Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/10f947547ca4252b5d1d19202ba5bec398a833da.roa
File: 10f947547ca4252b5d1d19202ba5bec398a833da.roa (raw, json)
Hash identifier: ThMeCxbQWQkcDN8tzYE+f+ldSh49Bpy9f/et+TX0Sbk=
Subject key identifier: EA:F0:68:29:98:7D:B1:8C:92:58:76:D9:E4:96:FD:09:3E:77:5C:2B
Certificate issuer: /CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
Certificate serial: 1E10B0
Authority key identifier: A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/10f947547ca4252b5d1d19202ba5bec398a833da.roa
Signing time: Fri 24 Mar 2023 08:31:52 +0000
ROA not before: Thu 23 Mar 2023 08:31:52 +0000
ROA not after: Sat 22 Mar 2025 08:31:52 +0000
asID: 265743
IP address blocks: 128.201.116.0/24 maxlen: 24
128.201.117.0/24 maxlen: 24
128.201.118.0/24 maxlen: 24
128.201.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970352 (0x1e10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
Validity
Not Before: Mar 23 08:31:52 2023 GMT
Not After : Mar 22 08:31:52 2025 GMT
Subject: CN=10f947547ca4252b5d1d19202ba5bec398a833da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:f3:dd:15:55:f8:d9:4a:88:24:4d:a5:a8:
b4:3d:da:d5:d1:a2:9d:47:ff:0f:19:df:8d:fe:7b:
5c:fe:75:a0:b0:f1:b5:77:30:7a:24:2e:2d:2a:bd:
65:8b:8d:9e:d3:00:d9:16:29:cb:7a:ca:b7:a2:77:
94:35:69:df:05:b1:16:68:1e:b1:ab:c0:a7:44:ba:
3c:7e:43:14:6f:95:b3:01:72:02:2d:40:6f:d8:a9:
32:09:4b:7c:c5:7a:c7:9e:d7:5e:e3:cf:ec:a1:1b:
91:4a:cd:25:32:c8:e3:c9:13:30:28:b8:f2:8e:7f:
93:4c:1f:ff:22:3c:ee:bc:c5:9e:e7:91:19:19:59:
b0:26:25:55:43:52:dc:c3:11:6a:ca:c3:a2:92:8e:
da:3f:64:bd:d0:94:2e:94:79:e1:cc:2d:9a:cf:9e:
27:a6:3f:65:b1:48:4c:27:f9:46:3c:2a:74:91:0b:
47:08:ad:b7:f1:cb:79:11:ae:d0:56:fe:4e:ff:a5:
45:2c:3c:8b:cc:ef:07:0a:73:a8:3a:13:b8:8e:f8:
2f:a0:6f:bb:5d:7b:67:a8:5e:01:76:9d:13:cf:9c:
8b:f4:da:2a:0f:51:20:02:37:41:4c:33:83:8d:88:
3c:22:a3:f2:45:1a:bb:06:47:f8:ba:38:97:36:be:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:68:29:98:7D:B1:8C:92:58:76:D9:E4:96:FD:09:3E:77:5C:2B
X509v3 Authority Key Identifier:
keyid:A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/10f947547ca4252b5d1d19202ba5bec398a833da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/8c041e50afd913d8324a7c556750cd4fc1dafbbe.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.116.0/22
Signature Algorithm: sha256WithRSAEncryption
85:a3:5b:11:bb:ae:c9:26:6c:1b:3c:00:53:88:ea:3e:a2:62:
2a:f6:70:8d:b7:ca:d1:3b:98:0e:04:86:34:4d:29:50:ba:6a:
b7:22:e0:90:b3:66:6c:7f:e3:25:6a:a2:d6:39:e4:7c:5c:f2:
cb:87:68:9d:36:b8:8e:2d:16:d7:32:61:74:41:74:19:bc:c9:
58:0b:d5:49:df:d4:11:05:c8:66:48:cd:99:de:cc:69:2c:ae:
79:b9:36:5b:61:da:31:ae:33:c3:85:6c:d8:19:03:4a:2f:f4:
be:0b:d7:67:dd:a8:d8:e7:90:24:00:f1:2c:50:97:9b:42:2d:
94:c4:a3:bd:77:38:27:ba:4c:33:90:69:94:19:ba:e2:9d:79:
ac:8c:d0:a5:69:b2:8c:ea:29:5c:a9:19:da:de:28:9b:53:e8:
fc:b0:c1:ff:8e:ca:80:00:ea:fc:41:b8:0e:18:2b:7b:87:69:
37:70:b0:56:b1:68:c4:30:11:fd:f1:08:c5:30:b8:9a:57:76:
97:b5:dd:53:11:13:2e:9e:c4:b5:44:ce:41:ff:38:a3:7f:90:
48:73:f4:d2:25:9a:34:49:9a:36:57:a4:f8:af:f8:dd:cf:82:
3f:1b:1f:a6:4b:d4:cf:b1:74:05:5d:2c:e1:58:e0:51:9b:5b:
42:45:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org