Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/413408195e5b8eec742af7b40951a399fe4287ec.roa
File: 413408195e5b8eec742af7b40951a399fe4287ec.roa (raw, json)
Hash identifier: ibdFkCoqfPeO7lJxZNGl+8mB7sY/HW7kbxfsYgJifEM=
Subject key identifier: 52:D9:AA:48:CE:7D:C1:8A:97:D6:1B:CA:0E:8D:10:9C:6E:27:A9:95
Certificate issuer: /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial: BBB1
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/413408195e5b8eec742af7b40951a399fe4287ec.roa
Signing time: Mon 15 May 2023 22:09:57 +0000
ROA not before: Sun 14 May 2023 22:09:57 +0000
ROA not after: Thu 15 May 2025 22:09:57 +0000
asID: 263218
IP address blocks: 168.243.80.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48049 (0xbbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Validity
Not Before: May 14 22:09:57 2023 GMT
Not After : May 15 22:09:57 2025 GMT
Subject: CN=413408195e5b8eec742af7b40951a399fe4287ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:7d:81:a3:0c:4d:32:8c:cd:ea:52:ee:f9:
df:0c:2e:8a:4b:8f:f5:31:f1:15:28:0f:7d:5e:42:
7a:bc:c9:4b:a3:e6:67:b3:84:9f:0a:26:59:89:b3:
c6:a4:6d:e1:9a:57:a6:aa:24:96:75:47:3d:8a:cb:
cc:8c:b7:60:30:ab:1e:8f:4d:fc:7d:c0:f8:ce:ad:
18:ed:6d:9b:6f:4a:3f:15:78:dd:46:ba:e2:cf:08:
63:e2:42:96:a1:33:d8:b6:cb:60:84:50:0a:e1:a7:
4f:bf:26:3e:57:8b:73:82:c4:f6:80:ff:52:a8:3e:
f3:91:9c:f4:ff:20:32:fc:67:a4:12:a0:16:59:22:
3a:96:a1:e6:28:c5:ac:68:53:9a:83:c8:28:7d:ec:
89:09:9b:15:2b:fb:f3:38:b4:bb:38:1e:59:d7:0b:
17:f6:ea:4f:9c:83:f0:05:40:4a:e2:71:8a:dd:a0:
9b:88:92:7a:08:2e:b2:eb:cc:bf:39:54:28:dd:67:
01:c1:cc:41:94:e5:05:18:8d:0e:22:05:f7:fd:58:
a6:ff:4f:a8:2d:6b:1d:c2:f6:2c:b1:08:f5:34:bb:
10:b2:13:04:a0:3a:40:fc:84:88:5e:e4:e0:1b:ed:
30:d5:fa:5b:db:8e:83:63:20:46:ad:97:45:44:4e:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:AA:48:CE:7D:C1:8A:97:D6:1B:CA:0E:8D:10:9C:6E:27:A9:95
X509v3 Authority Key Identifier:
keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/413408195e5b8eec742af7b40951a399fe4287ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.80.0/21
Signature Algorithm: sha256WithRSAEncryption
10:f9:08:ea:64:71:8d:82:a5:2e:f6:4c:e8:a1:76:f6:6b:cd:
e2:59:27:7a:7b:97:5a:3d:47:c1:46:c2:3e:3a:4d:0b:ec:1d:
7e:75:31:ed:b6:56:ab:03:af:47:dd:47:69:90:c8:08:59:d3:
db:f8:66:18:53:b9:ae:1c:a8:6d:07:96:fa:18:45:8b:d2:87:
2b:b3:1e:af:15:25:03:d7:da:eb:48:04:e6:4f:6a:11:70:7f:
bd:23:5b:96:ab:67:b4:11:66:22:00:f2:a5:61:c1:52:cd:b0:
ac:d6:54:4e:f1:6a:6f:d6:bd:da:7c:53:fe:e0:56:12:6e:0a:
5b:54:9b:1f:08:9c:9f:ef:73:ba:3b:ab:b0:94:c3:d5:ec:6f:
d6:74:8c:79:76:23:cf:7e:a6:8b:6b:00:1a:da:76:be:e7:3c:
e9:ea:35:e7:4c:b4:80:07:b4:e5:b0:c6:1e:db:0e:08:77:52:
51:97:a6:7c:18:13:3d:c2:79:7e:6d:0d:28:b4:0f:cc:e3:f4:
30:16:02:ec:70:f3:0e:03:49:f0:68:a5:50:85:d3:68:c5:57:
ed:d7:86:9e:bc:86:2c:64:1f:b7:89:bf:55:22:89:9f:82:3e:
25:6c:5b:16:25:f2:7d:75:1e:6e:55:09:1d:ab:cc:fc:25:77:
28:9a:9e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 19:01:27 2023 by rpki-client on console-fra.rpki-client.org