Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/b5d0c40abf22747acab1c32bd86ff035bbbcc589.roa
File: b5d0c40abf22747acab1c32bd86ff035bbbcc589.roa (raw, json)
Hash identifier: d/MCMZi9+C67XIcMUCvab9UO7yI8wt0lvGpMrIy+6N8=
Subject key identifier: 1E:7D:1A:A7:20:AB:12:43:65:B7:3B:22:9E:4B:AF:B3:F4:9A:64:B6
Certificate issuer: /CN=2ee860d7ae057539e895d1293eae7aad56d34c53
Certificate serial: 1AC926
Authority key identifier: 46:38:C8:83:DB:1C:FA:4A:03:22:D2:2B:65:57:8B:1B:34:5D:7A:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee860d7ae057539e895d1293eae7aad56d34c53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/b5d0c40abf22747acab1c32bd86ff035bbbcc589.roa
Signing time: Tue 13 Sep 2022 14:55:30 +0000
ROA not before: Mon 12 Sep 2022 21:39:36 +0000
ROA not after: Thu 12 Sep 2024 21:39:36 +0000
asID: 265746
IP address blocks: 128.201.168.0/22 maxlen: 22
128.201.168.0/23 maxlen: 23
128.201.170.0/23 maxlen: 23
128.201.168.0/24 maxlen: 24
128.201.169.0/24 maxlen: 24
128.201.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755430 (0x1ac926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee860d7ae057539e895d1293eae7aad56d34c53
Validity
Not Before: Sep 12 21:39:36 2022 GMT
Not After : Sep 12 21:39:36 2024 GMT
Subject: CN=b5d0c40abf22747acab1c32bd86ff035bbbcc589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:55:cf:2e:09:c0:79:ea:e1:1a:de:e6:b3:
59:ed:fb:52:95:c8:e7:37:b9:0a:d9:76:6a:92:95:
be:e3:c3:1e:b4:9d:3f:bf:38:e5:dc:ca:94:d9:57:
fa:95:14:4e:c3:27:17:5d:ca:b4:4d:a5:67:e1:1e:
28:4b:d7:3e:97:d1:4d:fb:09:83:57:c2:ff:6f:f0:
5e:a7:91:8c:51:03:c4:a5:fa:9f:22:0c:dd:78:0a:
28:35:7b:30:8a:6f:77:09:1e:2b:53:b0:36:3d:c7:
41:3f:15:d7:a2:66:1e:c6:46:37:c3:d1:75:66:9a:
45:a3:10:7d:9b:6c:ab:46:0e:4e:f1:22:fa:1a:c4:
3f:16:06:33:52:85:08:ce:d5:51:85:64:76:23:8c:
a5:d3:dc:7f:a3:55:f9:5f:7d:ba:2f:10:4c:d7:a1:
90:44:15:0e:d4:d0:a9:d6:2a:0a:6c:48:3d:81:e1:
31:68:a7:e6:65:7d:da:be:40:18:88:f4:4b:a3:fa:
2f:fc:49:59:f8:78:77:7c:57:ad:ad:17:84:6f:8a:
72:99:d6:b3:c5:84:bb:cf:a1:40:19:1e:62:a4:09:
bd:53:8a:a5:5f:84:93:a7:9d:1d:4f:4a:a3:f2:10:
13:9e:90:70:db:f9:b0:94:d7:69:52:0a:69:31:4f:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7D:1A:A7:20:AB:12:43:65:B7:3B:22:9E:4B:AF:B3:F4:9A:64:B6
X509v3 Authority Key Identifier:
keyid:46:38:C8:83:DB:1C:FA:4A:03:22:D2:2B:65:57:8B:1B:34:5D:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee860d7ae057539e895d1293eae7aad56d34c53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/b5d0c40abf22747acab1c32bd86ff035bbbcc589.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/2ee860d7ae057539e895d1293eae7aad56d34c53.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.168.0/22
Signature Algorithm: sha256WithRSAEncryption
70:bf:99:2d:18:cd:68:52:80:c7:77:50:3b:38:33:97:65:d8:
83:63:b4:20:c6:58:31:18:f5:b7:05:f1:29:7c:cd:3b:29:74:
ad:ec:c9:0e:e4:f8:8c:73:c9:72:41:28:65:af:f8:6e:4f:59:
7b:89:f3:ff:17:93:58:fa:7e:86:18:ba:f7:4b:8b:33:ad:30:
2a:39:5d:f8:b3:e5:f1:86:82:a4:32:c5:93:5c:48:8a:04:a2:
6c:96:19:79:bb:38:92:f3:0d:bd:6d:54:92:48:6e:bd:a4:dc:
54:a2:f3:b5:dd:60:75:f7:5b:8e:1d:d8:bf:3d:29:07:22:67:
c6:1b:e3:97:66:6e:84:6b:11:75:64:70:1f:5b:f7:c0:65:82:
0d:61:23:9e:ee:65:7a:d5:18:4d:a3:2a:eb:32:e6:89:3c:e5:
7b:d5:50:9a:cd:2a:fc:bc:87:d8:77:43:99:90:b0:f4:f6:78:
93:87:ab:55:c3:ec:f2:6b:2e:7c:57:6e:09:4c:0e:b5:fc:09:
45:ad:e8:d5:17:9f:ba:61:26:b3:32:6d:1f:00:0e:e2:01:61:
ec:5d:a0:22:84:ca:96:27:af:f2:cd:eb:91:9d:75:bd:20:e3:
3d:9b:12:ce:28:e8:3c:9e:68:6e:f4:b8:92:91:87:93:0d:00:
eb:de:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org