Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/47b37d8ee6e388a1e232e03c6024f44089928d9f.roa
File: 47b37d8ee6e388a1e232e03c6024f44089928d9f.roa (raw, json)
Hash identifier: nTZ/bjeClHYWKh4wGix4dhrL+2QzzJPkX2JjAJrj9w0=
Subject key identifier: 94:C7:9D:89:AC:B6:83:AD:1E:64:4B:CC:D1:2D:A2:C1:E6:F2:42:F0
Certificate issuer: /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial: 13DE6A
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/47b37d8ee6e388a1e232e03c6024f44089928d9f.roa
Signing time: Wed 29 Dec 2021 03:12:49 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 64120
IP address blocks: 179.60.204.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302122 (0x13de6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=47b37d8ee6e388a1e232e03c6024f44089928d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:af:59:f9:5b:28:b4:74:02:9b:28:13:1a:
56:40:63:ee:f7:f5:d5:8e:68:52:ba:29:f0:88:ba:
6a:0b:ab:fd:d1:a3:8e:5f:bf:be:5a:b8:76:ab:90:
48:a4:e9:c1:fc:2c:92:34:d6:3e:52:b3:9b:82:97:
c9:3d:cf:1a:a3:b5:aa:f2:8d:89:26:ec:13:58:13:
fa:27:5b:c1:00:2f:ef:ef:8b:ee:e3:dc:bd:68:09:
9e:64:2d:c0:b9:05:e1:96:76:ec:01:87:7c:6e:2b:
34:03:f9:ee:eb:dd:54:fe:1d:6f:86:ed:14:49:74:
19:86:81:d5:f3:6c:45:12:c5:e0:f6:d7:05:48:4d:
1b:12:87:fc:94:3e:15:85:dd:67:b9:64:fa:ed:15:
c4:d8:e3:d1:ce:66:ef:e6:29:74:24:9b:96:d0:03:
a6:5c:33:3c:da:49:04:24:47:1e:5f:bb:8a:73:d6:
61:c1:56:74:e7:ed:13:f9:19:9f:0d:77:34:b6:b5:
91:c4:a4:b6:18:4e:77:3d:5c:66:4a:ff:cb:d2:f3:
eb:58:3f:76:43:7a:7b:da:26:ff:9c:3a:39:e5:49:
74:0f:c8:0c:68:8f:56:4c:97:d6:3c:c1:87:7b:f5:
38:9a:3f:29:1b:4f:36:a5:1a:64:c3:aa:54:eb:1a:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:9D:89:AC:B6:83:AD:1E:64:4B:CC:D1:2D:A2:C1:E6:F2:42:F0
X509v3 Authority Key Identifier:
keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/47b37d8ee6e388a1e232e03c6024f44089928d9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.204.0/22
Signature Algorithm: sha256WithRSAEncryption
86:d4:8d:ad:60:8a:d5:df:13:b6:15:48:cd:0b:50:ba:f5:f5:
6c:23:43:4e:d0:0d:8e:04:a4:52:5c:30:51:dd:68:51:c8:80:
59:80:2d:1e:18:e1:2a:3b:48:fc:8b:fc:ea:8c:ea:90:d5:59:
62:a2:2d:6e:4b:9d:b1:55:0f:f5:dd:6a:16:a8:fb:af:b3:f8:
36:ed:dc:f5:eb:5e:82:ec:17:cb:1a:b9:fb:0a:2b:9f:6f:b6:
ef:94:b2:16:d1:ff:02:51:53:2b:d2:66:22:40:4e:cb:2b:71:
17:43:ed:5e:fd:da:ad:f5:5c:fb:b8:c3:0e:7a:9d:f8:f3:10:
8c:24:42:26:60:68:78:74:91:e9:b4:b4:3c:ad:79:80:55:76:
9a:9c:c8:17:e0:cf:3b:5f:fb:07:11:11:91:7c:70:78:53:8c:
0b:3a:d0:13:9f:ae:84:c4:5c:10:d0:19:bc:3e:e2:a1:b9:c9:
c2:f0:fe:42:a1:20:2f:29:87:90:e3:7b:c6:77:c8:4e:98:9f:
b7:69:af:f3:d6:44:98:1c:93:8d:99:d7:12:20:84:31:c2:24:
87:d0:8d:21:f6:ac:34:6b:b4:71:18:21:30:be:2f:b1:31:b3:
33:d3:8b:53:69:11:6a:80:1d:88:7e:c3:a9:9b:be:ad:02:c1:
4d:60:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org