Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/38a0f10c9265895d719fb3fdc4ba78911a1a2968.roa
File: 38a0f10c9265895d719fb3fdc4ba78911a1a2968.roa (raw, json)
Hash identifier: oGt61A4W2LgAGQkf0f6pe3a3Yi8vFkeKG79LiOG13wY=
Subject key identifier: 11:4A:31:B4:AC:11:E1:01:0E:6B:FC:BC:7B:E4:F4:18:12:49:C3:F8
Certificate issuer: /CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Certificate serial: 1D6DD5
Authority key identifier: C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/38a0f10c9265895d719fb3fdc4ba78911a1a2968.roa
Signing time: Tue 10 Jan 2023 20:30:46 +0000
ROA not before: Tue 23 Mar 2021 14:42:24 +0000
ROA not after: Tue 24 Mar 2026 14:42:24 +0000
asID: 264773
IP address blocks: 168.197.172.0/24 maxlen: 24
168.197.173.0/24 maxlen: 24
168.197.174.0/24 maxlen: 24
168.197.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928661 (0x1d6dd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Validity
Not Before: Mar 23 14:42:24 2021 GMT
Not After : Mar 24 14:42:24 2026 GMT
Subject: CN=38a0f10c9265895d719fb3fdc4ba78911a1a2968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:4c:ea:74:0e:4d:2d:1c:19:fa:ba:c1:d6:
73:0c:14:68:a1:36:27:5c:e2:b0:aa:98:ed:7e:b3:
c1:42:87:1a:34:b2:74:c4:83:48:da:f6:7c:03:c2:
cb:02:ce:a8:ee:32:58:3c:14:0f:7a:13:6f:46:d1:
e7:85:47:24:e7:ff:ac:18:a8:37:f9:e1:21:c1:36:
1e:f5:92:f0:ec:ec:42:79:6d:45:b7:68:39:95:dd:
d4:f5:13:51:e2:e7:e3:c2:81:93:ff:8d:82:ef:7e:
23:52:50:f7:51:c2:33:ea:16:9f:f2:f1:a3:a8:81:
1e:ef:f5:2a:1c:26:3d:69:18:97:d7:d3:8b:63:d9:
b4:0a:2a:e5:c1:33:ef:af:3c:f6:d4:36:a4:6a:1f:
65:b5:44:39:c9:d8:18:b7:8f:34:05:0f:51:37:bc:
e7:52:20:b5:b6:89:94:94:42:b4:d9:e9:f1:43:f0:
b3:b5:9b:79:02:3a:59:2d:0c:86:7f:2f:68:9d:d4:
6f:b9:67:6f:ad:58:c1:ea:9d:ac:88:95:aa:36:25:
ce:3e:4e:51:22:e0:05:8a:61:51:0f:cb:ac:4b:2b:
2b:ef:d3:43:63:4f:8d:0e:84:88:7f:1e:59:de:f1:
57:1f:bb:aa:2b:cb:b5:bd:e9:d8:28:a4:97:bf:5f:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:31:B4:AC:11:E1:01:0E:6B:FC:BC:7B:E4:F4:18:12:49:C3:F8
X509v3 Authority Key Identifier:
keyid:C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/38a0f10c9265895d719fb3fdc4ba78911a1a2968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.172.0/22
Signature Algorithm: sha256WithRSAEncryption
82:2c:9d:24:b8:f7:5c:6a:b0:82:72:d9:e8:f5:36:99:9e:68:
1c:34:cd:32:e3:21:bf:db:26:5b:1e:9c:bf:a4:cd:2a:b4:b3:
3e:b8:c9:8f:80:52:b3:94:3f:5b:2c:90:09:31:40:68:67:16:
6f:b5:18:2a:2e:ca:3e:bf:2d:44:c3:e4:37:83:ac:ec:47:4f:
c2:60:6c:08:67:d0:23:21:d2:35:31:43:79:78:03:3e:7c:74:
45:e7:42:25:5c:75:17:49:cd:76:50:0b:87:55:b0:8b:ac:1f:
5e:e5:da:c6:98:99:52:f3:67:36:39:9d:d1:a4:74:80:50:d6:
84:6d:7f:36:92:16:8b:c6:ce:69:94:2e:3c:4a:07:39:09:4e:
f9:d6:45:93:cd:b3:6e:ae:b0:b6:76:2b:e3:b3:ba:d5:71:77:
0a:8e:33:20:aa:3a:da:a8:79:e8:2a:e1:1d:88:d8:ab:06:cd:
53:9b:ca:8c:4d:c6:be:15:60:34:61:eb:13:d9:2b:e9:28:81:
f6:dd:83:5c:ea:66:2c:da:d2:4f:40:93:d3:6b:7c:e6:db:b9:
30:11:0e:b4:f9:ce:5d:7f:c7:c9:34:90:dd:ec:9d:f2:e4:4d:
19:f2:6d:7b:63:cd:01:5b:44:4d:26:2d:b1:50:55:fb:81:78:
73:61:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 21:16:44 2023 by rpki-client on console-ams.rpki-client.org