Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/b82b0c240c8f2539cce35d84f616b74187acadb7.roa
File: b82b0c240c8f2539cce35d84f616b74187acadb7.roa (raw, json)
Hash identifier: /003X6H2dCVg8ZExfvzVa+pDxcw4NNk87VLdpQKuNDk=
Subject key identifier: CA:D8:A0:12:A7:06:7E:FF:33:C7:BA:DE:7F:89:D4:01:55:F6:7D:41
Certificate issuer: /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial: 0BD9
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/b82b0c240c8f2539cce35d84f616b74187acadb7.roa
Signing time: Fri 21 Apr 2023 13:45:41 +0000
ROA not before: Thu 20 Apr 2023 13:45:41 +0000
ROA not after: Mon 21 Apr 2025 13:45:41 +0000
asID: 263783
IP address blocks: 168.243.196.0/24 maxlen: 24
168.243.200.0/24 maxlen: 24
168.243.204.0/23 maxlen: 23
168.243.211.0/24 maxlen: 24
168.243.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3033 (0xbd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Validity
Not Before: Apr 20 13:45:41 2023 GMT
Not After : Apr 21 13:45:41 2025 GMT
Subject: CN=b82b0c240c8f2539cce35d84f616b74187acadb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:d9:b8:e0:34:c3:40:19:a0:61:f0:83:3e:
21:ce:0e:2a:01:72:df:d7:46:80:c3:86:6e:a4:53:
91:c0:30:94:6d:4f:42:37:2a:eb:00:2a:85:9a:cd:
db:e4:b5:5b:2d:df:a5:4c:eb:2e:a4:b4:9b:33:02:
82:1a:3b:c8:5b:25:f6:22:f7:47:c4:da:39:91:1e:
12:14:71:0b:8d:72:07:d3:c3:c1:db:70:db:0c:bc:
f9:2f:18:13:dd:c7:7f:43:d0:94:e4:04:1b:1d:af:
f9:5a:16:28:a9:78:cf:ec:df:42:df:fb:fd:71:4d:
e2:4f:9c:99:f3:09:38:c1:44:8d:01:f6:49:86:c4:
72:75:9f:a4:ec:47:93:71:c3:55:f7:91:c9:f1:cc:
59:e8:64:31:ec:e5:51:f9:7a:35:e4:05:5e:19:34:
ac:94:fa:27:30:67:f0:ab:f6:d3:93:ed:c4:e6:ed:
2a:48:e2:de:56:ab:a0:08:5d:0f:d3:f5:dc:46:5b:
b5:06:6b:68:52:0a:aa:30:77:f3:13:73:cb:fd:16:
41:38:4d:d2:da:b6:14:6a:1e:6e:3e:e4:6f:9c:ac:
32:c8:0c:ca:ac:de:09:87:b7:2d:5a:32:4a:39:9b:
ac:15:04:c2:82:2c:e5:34:25:a0:2c:0e:ab:08:0d:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D8:A0:12:A7:06:7E:FF:33:C7:BA:DE:7F:89:D4:01:55:F6:7D:41
X509v3 Authority Key Identifier:
keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/b82b0c240c8f2539cce35d84f616b74187acadb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.196.0/24
168.243.200.0/24
168.243.204.0/23
168.243.211.0/24
168.243.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1b:19:17:41:91:17:86:9c:ce:13:3d:7b:90:de:c8:a3:c4:
da:2c:30:cd:44:64:9e:a5:a5:84:59:39:09:70:e4:d7:16:6d:
a2:e1:e8:60:f1:f3:b3:a5:01:9f:3d:f1:11:9f:2e:42:e9:86:
2e:e6:d8:b6:47:7c:23:3f:e3:f9:a6:64:a1:32:5d:e2:6d:d5:
ec:f3:96:f7:91:c6:82:f9:d6:88:26:41:f3:69:b9:97:1f:04:
b4:7f:bf:bd:b2:7f:7b:12:10:53:4d:29:c2:d3:95:a9:dc:18:
e4:bb:e9:a4:d0:a0:f1:94:87:98:2c:e7:de:b7:7a:25:6e:7b:
09:59:90:d2:3e:be:f7:a0:03:77:e9:16:f4:5f:45:97:29:bb:
01:d7:b6:32:fe:c8:6c:ef:71:7c:bd:b6:bb:f8:65:16:d4:52:
5a:e2:df:0b:d8:c6:9a:9b:ca:54:9a:5a:ce:99:27:c7:5d:da:
ae:c5:8f:e9:a5:74:70:ff:13:74:11:34:b3:45:24:40:2d:da:
61:4e:91:58:35:ec:b4:d8:8c:94:bf:b5:f3:52:0c:42:dc:af:
70:20:99:76:50:7a:4e:15:ca:2c:27:ff:8f:de:5b:ee:3c:30:
95:40:59:6e:0c:d4:45:27:cb:ce:46:ab:89:69:75:1e:23:4a:
23:be:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org