Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/7d51c0f2fe25ca1d66e297c0a8476f63e1ee7ab7.roa
File: 7d51c0f2fe25ca1d66e297c0a8476f63e1ee7ab7.roa (raw, json)
Hash identifier: 8aTvCl45zXHVeRX2+VZ138xd264pF3QRneb29spDDZQ=
Subject key identifier: C9:C7:B8:A6:BF:59:20:0E:09:E1:9E:38:08:69:21:6C:89:4E:75:BC
Certificate issuer: /CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
Certificate serial: 1FF157
Authority key identifier: 08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/7d51c0f2fe25ca1d66e297c0a8476f63e1ee7ab7.roa
Signing time: Fri 24 Mar 2023 08:31:35 +0000
ROA not before: Thu 23 Mar 2023 08:31:35 +0000
ROA not after: Sat 22 Mar 2025 08:31:35 +0000
asID: 16973
IP address blocks: 168.205.64.0/23 maxlen: 24
168.205.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093399 (0x1ff157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f7ad2592489a8e238bbf1d55399b9278c418a6
Validity
Not Before: Mar 23 08:31:35 2023 GMT
Not After : Mar 22 08:31:35 2025 GMT
Subject: CN=7d51c0f2fe25ca1d66e297c0a8476f63e1ee7ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:16:eb:10:e2:a6:92:85:5b:41:dc:7d:ed:
ee:53:df:aa:ae:6c:fa:e2:28:ca:35:2a:0f:67:f6:
5c:f4:a4:9e:ab:e9:6b:4a:ab:20:58:f3:7c:1a:41:
6f:58:a2:2b:ce:31:d6:ca:b8:18:5f:1b:cc:e9:f2:
db:f8:6e:f6:9a:97:38:72:6f:b2:4c:83:e8:8e:ba:
c5:4b:3d:0e:dd:73:57:1e:26:95:6c:c1:e3:70:4a:
25:85:82:59:29:a2:2e:fa:b0:2d:d7:69:c5:0c:1e:
95:f3:7c:58:09:2c:0e:92:13:4d:df:d8:9c:3e:7d:
c2:2b:14:23:99:6d:94:25:80:b4:68:03:1c:76:5d:
06:20:8b:12:8a:7f:0a:d9:21:64:5f:d6:f2:14:cc:
af:bc:fd:ae:f1:3b:e3:b2:bb:27:7c:57:24:36:a8:
98:0f:5f:92:0c:43:f3:dd:c7:10:27:1f:8e:70:01:
89:34:d8:d1:00:b6:44:61:8e:0e:9e:9e:d2:5e:98:
c4:3e:9e:eb:92:d3:43:7c:8f:81:15:c8:08:59:bd:
0d:e2:9e:67:29:17:ab:9f:e0:0a:e1:be:7f:13:cf:
a8:45:09:9d:41:5c:8d:f0:10:43:06:a4:65:a6:92:
5d:ec:01:3c:e8:2d:14:b7:97:1d:9d:56:e5:0b:93:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:B8:A6:BF:59:20:0E:09:E1:9E:38:08:69:21:6C:89:4E:75:BC
X509v3 Authority Key Identifier:
keyid:08:32:2C:C5:41:BF:5F:AD:D4:CC:8F:B3:94:99:13:E4:E6:72:EF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f7ad2592489a8e238bbf1d55399b9278c418a6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/7d51c0f2fe25ca1d66e297c0a8476f63e1ee7ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/464baa4d-17f5-4232-ab3c-7362c9eaba81/41f7ad2592489a8e238bbf1d55399b9278c418a6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.64.0-168.205.66.255
Signature Algorithm: sha256WithRSAEncryption
0e:d9:77:89:2a:3b:c6:0c:e4:ed:f4:11:70:ea:3d:44:ad:1b:
c7:c9:0f:9e:93:e8:30:a6:82:45:ed:9d:71:ac:6a:19:ad:5e:
4b:53:91:6f:45:ac:ac:00:2a:cc:cb:c9:d4:f1:49:a9:e0:f2:
f6:79:0f:e6:5b:52:63:89:dd:99:a8:a1:fb:2c:cd:77:8a:55:
90:eb:0e:88:f1:41:fa:28:8b:db:d7:90:4b:c5:58:ab:5a:69:
78:d4:d1:8c:a9:f7:71:d9:da:d4:06:1d:01:89:b4:51:2c:1c:
36:10:72:cf:f1:b6:2b:e5:80:ad:f5:c7:b0:a5:b5:55:97:75:
ce:5a:c2:e4:d5:a3:57:24:9a:c5:b4:00:0f:2a:f0:5e:80:d3:
b6:41:e9:d9:64:ce:ed:5c:f1:25:d2:08:8e:37:6d:82:6d:0a:
26:85:71:27:14:b0:18:c3:95:3a:f5:3e:3c:34:aa:19:fe:27:
3f:96:85:2c:f8:ae:33:02:95:00:79:b6:90:9f:b9:e0:bd:9a:
fe:d0:4a:a5:70:18:15:61:b7:b8:79:e8:14:0d:1a:94:06:bb:
85:24:a1:53:58:9f:5c:f4:f4:ca:62:5f:d5:d0:d0:f8:47:43:
f4:a7:53:fe:32:fc:6a:55:3f:e5:e5:11:49:ad:1b:65:99:df:
68:c7:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 19:17:06 2023 by rpki-client on console-fra.rpki-client.org