Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/b29644b1e2a06995b487ecefb57b03b2a5132556.roa
File: b29644b1e2a06995b487ecefb57b03b2a5132556.roa (raw, json)
Hash identifier: ZKfwBzS9G41SETYJkrA/h4Xb1rUQE3WI2HwM8Z7xgtc=
Subject key identifier: B3:BA:5A:89:EC:E7:11:BC:50:8D:41:BE:CF:80:17:67:16:8F:11:D2
Certificate issuer: /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial: 24AF2F
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/b29644b1e2a06995b487ecefb57b03b2a5132556.roa
Signing time: Tue 19 Dec 2023 14:26:43 +0000
ROA not before: Tue 19 Dec 2023 14:26:43 +0000
ROA not after: Fri 19 Dec 2025 14:26:43 +0000
asID: 52436
IP address blocks: 132.255.112.0/22 maxlen: 24
190.120.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404143 (0x24af2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Validity
Not Before: Dec 19 14:26:43 2023 GMT
Not After : Dec 19 14:26:43 2025 GMT
Subject: CN=b29644b1e2a06995b487ecefb57b03b2a5132556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:00:48:00:c6:50:2e:1a:59:ec:27:c7:e1:4b:
e9:df:dc:90:f9:c9:ca:15:16:82:8b:6b:92:ca:a4:
04:f2:35:1e:8e:9f:d8:6b:c0:06:19:40:50:54:3e:
c6:0c:68:00:0d:f4:c7:66:71:41:22:26:29:88:1f:
ed:28:d3:51:ff:02:4b:be:16:aa:a8:f0:25:b6:c6:
53:43:58:86:4a:8d:a0:d6:2a:ed:22:9c:85:3b:22:
35:f3:a1:53:58:8a:90:43:37:ef:97:03:ba:29:9d:
5b:f5:0c:19:40:e8:3a:4a:ea:84:76:f3:91:ec:55:
f1:d0:f3:51:13:3e:e4:10:b2:35:7f:e9:2d:12:cf:
8e:ad:f4:84:e6:ec:73:6b:5c:35:c4:6d:18:5b:13:
13:2b:23:63:6a:f2:1b:40:16:d0:67:71:c8:b2:bd:
96:ad:e3:6c:1b:ed:c2:ac:48:8d:63:4e:71:ea:b1:
04:a4:90:9e:b9:ca:ba:3b:04:9a:1f:b2:b5:6e:b4:
7a:81:5b:3f:dc:f1:84:8e:ed:93:7c:79:4b:e7:7c:
01:f7:43:28:41:22:5a:fc:56:69:ba:76:8d:09:5b:
85:03:f8:ca:34:60:83:e5:43:44:49:05:67:53:e2:
df:b4:07:23:4a:6d:35:23:16:7e:28:f4:f1:74:bd:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:5A:89:EC:E7:11:BC:50:8D:41:BE:CF:80:17:67:16:8F:11:D2
X509v3 Authority Key Identifier:
keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/b29644b1e2a06995b487ecefb57b03b2a5132556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.112.0/22
190.120.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:2d:6e:e3:fe:ce:dc:3a:13:80:3d:85:36:c7:4e:09:13:5e:
30:bb:90:8c:74:f9:e5:d3:e9:3d:7e:98:5a:d2:23:24:80:ba:
d2:e5:cf:85:6b:76:a4:35:29:74:b3:43:6c:04:3c:86:07:ba:
5f:51:a3:11:39:cb:97:47:58:12:33:00:d1:4b:13:fb:ca:b0:
a1:f4:1e:1b:6f:59:c0:da:a3:ad:9f:51:9b:16:f3:0b:c1:ab:
0c:d7:81:f7:c1:bd:b0:b9:db:71:17:19:75:9f:0a:48:49:0a:
91:b4:f5:c1:38:b4:40:2a:b6:8a:a1:18:14:c1:fd:70:01:93:
36:72:1b:2c:64:44:ad:8a:5e:42:ca:28:f2:e1:c7:6e:ac:d9:
cd:5c:45:f3:9d:5f:b8:e7:be:f3:f4:89:5d:9f:fa:32:08:06:
37:ca:75:45:65:73:b0:1c:45:dd:4b:cc:60:8c:ce:6f:a9:d0:
23:75:ff:ad:1c:6f:ba:28:eb:84:d7:61:68:39:d9:2e:b9:70:
0e:0e:ac:6a:39:47:e3:12:2e:f0:b2:2c:84:5e:e7:c8:fa:95:
67:d2:bf:b3:c1:a1:a2:fc:c6:be:e6:a6:be:0d:9c:a8:d5:ee:
71:d8:9a:40:99:c4:c5:46:88:cb:0b:c2:1b:c1:09:a5:60:ed:
5b:a2:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 16:16:32 2023 by rpki-client on console-ams.rpki-client.org