Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/e79ad226120cf009f75d4aaee37a6c8c88be1f3a.roa
File: e79ad226120cf009f75d4aaee37a6c8c88be1f3a.roa (raw, json)
Hash identifier: IH45VnWLHWTLux1DvM0xUNzB3a9/8lxprjQlq6l6kOM=
Subject key identifier: F9:45:81:25:19:48:77:32:24:07:78:D7:02:14:27:B3:10:82:36:A7
Certificate issuer: /CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
Certificate serial: 05A3
Authority key identifier: 9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/e79ad226120cf009f75d4aaee37a6c8c88be1f3a.roa
Signing time: Mon 11 Jul 2022 14:02:34 +0000
ROA not before: Mon 11 Jul 2022 03:00:00 +0000
ROA not after: Thu 11 Jul 2024 03:00:00 +0000
asID: 52425
IP address blocks: 190.92.104.0/22 maxlen: 24
190.92.108.0/23 maxlen: 24
190.92.110.0/24 maxlen: 24
2803:be00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1443 (0x5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
Validity
Not Before: Jul 11 03:00:00 2022 GMT
Not After : Jul 11 03:00:00 2024 GMT
Subject: CN=e79ad226120cf009f75d4aaee37a6c8c88be1f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:c4:bd:b3:16:ea:53:68:e4:c8:9f:ac:47:
8d:81:5d:76:fa:e3:4b:8c:0a:57:95:db:17:a8:72:
ad:9c:ab:47:5a:d7:be:9d:4f:b6:d7:74:71:14:e8:
82:99:ed:21:d4:6d:28:44:31:6f:18:3d:4f:df:41:
e1:54:ff:43:52:71:ad:5b:ab:b1:4a:4b:7a:cc:e1:
18:8d:82:0c:02:b9:39:cf:5a:7e:c0:90:9b:e2:44:
98:4d:d0:dd:80:61:ec:3c:47:45:dc:a8:ec:b9:5f:
83:e2:bf:c6:a4:7b:cd:64:be:df:cd:71:a4:c2:01:
1b:13:f0:e2:8b:4e:6d:eb:d9:86:a6:a0:76:7d:f2:
33:1f:ad:55:70:42:7e:c0:4b:36:25:3e:11:08:56:
42:42:a5:3d:01:d7:35:74:f4:c9:04:0c:a6:b6:cd:
0b:3c:5b:61:7b:75:49:33:ae:9e:2d:67:79:21:b9:
56:c2:4e:9c:c7:02:de:2e:a3:20:b1:e3:fc:c1:ee:
9d:41:33:0f:6b:fc:65:23:0a:db:52:19:3e:91:4f:
26:71:38:8c:9f:11:41:56:1d:05:f9:5b:27:64:c6:
6e:8c:c2:b0:ea:b3:59:ef:93:32:79:16:56:8e:40:
2e:56:6c:dd:32:03:ef:9e:f0:6c:e6:8a:ce:a1:da:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:81:25:19:48:77:32:24:07:78:D7:02:14:27:B3:10:82:36:A7
X509v3 Authority Key Identifier:
keyid:9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/e79ad226120cf009f75d4aaee37a6c8c88be1f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/47b57565cafdf0ca1cb66c80d161a63b2210edb7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.92.104.0-190.92.110.255
IPv6:
2803:be00::/32
Signature Algorithm: sha256WithRSAEncryption
00:7d:35:08:0e:93:d9:38:2f:64:ff:58:9c:9f:2f:c6:76:98:
cd:5f:54:2e:50:1a:ea:1c:fd:14:5a:3c:0b:3c:fb:67:3a:ee:
07:fe:da:fd:07:59:71:ab:dd:65:4a:2b:67:a2:ab:9f:5b:7c:
b5:73:28:cd:5f:c7:ea:8a:7b:0b:f7:6d:51:0f:16:81:74:8b:
3d:e1:02:11:0b:5e:34:92:0a:e4:c3:fe:ee:1a:ab:72:86:44:
2e:5e:34:0c:73:36:b2:50:3e:a1:de:ca:c5:ae:da:7b:75:18:
cb:cf:e2:43:4e:46:c3:12:ee:9e:32:c9:1e:0b:8d:d3:bb:d3:
70:f6:20:f4:84:d4:bb:36:41:c0:a1:d1:da:75:f0:89:11:3f:
1c:7a:0f:1a:89:48:c5:83:21:dd:02:93:8e:77:97:88:33:63:
01:5a:83:42:ea:42:65:84:03:be:50:85:19:f9:ad:83:e0:0c:
3f:3f:22:b1:e4:87:13:8a:ed:22:e7:e7:f2:11:66:db:28:8d:
f3:4f:97:90:58:ca:a1:af:e1:94:f3:74:e9:bb:dc:71:bf:f5:
c9:5f:73:f6:8a:d1:51:a6:d8:84:f9:78:8d:60:e7:70:a9:c5:
cb:84:e6:36:04:a6:17:32:eb:a6:26:3c:07:56:d2:85:49:5f:
f4:9a:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 19:41:25 2023 by rpki-client on console-fra.rpki-client.org