Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/467930fa11de8d7fd4c060671bdbeaeb71aa30e8.roa
File: 467930fa11de8d7fd4c060671bdbeaeb71aa30e8.roa (raw, json)
Hash identifier: eEXYqkx9k/8Jn+y9m/Ndhjl+UYvvtXYeJuqNb+3ytK4=
Subject key identifier: 59:BF:57:FC:02:7A:DD:BC:10:B4:6B:92:49:14:A6:EF:CB:E4:16:3D
Certificate issuer: /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial: 1FC7B4
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/467930fa11de8d7fd4c060671bdbeaeb71aa30e8.roa
Signing time: Wed 19 Apr 2023 16:44:13 +0000
ROA not before: Tue 18 Apr 2023 16:44:12 +0000
ROA not after: Sat 19 Apr 2025 16:44:12 +0000
asID: 262168
IP address blocks: 179.49.64.0/21 maxlen: 24
200.115.20.0/22 maxlen: 24
138.117.160.0/22 maxlen: 24
2803:500::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082740 (0x1fc7b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Validity
Not Before: Apr 18 16:44:12 2023 GMT
Not After : Apr 19 16:44:12 2025 GMT
Subject: CN=467930fa11de8d7fd4c060671bdbeaeb71aa30e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:2c:00:7b:8e:14:f5:3f:23:cf:85:ba:b8:
0c:de:3b:61:66:14:08:26:7c:89:6e:b8:11:c2:e0:
83:6d:13:34:a6:ed:71:6b:b4:4f:e9:06:d9:d5:82:
40:4d:0f:b8:f9:52:fb:f5:04:79:05:9a:ce:55:84:
22:35:87:4d:59:c2:cc:92:16:8b:02:15:39:c5:28:
b6:74:3a:1b:18:a6:15:62:22:87:1b:a3:32:3b:68:
70:97:1b:d2:73:2b:60:b4:d3:89:5c:b5:8d:e9:aa:
ac:32:6c:4f:ae:49:97:fa:7c:ea:62:78:51:33:51:
4f:65:79:97:2b:ca:83:2f:4f:40:b9:bb:fa:f8:4c:
45:1e:79:be:ad:f4:53:0d:ac:fd:4e:3c:f2:83:64:
89:8e:c1:85:63:20:bb:eb:44:27:4d:8b:5d:af:36:
7e:db:6c:72:f6:07:ad:3e:34:84:36:7b:ab:e5:0c:
c4:d4:42:d0:bb:14:48:5b:0e:a3:ed:db:41:a2:e0:
fb:47:19:15:0b:de:c3:eb:52:0f:7f:d1:02:16:c2:
42:15:2b:38:2c:1d:90:f6:ca:d0:99:59:e0:0d:4c:
18:2f:e3:b1:74:5c:40:54:6e:dd:6c:88:01:56:43:
65:34:38:b7:7f:41:c4:cb:86:67:71:dd:cb:c6:79:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:57:FC:02:7A:DD:BC:10:B4:6B:92:49:14:A6:EF:CB:E4:16:3D
X509v3 Authority Key Identifier:
keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/467930fa11de8d7fd4c060671bdbeaeb71aa30e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.160.0/22
179.49.64.0/21
200.115.20.0/22
IPv6:
2803:500::/32
Signature Algorithm: sha256WithRSAEncryption
6c:d8:d1:2b:f7:77:90:9d:59:29:8d:cb:2f:49:5f:f4:a7:46:
ff:28:c2:1a:d6:9c:d9:12:6f:7e:27:f9:75:29:84:17:70:54:
f8:8b:97:87:66:19:55:1a:46:a6:32:1e:16:2d:ea:e7:52:34:
14:77:ea:85:18:4a:ee:da:2e:9d:55:8d:38:4e:ed:ad:80:e4:
bf:7d:0c:86:8b:37:68:07:1e:04:fa:dd:8b:32:48:62:06:d1:
c9:f6:37:46:68:3e:d6:1b:03:6e:89:3e:fc:82:a5:27:d2:f9:
20:1a:32:56:6e:6a:5f:35:c6:57:9f:9f:8d:b2:b0:34:49:54:
26:31:11:cf:e8:05:4a:fa:31:ba:51:d3:b6:62:30:2e:6a:c2:
67:8d:67:df:54:1a:eb:66:90:69:c5:24:02:d5:b5:80:6f:8e:
f0:fb:83:c7:83:6e:5d:48:9b:9b:aa:95:68:d5:ee:b4:e3:35:
bf:a0:ff:e2:90:8b:04:ee:02:73:79:9f:11:f1:d8:f8:f2:b4:
68:d1:38:be:3c:2e:2b:3b:5b:03:3f:86:0c:28:a8:a4:f0:97:
64:d6:06:5a:24:1e:e1:4b:d8:57:ca:72:39:1a:a3:2a:7a:a9:
77:c1:ef:46:76:54:06:fa:0c:a7:d3:5e:89:22:7b:43:52:f1:
a2:54:78:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org