Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/aa3d95fca9bb8f700da47db40fd36c0fa41ff819.roa
File: aa3d95fca9bb8f700da47db40fd36c0fa41ff819.roa (raw, json)
Hash identifier: xpwZRYOkkoupBnS78Qk3Vo1gLZ4Kb4qOEmJhiz4U+Og=
Subject key identifier: 81:C9:E2:6C:50:45:E1:7D:A5:D4:19:79:E4:D7:D5:AC:EA:76:4C:3C
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D97B7
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/aa3d95fca9bb8f700da47db40fd36c0fa41ff819.roa
Signing time: Wed 24 Mar 2021 14:37:06 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 143.202.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890807 (0xd97b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=aa3d95fca9bb8f700da47db40fd36c0fa41ff819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:18:08:f7:3e:d8:f7:c1:0a:b5:8c:11:0d:
8e:92:04:71:25:74:e7:5d:d1:50:9b:e9:05:97:52:
d0:52:c7:99:e4:6b:49:fd:0f:80:73:ee:65:96:66:
9d:9e:ef:14:82:27:70:91:ed:a6:c0:11:9b:96:90:
9c:2e:2e:b3:b1:ed:be:b9:d9:00:83:5d:5c:6a:bd:
b1:60:00:7f:76:c4:34:f0:70:14:5b:e1:e8:b1:d2:
1d:99:b5:39:ee:75:bb:b7:12:ad:e3:f0:bb:e6:e1:
e5:86:1c:24:4d:7e:a4:b9:26:c0:f2:38:81:15:dd:
62:4b:9c:43:de:d9:34:4f:1b:1f:5f:c8:09:a1:55:
a7:8e:de:c4:59:71:15:c2:45:d2:ba:4b:46:0f:6c:
26:b6:b3:27:e6:98:88:fd:b0:34:93:bd:12:7f:ad:
a2:2e:3c:4a:d1:5e:42:c6:8a:05:42:49:07:bf:76:
fe:ac:5d:ea:14:70:a2:d3:77:81:4d:00:d7:da:df:
73:02:fc:5f:f2:34:a0:c9:5d:c7:01:f2:ec:1a:80:
62:f9:25:c4:0e:c6:f2:ba:5d:a8:30:95:37:99:aa:
34:c8:cd:fd:a9:13:e8:b3:fc:35:56:8e:7e:e4:42:
4f:00:ab:b7:6f:06:1c:9d:c6:36:6c:91:68:5b:2f:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C9:E2:6C:50:45:E1:7D:A5:D4:19:79:E4:D7:D5:AC:EA:76:4C:3C
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/aa3d95fca9bb8f700da47db40fd36c0fa41ff819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.162.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6d:d7:b3:e1:ca:fe:03:6a:15:da:07:b3:67:18:62:48:20:
bc:54:ad:bf:96:e1:5d:55:e5:65:84:7b:ba:bf:e8:55:ed:1d:
bb:28:cc:61:8c:7d:42:74:28:48:ca:7f:50:8d:20:a9:34:2c:
a4:93:02:4f:da:d6:86:b3:f7:a6:1b:92:b0:91:63:58:6b:87:
3b:14:84:fc:0d:43:7e:9f:b3:24:04:c6:89:48:e0:81:a6:23:
87:34:90:b2:9d:81:a9:be:a9:66:6b:04:fc:cb:e3:bf:d1:ee:
d4:a2:33:27:4d:53:ff:ec:e5:61:88:7f:79:7c:a6:cd:26:87:
2e:2e:15:37:33:b8:7a:72:38:e2:ef:9f:e7:cc:aa:33:24:f0:
d6:65:af:d1:3e:dc:9f:ae:04:95:27:ff:fd:88:ed:ae:05:83:
9b:dd:3a:aa:50:83:b2:8e:96:04:4e:78:69:de:ae:3d:88:6b:
e7:7b:84:af:bc:8b:92:55:a5:9f:00:42:f7:22:3d:be:13:8c:
fb:71:dd:b9:56:a7:93:ef:81:b6:e0:74:0b:3a:0e:c6:cd:70:
8c:13:c5:c1:3d:fa:b8:8a:ea:aa:8f:df:1c:8d:79:e4:30:1d:
39:96:1a:4a:92:ec:f7:07:c4:9a:95:82:5c:1e:d7:82:b9:3b:
ee:ac:ab:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:22:13 2023 by rpki-client on console-ams.rpki-client.org