Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/987abb62de3eaf45ebcec94ff4858444b2083a49.roa
File: 987abb62de3eaf45ebcec94ff4858444b2083a49.roa (raw, json)
Hash identifier: EO9hvB3Ey2O5NXatFiOIMlVMqo8rX3xVti2opPmfnmk=
Subject key identifier: 53:C2:1C:E5:67:FB:C1:D0:9A:F9:38:09:9E:02:66:1F:84:66:24:08
Certificate issuer: /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial: 1495
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/987abb62de3eaf45ebcec94ff4858444b2083a49.roa
Signing time: Mon 08 Nov 2021 18:11:14 +0000
ROA not before: Mon 08 Nov 2021 02:00:00 +0000
ROA not after: Wed 08 Nov 2023 02:00:00 +0000
asID: 265504
IP address blocks: 168.0.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5269 (0x1495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Validity
Not Before: Nov 8 02:00:00 2021 GMT
Not After : Nov 8 02:00:00 2023 GMT
Subject: CN=987abb62de3eaf45ebcec94ff4858444b2083a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:84:c6:27:06:e5:1d:3a:e2:4f:f5:a7:94:
a2:1a:00:91:34:9e:c5:7b:10:bf:ea:6c:40:23:15:
2e:63:e8:b7:ca:97:d0:c3:22:95:e5:be:b0:39:bd:
98:d2:94:f9:7b:12:ae:68:b3:19:e9:1a:3e:ac:57:
3b:dd:a9:51:9f:20:e8:ff:bf:ab:b1:64:fd:9c:14:
af:c2:ce:4c:98:9f:51:9f:14:35:1b:d4:43:04:88:
a2:5b:32:f3:33:83:e5:a9:d3:c4:00:d8:e2:fa:a2:
e2:b6:c4:d2:f9:f5:fb:81:b0:c9:ae:e3:15:3f:bb:
b9:54:dd:a7:92:fd:73:5f:94:93:0f:ab:e1:b3:14:
ff:e1:fb:cc:15:c1:46:33:36:6e:56:ed:de:b2:a2:
8d:20:9a:cd:40:32:bb:ba:56:00:47:7e:0b:a1:33:
4d:c5:ce:9d:f2:5e:42:ea:0a:cd:bf:74:14:a7:9c:
34:66:d7:73:ff:56:ea:07:76:77:af:f2:5b:c7:90:
2f:9c:c3:13:c1:dc:2c:b1:8d:df:91:63:d3:0c:f6:
b0:25:85:13:2e:20:d2:72:23:42:05:c2:ab:49:f3:
25:4d:d1:fc:c3:f1:86:bd:56:18:0b:eb:ee:dd:a5:
f5:13:86:9a:a9:7c:dc:eb:49:21:ab:55:51:79:2a:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:1C:E5:67:FB:C1:D0:9A:F9:38:09:9E:02:66:1F:84:66:24:08
X509v3 Authority Key Identifier:
keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/987abb62de3eaf45ebcec94ff4858444b2083a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:57:09:19:f2:dd:41:7b:9a:60:1e:d4:34:ef:37:5a:dd:75:
11:86:de:39:ac:03:e7:dd:49:81:22:50:76:a7:c3:0e:60:b8:
e9:ab:95:62:24:f7:cb:2c:c1:36:76:6e:ad:c7:31:3b:e7:8e:
e4:6a:69:3c:96:94:bb:5b:32:e8:5e:be:0c:9b:7c:03:d8:bf:
6e:92:c6:f1:a3:1d:ce:ba:51:8d:a6:00:13:7d:31:19:5e:93:
1d:af:01:72:4f:23:30:f0:a9:84:2f:04:80:70:ce:c0:92:24:
11:a1:5d:d2:ea:83:74:4b:e4:a9:83:80:5f:ee:8a:c3:d1:86:
d4:c0:89:36:86:23:78:e0:5a:f1:44:ad:f4:3e:74:9a:96:03:
de:05:68:c4:30:8a:5b:5c:b9:d0:9b:e0:4c:78:27:55:0c:fc:
be:37:70:ca:bd:f4:f6:73:7b:fc:55:51:b2:b1:9e:bb:51:b4:
60:01:bc:05:9d:27:b4:d6:a0:75:11:8c:66:89:91:4c:6b:75:
67:5a:8b:97:a2:d8:ff:00:e7:7f:a0:18:20:ac:6b:2b:ff:d7:
4b:8c:35:01:fa:cc:3a:02:5f:d5:91:61:c0:db:3c:b8:4c:8f:
3c:fb:1e:02:1c:ff:1b:17:e7:41:8a:27:32:c5:e7:ba:1d:ad:
8a:e1:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 08:08:26 2023 by rpki-client on console-fra.rpki-client.org