:56:81:87:22:53:58:e4:b8:e1:ec:d3:3a:48:
fa:b3:95:6a:03:d0:48:4e:ac:a1:b2:3d:d0:b8:c6:48:e1:26:
83:ee:d6:bb:34:f4:f2:c9:ed:d8:6f:33:d4:65:6f:24:ad:9e:
ff:53:de:cf:12:0c:fa:3e:af:5b:73:ee:53:2b:bd:5f:c4:5d:
d2:de:19:3f:fb:64:1f:9c:f6:2d:b4:c7:a3:b5:de:6a:a2:69:
77:48:f8:22:fc:9a:60:32:67:74:18:49:3b:08:13:8d:68:eb:
eb:d4:8c:09:25:50:ef:b4:74:5c:c0:18:26:01:cc:66:74:e8:
3d:23:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org