Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/a017dc36407af9aafe3f28ab2ab174a00d769826.roa
File: a017dc36407af9aafe3f28ab2ab174a00d769826.roa (raw, json)
Hash identifier: goNkrxkNdj5U5xyriiNzHJYUAPy5b+hFN8Whm3UsJgE=
Subject key identifier: 33:92:AA:2E:33:02:41:4A:4F:27:F6:4E:D1:EF:40:95:77:D9:98:C4
Certificate issuer: /CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
Certificate serial: 0C7B22
Authority key identifier: A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/a017dc36407af9aafe3f28ab2ab174a00d769826.roa
Signing time: Wed 24 Mar 2021 22:51:49 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 265743
IP address blocks: 128.201.116.0/24 maxlen: 24
128.201.117.0/24 maxlen: 24
128.201.118.0/24 maxlen: 24
128.201.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817954 (0xc7b22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c041e50afd913d8324a7c556750cd4fc1dafbbe
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=a017dc36407af9aafe3f28ab2ab174a00d769826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:e7:60:65:f9:08:ea:d5:dc:7b:9b:92:69:
98:34:b6:bb:80:a6:a3:23:f4:e6:a0:64:70:6f:4f:
ff:a0:e2:b0:9e:27:d4:ed:43:81:7e:b8:ce:52:da:
b6:08:39:bf:65:39:e0:6d:59:fa:f4:49:9b:a2:75:
3c:82:ac:a2:d6:93:19:fd:d9:1d:c0:66:a3:f6:4d:
33:d1:a2:3f:75:6b:76:2c:df:ea:d8:95:5b:97:6a:
1f:ac:f0:5c:9d:12:aa:6c:d4:a7:d1:3e:ca:b9:4a:
48:37:8b:ea:9c:41:e5:4a:c4:41:83:de:73:20:69:
e0:37:f8:0b:07:ec:9d:8e:8e:09:65:85:7e:cc:da:
9d:fa:c9:3c:0e:44:92:89:d2:36:4c:68:7a:67:e1:
56:33:df:b5:d9:75:26:7f:0b:54:48:1a:2e:b5:fb:
7c:6a:01:73:6d:91:8b:20:a8:2e:e1:e0:60:0d:e8:
c2:c9:64:3b:cf:da:c7:bd:62:02:cc:81:05:60:81:
e4:80:c9:7e:1e:54:bc:60:54:a8:b9:d4:ef:6c:69:
2d:76:a7:c8:ea:7e:50:b7:1e:df:4d:a8:28:de:d6:
72:7f:14:81:e3:b2:b4:54:f2:17:c6:ea:e3:f9:ec:
0e:a3:51:be:3b:ea:38:7b:5a:23:34:53:df:0c:10:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:AA:2E:33:02:41:4A:4F:27:F6:4E:D1:EF:40:95:77:D9:98:C4
X509v3 Authority Key Identifier:
keyid:A6:C1:19:CB:89:C0:24:64:6D:FE:6B:06:8A:28:7C:60:C0:CB:D5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c041e50afd913d8324a7c556750cd4fc1dafbbe.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/a017dc36407af9aafe3f28ab2ab174a00d769826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/445b84aa-7411-4b51-86b1-b352905ee448/8c041e50afd913d8324a7c556750cd4fc1dafbbe.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.116.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a9:7d:49:ab:38:29:d5:e9:22:28:a7:f1:cd:03:1a:1c:75:
50:e6:b1:ef:3b:e9:00:35:0f:e1:f2:62:4e:05:3f:f1:b3:f9:
6e:d6:29:9f:91:2d:b6:a8:6a:04:6a:db:92:7a:bc:31:ad:84:
40:fc:ad:e5:e7:50:23:13:f9:58:e3:fa:8c:b8:b7:07:db:42:
d4:7d:08:86:3e:3f:2a:2a:a6:66:2b:d0:cc:a6:51:5e:aa:79:
6f:11:95:98:51:82:86:a0:f6:d1:a5:fa:cc:76:3f:53:de:17:
27:85:b8:53:1b:79:07:50:16:bf:62:c3:df:ed:c1:67:8b:10:
df:f5:dd:49:cf:d8:7d:58:2d:10:7e:3a:21:7e:d7:61:65:97:
ca:50:9e:46:36:88:a7:5a:01:c3:14:0b:65:fd:dd:9f:88:ad:
1f:29:b6:39:9d:87:6d:17:92:59:43:55:79:23:d0:d6:20:5b:
19:28:8a:e5:ac:bd:37:71:e8:2a:02:7f:e9:58:fb:15:66:eb:
25:a1:dd:b4:a6:98:2a:b0:eb:d9:e2:5d:0c:a0:b6:8a:af:64:
cb:d5:f5:2c:69:ce:c8:8f:88:62:1b:10:1a:d3:3e:a0:68:0f:
6f:d4:7a:2b:bf:82:ba:ea:5e:c2:92:bd:91:05:d6:3e:f4:72:
1d:a1:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org