Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/66ca6d710cc26b6655bfe85a07dba5b7f0a5ce58.roa
File: 66ca6d710cc26b6655bfe85a07dba5b7f0a5ce58.roa (raw, json)
Hash identifier: NRZNLWDrxyY4NgD3A9Fv+kCI5WwFYcB3PArIiz5X4Uo=
Subject key identifier: 65:A4:E1:C5:E8:CF:AF:83:5C:DB:97:BA:0E:9C:CB:4A:BE:2E:74:9E
Certificate issuer: /CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Certificate serial: 133E53
Authority key identifier: 01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/66ca6d710cc26b6655bfe85a07dba5b7f0a5ce58.roa
Signing time: Tue 10 Jan 2023 18:34:55 +0000
ROA not before: Mon 09 Jan 2023 18:34:55 +0000
ROA not after: Mon 10 Jan 2028 18:34:55 +0000
asID: 28080
IP address blocks: 143.0.168.0/22 maxlen: 24
200.114.96.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261139 (0x133e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Validity
Not Before: Jan 9 18:34:55 2023 GMT
Not After : Jan 10 18:34:55 2028 GMT
Subject: CN=66ca6d710cc26b6655bfe85a07dba5b7f0a5ce58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:cf:a7:34:16:77:a5:57:57:34:60:86:8f:
78:c2:dc:32:62:54:5b:b9:13:5d:a3:c4:63:9e:1f:
5c:94:18:b7:f4:26:9d:d2:f3:31:35:e1:12:9c:3c:
28:41:e4:40:54:e8:99:52:88:14:c2:5d:c9:e7:46:
ea:0b:5d:76:e1:78:78:32:6d:41:ff:c3:b3:42:ed:
a3:7a:c2:d0:b5:42:03:69:2b:b9:64:2a:56:7f:a1:
6b:6d:4b:80:73:49:19:3a:05:06:74:9b:c1:27:a6:
3e:65:9c:80:ff:7a:a5:0b:f3:6d:76:78:c4:8d:2b:
89:84:78:e1:ff:9f:13:4f:b3:7b:14:11:05:70:c2:
b3:73:18:b8:e3:65:1a:74:c6:6c:09:25:53:dc:7f:
40:70:7e:74:96:8b:58:1f:4e:d3:6d:77:c0:4f:e9:
ec:1f:f5:10:68:20:62:e0:00:b8:97:9d:22:17:b2:
34:66:e0:22:c0:46:1b:1d:69:d2:cc:32:2c:24:03:
54:a2:8b:bf:74:47:66:43:a9:3d:a4:5c:a3:da:97:
6b:8f:47:cd:c3:d2:c8:09:3a:a4:96:f7:40:7a:96:
de:a8:9f:b1:c5:7a:0c:57:c6:c9:f7:55:2e:ca:95:
e1:2e:64:b1:62:b0:97:a9:63:9d:35:00:11:cc:32:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A4:E1:C5:E8:CF:AF:83:5C:DB:97:BA:0E:9C:CB:4A:BE:2E:74:9E
X509v3 Authority Key Identifier:
keyid:01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/66ca6d710cc26b6655bfe85a07dba5b7f0a5ce58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.168.0/22
200.114.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:19:44:a6:b1:5e:d2:df:66:3a:43:5a:63:18:c6:df:f1:d7:
c9:19:d7:fe:6a:09:6e:8c:e2:bb:8a:68:44:35:05:77:0f:db:
1c:c3:0c:fd:bb:43:a6:84:22:66:49:26:db:d1:f9:d9:6c:68:
e7:33:7e:85:b7:96:34:0a:e5:ce:b2:38:00:f3:d5:36:7e:75:
4b:f0:a3:dd:16:46:4a:8c:d8:eb:2d:50:12:4a:46:50:cf:d9:
cb:d3:e9:85:c7:5c:25:41:a4:d2:28:03:fb:70:8a:d6:99:e0:
42:8a:61:26:e6:47:8a:e3:5d:57:e4:47:a2:57:e0:12:90:2d:
fc:e9:b5:c5:4f:b9:8a:fd:48:4b:75:45:e0:13:be:19:1e:ff:
e1:a2:25:17:94:2f:71:0f:8c:6a:2d:6e:81:fd:bd:17:4d:a3:
51:92:30:d3:e9:40:a3:fa:37:ac:05:0f:b0:3e:e2:ef:18:a9:
f4:4b:07:e3:13:16:ec:81:46:f2:cf:61:09:06:8b:e5:c0:00:
bd:05:35:54:73:b8:4e:52:57:9f:d7:0e:ae:ba:8f:4a:67:06:
3f:b8:61:f2:be:d9:9e:7b:22:10:48:12:2b:ec:f6:7d:ef:69:
90:4a:31:94:8d:d9:ff:e3:96:23:34:29:ae:65:97:cd:17:ae:
33:e0:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org