Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0f9cb8362d3f1ec002a57825512940b128fd32f9.roa
File: 0f9cb8362d3f1ec002a57825512940b128fd32f9.roa (raw, json)
Hash identifier: D1vXzIjH3G8XmfsDuj+yRI62xHt1G6riEY3GQL8vTdo=
Subject key identifier: B2:A3:62:D1:FC:AE:19:FD:0D:02:DD:07:51:E2:18:62:72:7C:96:C2
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 119A19
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0f9cb8362d3f1ec002a57825512940b128fd32f9.roa
Signing time: Mon 27 Nov 2023 19:51:41 +0000
ROA not before: Mon 27 Nov 2023 19:51:40 +0000
ROA not after: Thu 27 Nov 2025 19:51:40 +0000
asID: 52444
IP address blocks: 179.40.69.0/24 maxlen: 24
179.40.70.0/24 maxlen: 24
186.38.42.0/24 maxlen: 24
201.251.168.0/24 maxlen: 24
186.38.8.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153561 (0x119a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 27 19:51:40 2023 GMT
Not After : Nov 27 19:51:40 2025 GMT
Subject: CN=0f9cb8362d3f1ec002a57825512940b128fd32f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:b7:aa:d7:37:c8:d9:e8:68:bd:f9:48:5b:
1f:33:6b:99:d8:c4:09:86:ff:47:54:96:8a:18:2b:
39:01:50:ec:14:f0:10:52:e7:dd:81:5d:0f:30:95:
1a:61:4e:fd:c1:2c:22:66:dc:fa:1a:d9:b1:38:fd:
97:f5:9e:f2:6d:f6:a2:3b:3d:f7:61:de:13:20:47:
8f:4b:60:07:38:e6:29:ce:0f:16:3a:3c:2d:0d:4a:
1e:71:e7:e5:b5:36:90:38:13:32:4a:3e:7c:4f:ce:
e1:cf:e9:06:c6:6e:44:13:f0:59:68:0d:1b:86:be:
f9:22:aa:1c:77:39:51:2d:3a:4c:43:4b:53:9d:59:
29:13:23:78:8c:2a:75:0f:09:16:7e:bc:dd:a8:d4:
b4:4b:94:58:c5:4b:0d:f5:7f:a0:e4:6a:89:8c:16:
05:f5:3b:03:01:96:60:33:af:c7:e3:c3:34:c4:64:
25:3d:21:19:18:c9:ba:fb:1e:78:8e:fa:e8:99:f8:
8b:36:6f:42:c6:59:62:6c:62:92:63:e9:8c:f5:68:
5e:01:93:05:c2:17:14:a3:99:90:ea:9a:43:3c:51:
65:3f:47:8c:e8:78:dc:ca:d3:4b:6e:4c:d1:dd:5c:
f8:d6:8f:31:d5:68:83:86:34:64:d2:b9:7b:88:73:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:62:D1:FC:AE:19:FD:0D:02:DD:07:51:E2:18:62:72:7C:96:C2
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/0f9cb8362d3f1ec002a57825512940b128fd32f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.40.69.0-179.40.70.255
186.38.8.0/23
186.38.42.0/24
201.251.168.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d4:3a:7a:97:9d:0c:22:7d:8f:36:c0:24:92:da:33:a0:e3:
41:6c:4a:8c:cb:41:07:72:aa:35:99:aa:d5:23:03:fa:80:4b:
30:db:b9:73:d5:01:d6:f3:3c:ce:d3:d4:88:6d:f2:73:87:58:
03:ae:b0:85:5e:2c:d6:61:c6:13:39:d9:4f:0b:f5:f9:8d:9d:
32:24:b6:11:db:98:b5:40:e1:20:ef:43:7e:b8:fa:40:57:fa:
78:11:bb:01:51:9b:51:e1:80:59:1b:44:31:6a:35:66:5a:bc:
2b:a7:52:98:2e:72:b5:5c:74:96:e2:7e:2e:c9:88:df:fc:0c:
d6:49:39:a9:c3:86:ca:bd:19:5f:ce:94:46:14:46:92:31:07:
44:f0:c4:a3:9c:fb:a4:92:99:0c:90:1b:ac:ec:54:e0:74:9b:
f4:94:b8:73:d2:db:2e:9d:63:39:fa:00:15:f5:95:69:dd:e1:
8a:56:e5:c9:0c:0c:60:1a:8e:01:f7:f6:55:93:22:6b:99:a1:
b0:c5:9d:c3:e1:00:f2:8a:ae:c0:25:e5:f9:e0:b5:b8:91:0f:
d9:93:f3:1f:de:ed:31:87:48:4d:fe:7e:e1:61:e9:cd:91:00:
97:6b:c7:ba:11:49:f1:fc:74:0d:6c:ea:21:68:07:4b:c3:2e:
28:70:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 21:08:50 2023 by rpki-client on console-ams.rpki-client.org