Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5e36633843bde3e9feb2f74c2899b9177c31172c.roa
File: 5e36633843bde3e9feb2f74c2899b9177c31172c.roa (raw, json)
Hash identifier: cZejwlxg7SLfV2WXkJ7eqkelNphDwebxGyQVLuB/FNU=
Subject key identifier: 96:BC:2F:1F:33:90:EF:77:DE:6C:19:E2:BF:13:FB:8E:1E:3E:F9:B4
Certificate issuer: /CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Certificate serial: 1BAAF7
Authority key identifier: 54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5e36633843bde3e9feb2f74c2899b9177c31172c.roa
Signing time: Thu 27 Oct 2022 20:58:24 +0000
ROA not before: Tue 23 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 64120
IP address blocks: 179.60.204.0/22 maxlen: 24
179.60.204.0/24 maxlen: 24
179.60.205.0/24 maxlen: 24
179.60.206.0/24 maxlen: 24
179.60.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813239 (0x1baaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdefb494494d25bc19fb16535ea742adc7a792b8
Validity
Not Before: Mar 23 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=5e36633843bde3e9feb2f74c2899b9177c31172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:c1:50:9e:cb:a9:c0:19:92:f5:1f:69:33:
4d:fe:dd:75:f0:a7:0d:6e:15:99:25:3b:73:5b:6c:
71:7a:f0:ca:0b:32:e0:05:69:5d:82:a8:7a:24:d7:
c6:5e:6b:2f:48:70:65:40:a4:8d:df:86:b8:74:6e:
8f:95:3e:a1:12:c6:e7:05:cd:cc:de:65:ea:1a:2f:
25:62:0c:4f:af:f0:1f:20:c9:61:c9:8f:83:07:3d:
85:5d:51:e6:75:f0:52:3f:61:40:67:0b:a9:f0:49:
cd:e0:1e:90:c7:64:d3:0f:24:1c:85:f4:38:e3:15:
38:7b:5e:b8:ee:c1:8a:c4:b4:6c:fe:0c:04:dd:48:
aa:ce:0a:b6:54:37:3b:d3:4d:86:df:5a:37:3b:5d:
f5:b5:20:84:2a:23:0d:56:c9:fb:75:2d:71:82:9a:
52:77:05:37:a4:13:ea:9b:17:50:e1:ee:cd:20:56:
2f:19:fc:31:30:37:9b:d0:df:71:0a:2c:e9:33:db:
72:6f:b8:38:40:06:6c:00:cc:1d:1f:b1:79:11:2f:
8a:f2:ea:f1:78:52:0c:7f:25:1b:5d:a1:8c:d9:f1:
72:89:cc:b6:ed:20:b4:7e:04:70:47:4d:3f:78:f8:
fa:fe:12:fd:f3:7f:a7:6b:4a:6c:77:4d:86:05:84:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:2F:1F:33:90:EF:77:DE:6C:19:E2:BF:13:FB:8E:1E:3E:F9:B4
X509v3 Authority Key Identifier:
keyid:54:74:F6:91:1A:3A:2E:30:BD:85:CA:3B:A0:D9:DE:FE:4B:9D:BA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdefb494494d25bc19fb16535ea742adc7a792b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/5e36633843bde3e9feb2f74c2899b9177c31172c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6ce90167-ab09-4dd2-b3e5-d68be507a7a4/cdefb494494d25bc19fb16535ea742adc7a792b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.204.0/22
Signature Algorithm: sha256WithRSAEncryption
58:91:b0:59:a3:0e:ae:6c:c6:78:d6:80:d9:3f:e8:fc:f3:de:
17:4a:42:21:4d:58:85:db:4e:9e:ef:cd:43:61:3c:de:d5:77:
be:8f:0f:1c:18:b1:34:31:bd:f8:77:3d:64:a5:7f:00:de:62:
2c:6a:0c:9a:82:f5:35:d6:9c:d7:cb:70:cb:75:cc:32:41:c3:
1d:71:41:d2:7c:74:3e:da:ec:e4:4c:c4:ce:67:cf:69:52:4c:
a1:f4:d9:3a:38:92:de:eb:0f:1f:3f:de:ad:34:a9:3e:6d:44:
15:fe:11:7e:1d:a9:d2:e2:38:fa:3d:5e:33:c8:2d:51:b7:3c:
2b:35:c9:f1:07:da:5b:e4:df:48:e5:67:ba:7f:38:9a:70:22:
64:4d:7e:aa:c2:5f:45:d2:6b:47:79:b2:6b:81:9f:4b:8c:d2:
10:cb:37:be:3e:9b:a0:36:ad:3e:af:e9:fc:e8:cc:6d:ca:b4:
a1:25:94:b7:02:6c:2d:a9:50:30:46:2c:c3:ac:52:1e:f6:92:
63:cf:c1:c3:16:91:28:a3:54:49:5d:b5:b2:6c:07:3a:9b:84:
ec:31:24:e2:a3:c1:02:d0:0b:be:a5:b8:50:f0:f4:fe:b9:fb:
53:54:d9:94:ae:48:06:5a:c5:fe:94:ed:46:d5:08:13:8b:75:
d8:8d:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 03:03:54 2023 by rpki-client on console-fra.rpki-client.org