Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5303e8343c36742980cd1a99216952e0607a1da9.roa
File: 5303e8343c36742980cd1a99216952e0607a1da9.roa (raw, json)
Hash identifier: qwWWw//Zs/4m2FfcR3hmzuyTq6Y2MrnPiCjuj33zbrE=
Subject key identifier: AA:15:BD:64:58:AB:88:BF:B5:B5:C7:67:83:E8:86:C2:84:30:09:8C
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 209F94
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5303e8343c36742980cd1a99216952e0607a1da9.roa
Signing time: Fri 10 Mar 2023 16:10:36 +0000
ROA not before: Tue 23 Mar 2021 14:47:14 +0000
ROA not after: Tue 24 Mar 2026 14:47:14 +0000
asID: 28000
IP address blocks: 168.121.184.0/22 maxlen: 24
200.10.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138004 (0x209f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Mar 23 14:47:14 2021 GMT
Not After : Mar 24 14:47:14 2026 GMT
Subject: CN=5303e8343c36742980cd1a99216952e0607a1da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:2d:56:e4:a5:b7:30:a8:9b:1d:60:16:ad:
2f:ea:ec:19:73:d2:a4:af:e1:09:0c:be:9d:a5:ae:
40:b7:59:05:10:16:bf:58:7d:de:ac:29:7c:db:08:
4b:1a:2b:08:93:eb:dd:53:ec:6b:89:32:3b:85:b2:
03:2e:b4:70:6b:e5:88:e0:85:20:43:8f:29:80:29:
9b:41:7c:eb:3d:08:88:67:c6:7c:bf:12:f9:0e:06:
87:52:68:11:c1:ee:e0:cf:f8:93:bd:19:43:64:f6:
13:2a:9d:39:c9:e3:aa:f3:46:45:9b:69:c5:61:d9:
0c:3b:58:4f:33:3c:bb:fb:76:c7:0a:f1:46:7b:10:
3e:36:d2:21:4e:2f:7c:da:f8:00:44:a8:fe:f4:09:
04:48:18:e0:c4:c4:98:b2:71:1c:44:76:0b:68:fd:
77:0d:5d:6b:59:cc:c7:9f:5a:39:57:39:59:00:55:
0c:73:ae:ae:cd:58:d3:c2:f2:c4:1e:65:cb:63:aa:
f3:4f:41:a5:b1:93:a5:eb:64:cd:0e:57:74:7c:7a:
59:5b:4b:c7:f8:cc:e7:6a:3c:fa:5f:0b:8a:48:39:
7a:4e:05:34:0c:60:13:b6:11:87:fe:f9:fe:dd:74:
90:09:2c:38:53:c4:d6:07:3e:66:f6:f0:bb:c8:a2:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:BD:64:58:AB:88:BF:B5:B5:C7:67:83:E8:86:C2:84:30:09:8C
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5303e8343c36742980cd1a99216952e0607a1da9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.184.0/22
200.10.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:80:1c:11:48:82:ac:a3:0a:61:59:1c:d3:56:05:c1:ba:4a:
e8:d9:c8:40:24:c9:a8:47:ae:52:4b:fc:a9:ae:24:be:68:f0:
3d:3e:6a:b8:d8:2f:dc:12:e8:ed:64:82:9f:ef:a8:37:83:88:
d1:bb:ee:b5:81:dc:7b:94:d6:3e:46:1a:1d:ff:53:4c:49:13:
4c:f7:96:fe:3c:12:0c:1b:59:75:94:62:23:18:e0:48:1a:1f:
56:85:0c:fd:f3:c8:09:b3:75:36:4a:a0:30:1f:2d:2d:2b:73:
76:85:52:b6:bd:53:1e:5e:71:93:46:94:b3:62:ba:96:e4:19:
ad:b6:10:fb:f4:4b:31:9d:99:16:b0:ef:ca:15:8a:a0:b1:61:
87:3c:08:f6:65:6a:27:68:4e:52:52:31:64:a8:6e:22:57:81:
e9:08:72:ab:fc:83:ba:4d:3d:85:b0:89:cd:9e:2e:24:67:21:
be:25:97:82:06:3e:c0:dc:13:2f:db:d5:31:c4:60:4b:e4:16:
cb:7b:79:ba:52:00:b2:60:cb:0e:86:1e:29:ce:b8:a0:20:09:
65:06:51:84:2d:7c:90:7c:62:bb:a8:8c:3c:ff:ce:6b:67:42:
b5:c5:47:da:af:76:67:e1:33:3b:4f:2b:e0:58:71:e2:56:53:
35:64:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org