Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/8cc4d80e501758de42cc647b794535a1b6a5c270.roa
File: 8cc4d80e501758de42cc647b794535a1b6a5c270.roa (raw, json)
Hash identifier: qqiBrEf3y6aa17vtNY+JtoQeI6JmTbeswhVmMmLJ51w=
Subject key identifier: 22:DE:84:E6:C9:4C:9A:77:37:EE:99:DC:0D:87:29:5E:0E:3C:B7:5A
Certificate issuer: /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial: 0FE8
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/8cc4d80e501758de42cc647b794535a1b6a5c270.roa
Signing time: Mon 08 Nov 2021 18:09:05 +0000
ROA not before: Mon 08 Nov 2021 02:00:00 +0000
ROA not after: Wed 08 Nov 2023 02:00:00 +0000
asID: 265504
IP address blocks: 168.0.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4072 (0xfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Validity
Not Before: Nov 8 02:00:00 2021 GMT
Not After : Nov 8 02:00:00 2023 GMT
Subject: CN=8cc4d80e501758de42cc647b794535a1b6a5c270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:25:d2:73:94:f0:ff:23:06:97:47:57:88:
bb:3a:b6:32:e3:14:f5:ab:83:9b:21:8c:16:0c:23:
b2:89:c4:8f:ee:da:88:75:33:a4:21:0c:21:96:33:
3a:4b:31:43:1c:a9:ba:2f:8d:54:f6:08:3b:cd:99:
00:0b:8d:dd:06:dd:88:51:5d:fa:95:79:bf:0c:1a:
66:6a:a2:a9:d7:76:b2:9c:3e:d3:c7:1b:0e:b0:61:
ef:d0:91:99:5e:1e:d7:91:a8:1e:83:7e:c3:b2:3d:
57:ef:cf:2a:b7:d2:44:44:3f:dc:ad:69:84:84:cb:
1f:a0:fc:71:30:c7:2e:b1:ae:1c:6b:b3:8d:2c:72:
96:9f:c5:4c:26:51:17:29:f6:ca:8e:61:43:59:53:
f6:19:ac:cb:f8:f5:80:f5:ab:e1:38:7c:2a:4d:c6:
8b:ec:7f:7c:55:9e:da:ca:af:7d:93:48:62:4e:a2:
0b:89:b1:c4:a3:81:7f:a5:db:99:3e:34:2f:e9:b1:
d0:30:8e:14:dd:6b:af:2f:b2:f1:d4:04:f4:a1:30:
9f:eb:d7:5a:bf:cd:08:11:08:7d:fb:a1:0a:f5:fc:
7b:99:07:6d:dc:de:02:d2:9d:df:43:13:cc:e2:e3:
cd:f3:2b:de:1c:f9:01:28:67:8e:2e:f3:83:df:07:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:84:E6:C9:4C:9A:77:37:EE:99:DC:0D:87:29:5E:0E:3C:B7:5A
X509v3 Authority Key Identifier:
keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/8cc4d80e501758de42cc647b794535a1b6a5c270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.220.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6e:99:83:d8:27:70:58:16:25:b4:3e:a4:fc:72:1c:43:a3:
6b:fd:e8:64:63:1f:ac:90:e2:b9:cb:67:6e:bc:88:da:95:d5:
56:c0:22:d0:28:5b:8f:37:a0:9f:4b:af:2d:d6:62:b4:16:94:
86:7b:13:96:ae:ad:cf:42:ea:55:32:f6:3a:4b:f6:35:e4:d5:
ce:88:48:2d:08:fa:ce:f1:58:f5:9f:93:7a:97:e4:da:e5:66:
92:01:e9:c1:dc:eb:9a:a4:5b:73:9a:a7:62:14:c1:83:19:78:
c9:d6:96:f7:a7:8e:e0:c5:83:f2:67:de:0b:9e:23:06:27:91:
b8:a2:4c:01:c4:8d:75:5e:27:24:da:6f:d5:01:45:ef:d5:3f:
74:fa:10:a8:2d:c6:4d:02:fe:dc:ea:4d:d9:55:ec:1e:44:2c:
d5:9f:d9:81:04:b1:14:ce:59:45:ec:8f:39:b5:4f:c8:4b:92:
c6:74:20:8f:80:cc:6f:50:b4:82:75:71:9b:37:42:9b:b5:c8:
7a:e2:ed:51:b5:92:90:ef:89:2e:31:a6:42:b8:c4:77:66:ec:
63:b1:e5:cf:78:fd:f2:5c:8f:f5:2c:a9:cc:4d:1e:e8:cb:2e:
46:53:eb:00:fe:86:bb:0d:32:f7:93:0c:4b:68:73:fc:a3:f0:
e1:44:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 08:14:04 2023 by rpki-client on console-ams.rpki-client.org