Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/299538228cb888609b419b158427d15a49883f82.roa
File: 299538228cb888609b419b158427d15a49883f82.roa (raw, json)
Hash identifier: rqEzrmFNZtPPNnuRYSFP3kQGA0QmPUM+e5mSlbnqs2Y=
Subject key identifier: 66:92:7F:BE:66:DD:78:0E:A9:2B:8E:6E:E2:4C:AA:E6:90:CB:21:47
Certificate issuer: /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial: 0557AE
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/299538228cb888609b419b158427d15a49883f82.roa
Signing time: Thu 04 Nov 2021 01:47:21 +0000
ROA not before: Mon 11 Oct 2021 03:00:00 +0000
ROA not after: Mon 11 Oct 2100 03:00:00 +0000
asID: 14593
IP address blocks: 149.19.164.0/22 maxlen: 24
149.19.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350126 (0x557ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
Validity
Not Before: Oct 11 03:00:00 2021 GMT
Not After : Oct 11 03:00:00 2100 GMT
Subject: CN=299538228cb888609b419b158427d15a49883f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:dd:43:d6:0b:79:95:23:e6:43:66:65:0c:
da:e1:f1:c3:4f:e2:11:6a:b3:21:53:b6:b7:3e:1f:
77:4e:e7:92:38:af:34:34:94:68:82:81:e5:26:1d:
d9:50:12:4d:dc:bf:e5:85:a9:7d:f9:ab:82:1a:d6:
53:53:d7:0d:4d:31:63:f8:7f:70:ec:ee:20:d7:f4:
30:38:1d:6c:60:b9:7f:69:6c:a3:b0:03:75:94:94:
0a:17:c4:21:93:99:6f:ac:f7:52:f8:28:74:52:c7:
b7:c6:8b:ff:0b:60:a6:ae:58:44:0f:8a:a3:5d:8c:
ba:4c:1a:9f:00:aa:78:48:10:ee:b3:5c:57:42:ef:
b8:83:4b:8b:69:9f:47:38:a8:33:48:50:27:41:37:
c8:b5:62:d7:d7:88:57:af:d2:a5:18:ad:14:ca:29:
0f:54:73:7a:fe:70:b7:eb:e1:80:54:73:68:de:6d:
1b:a7:7d:27:88:99:d3:11:c1:13:55:fc:48:ac:26:
06:81:23:57:59:6f:1a:12:93:f9:b5:5c:5f:04:bf:
ff:33:2f:2c:9b:40:45:1a:2b:09:13:fe:38:ba:f3:
69:86:45:d6:f9:e8:51:48:61:06:31:0c:e4:30:89:
a0:c4:c5:fc:cc:92:08:fa:67:5d:54:4f:7c:96:d8:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:7F:BE:66:DD:78:0E:A9:2B:8E:6E:E2:4C:AA:E6:90:CB:21:47
X509v3 Authority Key Identifier:
keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/299538228cb888609b419b158427d15a49883f82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.19.164.0/22
149.19.172.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e0:34:9e:78:13:4b:62:52:80:80:e1:0e:81:3d:52:e3:1d:
bf:2b:a6:ae:cd:43:90:b1:f5:d9:fd:41:74:7e:ed:0d:e9:61:
94:5f:3f:54:dc:6d:7b:66:b7:23:e7:fd:ac:5a:2e:44:4c:e2:
6a:cf:18:08:60:c2:11:e8:5f:c9:e8:da:94:16:46:ed:3c:35:
a8:04:1a:5c:59:94:f0:ce:8c:5a:cd:7e:2a:b6:a0:a6:22:e6:
9d:1d:10:72:8b:0b:dc:57:8b:d7:ad:80:56:2f:f8:1c:6f:aa:
8d:94:88:e8:31:79:1c:39:02:12:17:a6:b6:c5:6a:cf:7e:3c:
7c:5b:7f:5a:4a:8c:44:15:28:c1:69:07:29:b8:f5:8b:75:bb:
08:c6:b7:8b:de:3a:22:bb:d4:e4:79:5d:cf:08:72:1f:fe:ea:
ec:9b:df:ed:6c:90:9d:88:59:78:91:22:09:5d:2f:cc:87:a2:
9d:37:ae:e9:9b:59:16:ae:f5:82:96:f1:d6:0b:47:9b:34:38:
95:43:82:ac:e8:2c:29:b5:54:ef:c0:d0:49:e0:12:51:7a:5c:
d1:d8:c5:12:40:90:10:ad:76:e9:83:ae:a1:14:d8:58:8f:c4:
4c:a7:f2:c9:df:ad:9b:43:b0:34:0d:54:25:47:c1:cb:48:42:
b6:10:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org