Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/4d4c1c044a07a6d31e85d1f4c863c2a6d473a331.roa
File: 4d4c1c044a07a6d31e85d1f4c863c2a6d473a331.roa (raw, json)
Hash identifier: 1R8Lk0Du5SCIIPCx3J4h76V4o9u2jsCsBjtjy1LTZPs=
Subject key identifier: 6C:8E:D5:D2:B7:44:03:B5:04:73:1F:0D:33:D0:20:98:EB:AB:C0:BA
Certificate issuer: /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial: 116A
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/4d4c1c044a07a6d31e85d1f4c863c2a6d473a331.roa
Signing time: Fri 21 Apr 2023 13:46:54 +0000
ROA not before: Thu 20 Apr 2023 13:46:54 +0000
ROA not after: Mon 21 Apr 2025 13:46:54 +0000
asID: 12127
IP address blocks: 168.243.196.0/24 maxlen: 24
168.243.200.0/24 maxlen: 24
168.243.204.0/23 maxlen: 23
168.243.211.0/24 maxlen: 24
168.243.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4458 (0x116a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Validity
Not Before: Apr 20 13:46:54 2023 GMT
Not After : Apr 21 13:46:54 2025 GMT
Subject: CN=4d4c1c044a07a6d31e85d1f4c863c2a6d473a331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:b9:68:ec:ea:d7:3d:27:0e:b7:8d:ab:39:
01:74:94:6a:4b:5e:20:51:81:02:45:bc:14:cf:df:
2e:34:bb:cd:db:d5:a3:e8:89:49:8f:ab:17:10:85:
20:20:06:30:3c:d1:a0:0c:56:f9:d4:e8:a9:aa:12:
ef:e8:72:84:5e:21:16:41:0f:3d:48:62:6c:60:7b:
89:30:12:bd:1d:0d:52:34:27:2c:b8:c8:be:ad:db:
c5:01:4a:cc:68:4f:33:ad:08:be:37:74:8a:8f:1d:
8e:b5:21:cc:7c:2f:6b:e9:96:d7:bb:7f:29:4b:2c:
1b:f7:76:73:ff:f0:55:48:12:6b:bd:87:b3:5a:46:
7c:ee:05:a8:3c:c3:aa:b8:fc:41:c1:60:8e:8b:32:
be:bc:ca:ea:5b:82:76:56:01:f0:c8:59:9f:3c:b2:
70:91:d1:75:51:fd:3e:10:3a:85:fe:01:12:89:09:
30:1b:87:c7:eb:07:c7:7b:87:34:7a:1d:4d:3e:06:
18:91:40:f2:06:c5:10:ae:1e:a9:43:8e:8b:c2:bf:
f0:04:bb:aa:71:d4:62:2a:96:aa:a0:a0:4f:9a:fe:
72:22:6c:c7:6f:db:f4:19:de:8a:62:02:bb:3e:61:
d7:05:85:f7:2c:4f:90:03:49:1c:70:17:a6:48:43:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:D5:D2:B7:44:03:B5:04:73:1F:0D:33:D0:20:98:EB:AB:C0:BA
X509v3 Authority Key Identifier:
keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/4d4c1c044a07a6d31e85d1f4c863c2a6d473a331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.196.0/24
168.243.200.0/24
168.243.204.0/23
168.243.211.0/24
168.243.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c3:14:2c:ea:ff:15:f7:6d:9c:c0:00:c6:b4:f1:9b:1e:d3:
01:41:2a:94:fc:90:a0:82:ec:cb:3a:01:de:f1:48:37:0b:76:
62:fd:89:bc:7b:69:1e:38:bc:09:fb:65:f7:3c:01:a5:4c:ff:
02:cf:52:f9:29:a1:c9:8d:ff:fa:a6:a1:06:78:76:bd:8a:c8:
d2:88:c0:b6:63:18:c0:67:59:c2:7b:9c:86:d2:4a:62:82:fe:
c0:c7:df:9e:01:7b:73:5b:ce:13:26:07:68:2d:99:e6:76:e7:
f3:6f:b5:1d:e1:f8:60:25:9a:2a:89:12:66:44:5f:a9:48:51:
c5:8e:4d:9e:30:a0:91:4e:ea:1b:fa:26:02:02:13:ca:2c:e7:
0b:32:26:c3:95:05:36:90:f3:9d:91:f5:8e:13:4b:74:8c:06:
fe:47:1b:fc:d5:22:19:67:3d:cf:26:31:00:05:fb:fc:95:d5:
f5:e9:eb:f7:4f:e4:49:45:bb:7e:67:08:8e:30:83:fd:e6:00:
7a:a7:df:10:39:bd:df:13:d3:02:85:25:aa:f4:bd:29:44:01:
f3:a8:34:ea:6a:7e:22:e2:86:5b:bc:69:de:6f:fb:bc:5b:7d:
67:2b:45:3c:42:6e:67:c7:17:3b:dc:56:55:3a:95:ba:43:13:
d3:33:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org