Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/78e76a5c0d1b234b4d6f59d244af121f6192acd9.roa
File: 78e76a5c0d1b234b4d6f59d244af121f6192acd9.roa (raw, json)
Hash identifier: /Ro5FkxZQio3RrOuKYa0FB6Nqg0WheQelJl2q7hAo4Q=
Subject key identifier: E6:6F:B4:0D:05:D8:2D:2A:B6:DC:80:61:FA:06:BD:EA:A0:C3:A2:F7
Certificate issuer: /CN=ef788f83ad12f7488de1d2fc19482e9274b780f6
Certificate serial: 0D44D0
Authority key identifier: 8B:E8:87:5F:E4:12:90:64:23:50:28:2A:14:DB:8C:0A:9F:3A:20:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef788f83ad12f7488de1d2fc19482e9274b780f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/78e76a5c0d1b234b4d6f59d244af121f6192acd9.roa
Signing time: Wed 24 Mar 2021 14:38:23 +0000
ROA not before: Wed 24 Mar 2021 14:38:23 +0000
ROA not after: Tue 24 Mar 2026 14:38:23 +0000
asID: 264750
IP address blocks: 143.137.80.0/22 maxlen: 22
168.232.108.0/22 maxlen: 22
170.239.164.0/22 maxlen: 22
170.82.24.0/22 maxlen: 22
170.244.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 22 Jan 2024 14:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869584 (0xd44d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef788f83ad12f7488de1d2fc19482e9274b780f6
Validity
Not Before: Mar 24 14:38:23 2021 GMT
Not After : Mar 24 14:38:23 2026 GMT
Subject: CN=78e76a5c0d1b234b4d6f59d244af121f6192acd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:ee:06:9a:47:43:fd:12:22:aa:9a:60:0a:
5d:e0:df:ff:9f:5d:e1:77:91:07:33:ff:79:ae:e5:
44:7e:1c:a7:5f:22:99:72:fd:1d:16:49:0d:ac:1d:
4f:8f:be:b5:3e:14:5d:e0:00:ca:0c:9d:df:55:7e:
0f:d4:d6:bf:72:d1:dd:96:89:df:fb:f1:ef:8c:97:
cc:49:72:90:7d:43:1e:c2:13:de:8c:11:85:cc:d4:
7b:91:e4:a2:4e:12:bc:17:80:54:f4:eb:b7:12:b0:
98:09:62:cb:85:20:fc:83:cf:db:ee:4e:5f:d5:85:
86:42:df:5f:d5:f8:5c:07:62:34:ad:27:eb:3b:24:
12:50:c6:06:a2:75:79:26:19:35:78:d3:26:3d:ba:
83:e0:d4:03:15:c2:d8:b7:9c:dd:da:89:f1:33:43:
83:f1:c8:de:bc:b9:74:b1:ed:4a:6e:79:40:fd:ec:
b8:07:14:b3:d3:5b:6b:3c:10:20:fd:19:b5:35:f6:
49:42:67:3b:19:79:e9:c5:28:5c:ae:0d:b5:56:49:
50:24:55:41:90:c0:47:ac:84:2b:94:90:59:5c:24:
87:d3:2d:22:34:b6:07:64:e5:64:b3:a9:5d:a5:2b:
01:a7:34:3d:bf:a9:e0:d4:10:cf:17:7b:61:b0:58:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6F:B4:0D:05:D8:2D:2A:B6:DC:80:61:FA:06:BD:EA:A0:C3:A2:F7
X509v3 Authority Key Identifier:
keyid:8B:E8:87:5F:E4:12:90:64:23:50:28:2A:14:DB:8C:0A:9F:3A:20:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef788f83ad12f7488de1d2fc19482e9274b780f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/78e76a5c0d1b234b4d6f59d244af121f6192acd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3c234cf8-7fc4-463c-92b0-3a9015cfcb0c/ef788f83ad12f7488de1d2fc19482e9274b780f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.80.0/22
168.232.108.0/22
170.82.24.0/22
170.239.164.0/22
170.244.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:88:02:06:7c:7c:b9:20:aa:26:05:ea:15:b0:46:dd:7f:8d:
6c:1f:52:e1:88:09:5b:9c:ab:23:71:f1:13:61:89:51:65:c6:
ed:49:c2:b1:6e:1d:62:fc:04:7e:85:83:84:7d:a3:48:7b:68:
bd:f4:a4:66:bb:d3:e7:6e:a8:af:55:aa:a2:d7:8b:17:71:2f:
45:be:39:11:9e:7a:d2:79:ca:42:b7:6f:ba:a1:7f:2e:73:21:
13:e3:6a:3c:dd:f2:96:4c:65:37:f7:64:e4:bf:cf:27:53:ee:
73:96:b5:72:a7:92:37:e1:85:b0:a9:1f:d2:49:5c:0b:f9:8d:
ee:25:4a:f6:74:1b:0f:bc:bb:aa:62:c3:eb:6a:ea:b9:19:2d:
0c:b8:3c:b1:f9:6a:2d:5d:7e:07:74:73:18:7b:c4:2a:ae:84:
70:18:68:18:a0:a3:67:3b:0c:bd:25:6b:e6:20:52:c7:9a:e2:
2e:58:e2:54:be:4f:4a:24:d2:56:93:93:94:d0:0a:eb:d7:31:
dd:0b:54:0d:b6:48:1c:e6:97:66:17:f0:5e:f9:8e:a5:86:08:
ff:94:cf:c2:0a:19:2a:4e:21:bb:24:b4:b6:de:70:ea:87:f1:
62:4b:37:94:8a:5d:92:32:7c:ec:4b:d2:ae:3c:3e:53:35:91:
e3:1c:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 19:25:26 2024 by rpki-client on console-ams.rpki-client.org