Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/7b3a63856797eb197c45f396cb3adbcb74a32f53.roa
File: 7b3a63856797eb197c45f396cb3adbcb74a32f53.roa (raw, json)
Hash identifier: tK7sMHGYrL+vdunmPTeAYQkdtKAvh4smEbVqL6MhVQw=
Subject key identifier: F1:9A:D1:2C:42:50:6F:FC:1A:6D:98:9D:6E:05:B6:95:62:DF:F7:3C
Certificate issuer: /CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Certificate serial: 07794C
Authority key identifier: 01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/7b3a63856797eb197c45f396cb3adbcb74a32f53.roa
Signing time: Mon 20 Sep 2021 11:07:08 +0000
ROA not before: Mon 20 Sep 2021 03:00:00 +0000
ROA not after: Wed 20 Sep 2023 03:00:00 +0000
asID: 28080
IP address blocks: 143.0.168.0/24 maxlen: 24
143.0.169.0/24 maxlen: 24
143.0.170.0/24 maxlen: 24
143.0.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489804 (0x7794c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Validity
Not Before: Sep 20 03:00:00 2021 GMT
Not After : Sep 20 03:00:00 2023 GMT
Subject: CN=7b3a63856797eb197c45f396cb3adbcb74a32f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:c1:a6:e7:8e:4d:06:d7:35:fa:f6:e9:46:
83:00:6d:b7:a4:e2:3b:a4:b6:a8:86:31:c0:56:ed:
c8:6b:70:16:b2:2d:c9:6e:cc:90:48:bc:2e:89:ae:
28:9b:01:14:50:fc:0f:85:23:2d:9f:49:9c:bd:b6:
21:98:7e:d6:ea:15:6c:fa:51:2a:e1:a3:0e:7a:6a:
4b:f1:a7:45:ad:51:59:97:93:34:3a:cf:a6:e5:51:
89:da:52:73:40:1f:3b:48:49:01:b1:f0:52:6c:b7:
67:f2:b2:27:ac:e0:7d:f4:b1:e9:79:a0:37:4c:c5:
df:07:68:9c:f1:65:6d:b9:a3:e6:9b:50:a8:72:d7:
c5:18:7c:02:4c:92:20:97:80:b7:f1:08:17:b9:5d:
40:ad:c8:54:87:e0:8b:8d:fb:4f:e6:88:67:92:74:
d9:8f:c3:93:45:cd:cb:90:2b:a1:d4:ad:af:74:55:
29:0a:e7:d1:78:93:55:0f:ac:bd:e7:fc:83:36:e8:
c6:b5:bb:3d:01:b7:6a:72:13:aa:94:9d:3b:cf:e9:
fd:19:94:ef:b4:16:74:70:8d:4e:f6:2b:ca:ce:5d:
a8:ba:74:1b:5f:8a:f1:f7:9f:88:f7:e6:16:25:11:
5c:f1:6b:96:a4:6d:ff:31:f0:54:fc:68:60:bc:ef:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:D1:2C:42:50:6F:FC:1A:6D:98:9D:6E:05:B6:95:62:DF:F7:3C
X509v3 Authority Key Identifier:
keyid:01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/7b3a63856797eb197c45f396cb3adbcb74a32f53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:f1:dc:4b:f8:24:3e:60:cc:66:89:30:c3:4b:7b:05:ae:d0:
25:58:a8:6e:51:75:2b:15:f5:2c:81:c4:f4:11:39:b7:8d:2f:
3e:c9:67:ad:c7:2f:d9:e4:2d:4c:54:74:86:19:a7:d0:e1:d2:
4f:77:df:2b:ac:41:3a:c7:dc:dc:f0:0f:51:d9:ef:38:e0:3c:
2f:bb:79:ab:d0:94:3f:b8:90:ee:cf:7d:0d:62:81:99:85:45:
3f:7d:62:18:fe:8a:de:03:35:c5:79:da:d7:ff:46:d5:5b:b0:
c8:4e:9a:e1:ac:87:14:00:9d:ef:70:93:5f:98:76:7d:8b:63:
e7:80:bd:83:1c:e7:eb:88:65:fa:de:63:76:1a:93:f0:be:25:
cd:89:ae:fe:7b:7a:0c:7d:9f:2a:e3:c7:2e:d3:60:52:ab:d3:
90:a3:23:e3:5e:46:4f:59:9b:81:7a:43:7b:db:f6:11:34:36:
a9:4c:45:17:e5:e5:80:e1:12:b0:17:dc:dc:a8:fc:53:75:04:
b4:14:7e:bf:63:b3:47:47:31:31:0a:1d:77:82:78:03:a1:12:
b1:17:ea:2e:03:db:3b:66:93:41:f6:01:32:68:51:35:57:4a:
07:cf:c4:0c:5b:93:a2:23:a7:58:54:b8:f4:b0:e7:26:a7:9c:
a0:7f:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org