Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/bb7d7fc14bb977de47fcd07dff025a75f2182359.roa
File: bb7d7fc14bb977de47fcd07dff025a75f2182359.roa (raw, json)
Hash identifier: e1wmIHXyhTxHemoMnL5yFcBBjaKvdgUFUGM+tGel1yM=
Subject key identifier: 8D:7F:77:3F:8F:04:6C:7B:3C:A0:E7:3C:3D:B8:3D:33:38:C5:A5:EF
Certificate issuer: /CN=d21f7315b565f88e18de69169de5a1119c25988f
Certificate serial: 217228
Authority key identifier: 9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/bb7d7fc14bb977de47fcd07dff025a75f2182359.roa
Signing time: Thu 29 Jun 2023 20:19:28 +0000
ROA not before: Wed 28 Jun 2023 20:19:27 +0000
ROA not after: Sun 29 Jun 2025 20:19:27 +0000
asID: 52245
IP address blocks: 186.148.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191912 (0x217228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21f7315b565f88e18de69169de5a1119c25988f
Validity
Not Before: Jun 28 20:19:27 2023 GMT
Not After : Jun 29 20:19:27 2025 GMT
Subject: CN=bb7d7fc14bb977de47fcd07dff025a75f2182359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:c0:97:33:5b:e9:17:00:ee:a7:f9:49:58:
84:e9:67:51:4e:17:12:fe:d4:29:8e:b2:61:3a:99:
10:77:e0:ca:67:4d:18:b3:84:02:1f:68:26:17:b3:
b3:6f:59:66:74:79:47:3a:f5:e5:03:d2:57:39:4e:
e2:83:ad:64:ff:6a:c0:f0:dd:5e:c0:01:dc:a4:c7:
94:ff:2f:66:4c:a3:11:b0:ec:2e:bd:c3:df:4e:1f:
c9:13:22:b8:75:d4:8d:b7:5e:d5:64:3d:22:44:f2:
51:de:9d:38:23:fb:94:85:ff:16:46:ec:b9:c6:da:
d8:53:a4:3e:51:b4:b0:b5:b3:cc:17:3d:82:e8:09:
ec:52:70:66:29:52:3b:5b:57:d1:54:87:b5:41:41:
cd:3d:eb:4a:c8:76:c9:1f:ca:13:8b:f9:b6:0b:c1:
f7:3a:1e:dd:7a:9e:fd:96:e5:e5:86:bb:c2:b8:f2:
86:9c:ce:72:9c:74:d5:41:31:fe:07:e9:66:fb:09:
9f:61:b5:d6:fa:0c:42:0b:e9:af:f6:b4:e6:71:2a:
ae:ee:24:2f:1c:7c:b5:0c:af:89:ed:c3:52:77:16:
3d:34:ac:0e:e4:6d:20:7e:b9:4f:98:f5:25:56:4e:
3d:09:3b:01:c1:1c:0f:e8:d7:cf:0d:6b:69:27:28:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:77:3F:8F:04:6C:7B:3C:A0:E7:3C:3D:B8:3D:33:38:C5:A5:EF
X509v3 Authority Key Identifier:
keyid:9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/bb7d7fc14bb977de47fcd07dff025a75f2182359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.148.104.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5a:af:02:14:04:51:23:40:08:6b:59:67:1f:a2:15:07:97:
87:75:4e:83:ba:a5:14:64:54:b0:77:3f:48:f4:a9:8c:20:31:
09:01:70:7e:68:5d:9b:a8:0d:3f:65:47:b1:8a:d2:5e:b7:0f:
30:b1:b3:52:95:7b:61:41:8b:04:67:14:d6:e0:ce:d2:2f:67:
16:1c:b3:a3:2b:b1:e2:97:d1:ce:97:1e:f2:d0:66:f6:ed:3b:
df:68:93:70:8c:b3:d5:89:cb:ac:80:47:d1:e8:4b:6d:ec:11:
e0:a8:f5:e4:97:8a:05:08:c0:cc:76:47:2d:e0:4a:34:e1:ae:
e1:9f:23:cd:5e:b9:58:d2:5a:68:ab:63:ef:53:65:c5:94:83:
ce:80:51:ad:ab:06:53:15:49:48:05:a4:fc:8f:4c:70:c3:eb:
ce:fa:00:79:0f:6d:f8:66:d9:85:a3:ea:1b:e5:c8:b8:ed:87:
90:58:d7:e0:d7:48:28:de:ab:04:da:95:d8:4a:9d:bd:9b:29:
bf:70:8a:1f:1d:06:54:e7:00:d8:2e:2a:11:6e:ee:fd:27:2a:
2e:dc:01:d9:98:bb:80:13:57:87:37:fc:94:03:39:ae:9e:b7:
82:eb:6e:86:93:be:c0:e8:7c:df:95:66:9b:05:27:8b:38:96:
77:64:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org