Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/cc45b6a7c128cab3d6394c0dedf8dcfd0da2142c.roa
File: cc45b6a7c128cab3d6394c0dedf8dcfd0da2142c.roa (raw, json)
Hash identifier: ujWrvl80IXnhjMvGGCbl1NcNl+TuzoydwQYmJscaQaA=
Subject key identifier: 86:5A:8F:C4:A8:01:75:CC:7B:0F:04:46:71:2B:9E:4E:18:6A:CC:20
Certificate issuer: /CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Certificate serial: 0DE43A
Authority key identifier: 4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/cc45b6a7c128cab3d6394c0dedf8dcfd0da2142c.roa
Signing time: Wed 24 Mar 2021 14:29:54 +0000
ROA not before: Wed 24 Mar 2021 14:29:54 +0000
ROA not after: Tue 24 Mar 2026 14:29:54 +0000
asID: 265804
IP address blocks: 167.250.168.0/22 maxlen: 22
179.60.236.0/22 maxlen: 22
200.63.108.0/22 maxlen: 22
2803:b880::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910394 (0xde43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Validity
Not Before: Mar 24 14:29:54 2021 GMT
Not After : Mar 24 14:29:54 2026 GMT
Subject: CN=cc45b6a7c128cab3d6394c0dedf8dcfd0da2142c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:12:be:d6:68:9c:ea:27:2f:a2:d0:12:cf:
8c:59:52:72:2b:a3:d4:41:4c:4f:9b:14:d1:2a:75:
45:bd:00:58:7b:a0:84:b3:8a:4a:f0:d8:11:51:6a:
9b:1b:0e:c0:d9:c9:0b:dd:23:34:21:12:25:4b:95:
39:33:3f:c7:c0:25:b7:42:46:f8:50:ce:5b:f5:b7:
e4:da:e6:5c:01:48:4e:1d:af:cf:d0:f8:b8:d5:e8:
fb:e9:56:8c:c4:78:cd:4d:ec:aa:8c:4e:94:78:0e:
7d:7a:aa:3c:b3:15:3d:f9:fa:fd:7b:e7:32:87:1f:
18:58:0e:67:e8:f8:d7:9e:ae:3d:fb:40:fd:4d:ca:
b4:47:ce:f9:0d:e9:0a:19:45:a6:1d:57:6d:99:d6:
55:4e:44:0f:8b:f4:9c:43:4b:49:be:68:ea:a5:c6:
41:a5:d5:2a:99:b3:00:6b:35:ed:9d:53:5a:80:3a:
02:de:45:c7:3d:57:eb:81:f1:19:ea:db:45:0e:a9:
0b:9e:09:67:3b:ee:9f:71:8e:33:68:14:a5:6a:8e:
23:60:fc:a0:86:8f:2b:d4:3b:02:e8:03:55:ab:b7:
eb:40:e4:3b:f8:cd:81:d8:1a:9e:48:f5:dd:cc:6b:
99:e8:61:1a:94:af:e4:9f:eb:9a:94:c4:75:67:5f:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:8F:C4:A8:01:75:CC:7B:0F:04:46:71:2B:9E:4E:18:6A:CC:20
X509v3 Authority Key Identifier:
keyid:4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/cc45b6a7c128cab3d6394c0dedf8dcfd0da2142c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/82b667941b9c44cb9ada9b7f66f84f2615467d5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.168.0/22
179.60.236.0/22
200.63.108.0/22
IPv6:
2803:b880::/32
Signature Algorithm: sha256WithRSAEncryption
7c:fc:bb:36:24:5a:11:82:21:21:42:6d:33:bf:78:d6:97:ac:
83:26:dd:42:94:25:d5:87:43:e8:36:9f:1f:b0:54:4c:37:23:
f2:59:de:f1:b9:bf:a0:9f:e7:cf:25:38:ae:e9:a0:0b:06:a2:
64:71:d1:eb:1d:db:9c:ac:46:aa:f4:e9:18:b0:b8:54:6a:be:
88:91:7f:8a:19:55:5f:29:a8:49:88:0b:a5:95:a7:61:92:e6:
e8:01:a2:aa:04:6d:47:a5:79:ba:aa:63:7a:82:af:f2:a9:b8:
63:33:8b:0d:73:85:34:8c:f5:38:73:5b:5a:60:45:87:2e:9f:
42:33:c5:1d:cb:31:6d:eb:f2:d7:49:b1:56:1c:6a:34:c5:9b:
3a:e8:e8:71:ad:2c:db:82:04:68:b6:51:96:ad:34:1b:4b:f2:
3f:54:40:24:1d:b8:76:bc:b5:a3:93:cd:69:26:73:be:6f:f7:
fe:3e:f0:51:9b:39:d4:30:9f:73:57:57:19:47:72:d5:e2:d8:
98:e6:0a:14:2e:71:01:d0:85:4b:72:15:7c:92:d3:d7:47:0f:
fc:58:ed:45:85:41:94:0c:b1:59:5b:7e:07:72:32:f3:64:88:
85:1c:21:36:4e:a1:b1:88:11:b0:c6:ee:06:26:f0:fd:ef:38:
19:ec:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 15:28:42 2023 by rpki-client on console-ams.rpki-client.org