Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/09d3bfa0654b95fab89a3834b25d9a901135b78d.roa
File: 09d3bfa0654b95fab89a3834b25d9a901135b78d.roa (raw, json)
Hash identifier: 6viRoHZdNDQWhhZVmSMDRHUgkn80E/y81dZlpaCvNAc=
Subject key identifier: BF:F3:80:45:CB:53:8D:D7:32:DC:BD:F3:75:AA:4C:EB:01:68:62:D0
Certificate issuer: /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial: 1B13
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/09d3bfa0654b95fab89a3834b25d9a901135b78d.roa
Signing time: Mon 08 Nov 2021 18:12:28 +0000
ROA not before: Mon 08 Nov 2021 02:00:00 +0000
ROA not after: Wed 08 Nov 2023 02:00:00 +0000
asID: 265504
IP address blocks: 168.0.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6931 (0x1b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Validity
Not Before: Nov 8 02:00:00 2021 GMT
Not After : Nov 8 02:00:00 2023 GMT
Subject: CN=09d3bfa0654b95fab89a3834b25d9a901135b78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:2c:0d:5b:25:e2:45:6c:c2:e7:74:38:3f:
b4:9d:25:d2:78:a2:a8:07:e1:c1:a8:9e:64:38:7a:
c0:49:16:41:9e:60:16:26:b2:c6:14:91:ec:ca:65:
e3:52:ae:57:8b:c5:f7:c8:cf:d2:ba:7d:15:b9:af:
e3:82:ee:57:4f:20:6d:4e:49:14:98:fb:9f:f0:db:
7e:67:a4:a0:39:8d:2e:af:d8:bf:7a:6e:5c:a1:3e:
73:b4:74:19:14:b4:b3:7a:9d:07:2f:3f:cc:8a:6e:
46:f7:24:de:ee:ed:cd:96:67:77:b2:84:71:bb:30:
82:30:ae:30:9b:fc:95:9b:9d:10:75:49:ad:d0:7e:
27:5e:90:ea:0f:2d:e4:4b:73:c7:36:a2:c9:7a:77:
8d:8b:51:00:43:88:2a:3f:3d:94:95:2a:61:19:21:
45:bb:e9:3f:bb:00:1c:94:aa:cf:03:e3:f0:9d:bf:
5c:f8:cb:3c:35:74:6b:32:bc:fc:6a:a3:9e:14:67:
02:78:16:83:e5:35:12:ca:83:52:e8:2a:31:46:b3:
17:db:49:24:41:b2:0b:ce:71:fc:50:df:a7:20:7b:
63:92:87:11:cf:be:6b:17:ac:aa:89:4c:bb:51:04:
d3:e4:fb:4a:b3:64:2b:99:02:04:01:6a:98:1b:32:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:80:45:CB:53:8D:D7:32:DC:BD:F3:75:AA:4C:EB:01:68:62:D0
X509v3 Authority Key Identifier:
keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/09d3bfa0654b95fab89a3834b25d9a901135b78d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.223.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7c:ad:f6:43:be:90:32:ba:d6:cf:36:b0:d3:8e:60:9f:e1:
05:29:06:1f:9d:ae:eb:a3:99:ad:56:e1:b5:f5:9a:56:85:fa:
ac:cc:16:08:d7:0b:60:c6:ef:02:e4:0d:0e:f5:c0:ea:48:25:
b6:4c:c2:b0:20:e3:c0:58:bd:08:6b:0b:16:6a:51:d4:bd:bf:
fc:36:3f:f4:e3:d5:83:c2:e3:06:66:4d:bb:4a:91:da:28:39:
67:7c:cb:10:84:84:73:c6:50:6d:12:e8:40:9c:89:ee:8b:5f:
c5:0a:ac:3f:d9:d7:cf:86:00:3c:be:94:ee:33:29:0e:90:b1:
d0:11:18:32:09:d0:b2:ef:03:77:d9:a9:99:67:cd:83:89:28:
f2:c1:fe:b9:d9:e9:32:b1:ba:82:f4:d7:61:c2:92:80:20:0f:
d7:54:13:8e:b0:f8:d8:1a:c5:d8:e5:60:c1:b1:a4:7b:34:ae:
d3:55:04:96:27:3d:6d:77:de:96:38:4e:be:8e:3e:97:67:99:
8b:59:f9:b1:44:b2:0f:ad:b4:ce:7f:37:c5:39:ad:ab:bc:7e:
9e:48:0f:05:46:0b:7e:92:ff:e0:60:08:b6:21:f9:d8:5d:3b:
82:a3:dc:f9:74:2f:4c:fc:3c:58:94:3a:0a:5d:3d:76:20:82:
1d:1c:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 08:08:25 2023 by rpki-client on console-fra.rpki-client.org