Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/85243fc9940ae98051eb967e59e0bd6ab3f8d894.roa
File: 85243fc9940ae98051eb967e59e0bd6ab3f8d894.roa (raw, json)
Hash identifier: kUE+ACu6JJgoDG9jpwd7RX7KVh2xzIC77qoz31ZxrCg=
Subject key identifier: C9:2F:D6:1B:6C:67:56:9B:99:6B:D8:6B:0A:A5:02:4D:A2:6E:4A:E2
Certificate issuer: /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial: 24764D
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/85243fc9940ae98051eb967e59e0bd6ab3f8d894.roa
Signing time: Wed 06 Sep 2023 20:06:08 +0000
ROA not before: Tue 05 Sep 2023 20:06:07 +0000
ROA not after: Sat 06 Sep 2025 20:06:07 +0000
asID: 209588
IP address blocks: 179.60.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389581 (0x24764d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Validity
Not Before: Sep 5 20:06:07 2023 GMT
Not After : Sep 6 20:06:07 2025 GMT
Subject: CN=85243fc9940ae98051eb967e59e0bd6ab3f8d894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:00:1e:8c:cf:21:b1:a4:80:ec:d1:b8:de:
a1:44:d9:2d:20:b4:73:85:b4:f4:65:f1:e3:d6:f3:
50:dd:85:87:6e:45:c7:9c:2a:40:47:f2:31:8f:59:
c7:04:cd:f4:9e:14:0d:25:74:c1:8b:5e:e7:a0:92:
eb:40:46:f4:9a:b2:f2:8b:64:4d:ba:a2:2f:6e:a6:
06:be:ca:7a:b7:4d:89:6e:cd:63:ec:df:c9:7e:24:
a0:7f:6b:fa:36:5d:3d:1b:19:3f:7c:23:01:15:ce:
fb:f5:a6:16:f0:a6:bb:dd:0d:f6:bb:ba:4e:5f:ba:
f9:4a:57:ec:b1:fe:2d:ce:cc:5f:95:c2:69:f1:7d:
43:42:39:13:d5:70:ec:a3:c4:1e:99:49:66:8c:ef:
d1:ab:0d:2c:79:20:48:f5:8e:6c:a2:2d:fd:66:cc:
38:13:bd:c0:26:01:f5:64:7c:c7:0e:18:df:52:35:
90:1d:e0:6c:4c:d3:4f:30:0a:ba:22:75:24:b4:8f:
db:e4:fd:94:eb:ec:11:4b:82:21:35:ab:2b:86:7f:
41:c2:78:79:0f:2f:36:9c:94:3e:89:5f:dc:a1:6e:
a5:dd:10:6f:f7:95:0f:66:dc:a4:ad:4a:be:3a:36:
b1:ad:0e:a9:71:b7:62:8b:d3:c0:a9:0a:d2:58:45:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2F:D6:1B:6C:67:56:9B:99:6B:D8:6B:0A:A5:02:4D:A2:6E:4A:E2
X509v3 Authority Key Identifier:
keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/85243fc9940ae98051eb967e59e0bd6ab3f8d894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.147.0/24
Signature Algorithm: sha256WithRSAEncryption
66:74:72:b7:d6:ef:79:c8:1b:06:18:7b:d0:2b:30:94:fc:44:
be:91:28:5d:21:2d:5a:a4:21:be:96:ed:60:68:85:b5:e8:08:
59:43:8a:75:53:9a:0f:9b:90:45:02:02:34:ef:33:dd:2b:c5:
59:7f:15:bb:8c:52:96:18:28:39:24:bf:c4:8b:ae:6d:4b:03:
a3:b3:49:41:02:17:38:a8:4a:b1:9f:b9:25:35:a2:79:6c:58:
39:64:d6:52:5d:01:11:88:27:34:f2:63:80:13:5c:8e:2d:3d:
84:a0:0b:23:4a:32:38:2a:96:9c:2d:5f:b5:67:f1:4f:ba:57:
9a:c2:1c:76:1a:b9:5a:a5:30:5d:81:97:f6:e6:a0:5c:9d:97:
04:ff:50:62:06:8f:77:d1:bb:cc:e7:4f:85:d8:06:8d:6e:3b:
cd:f0:ea:be:f2:48:08:c3:e6:1b:74:28:c4:f9:46:6a:55:28:
8f:17:90:ec:af:81:bc:ae:1a:10:fb:ae:ce:f9:00:41:01:1c:
d4:f8:e1:12:fd:60:02:14:5d:64:ab:b7:fe:c7:df:f3:e4:a0:
f4:31:05:6d:70:47:88:55:a6:d2:84:c0:a7:53:d2:50:d2:db:
06:d8:d7:8b:43:f7:70:e7:1f:1a:74:e5:ba:2b:9b:29:43:18:
7c:4a:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 08:42:41 2023 by rpki-client on console-fra.rpki-client.org