Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/8af2b2ac4e0bf7521eb2f4f8e322057d35a19ad9.roa
File: 8af2b2ac4e0bf7521eb2f4f8e322057d35a19ad9.roa (raw, json)
Hash identifier: NvdVLEyrvU2F4U5SQF0IEVyujTDSN7pH55u2p0tMQWQ=
Subject key identifier: 61:E8:10:84:CE:78:8D:B4:7C:83:4F:C7:B2:EF:EB:E6:08:CC:21:67
Certificate issuer: /CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Certificate serial: 134424
Authority key identifier: 01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/8af2b2ac4e0bf7521eb2f4f8e322057d35a19ad9.roa
Signing time: Tue 10 Jan 2023 18:34:56 +0000
ROA not before: Mon 09 Jan 2023 18:34:55 +0000
ROA not after: Mon 10 Jan 2028 18:34:55 +0000
asID: 28080
IP address blocks: 143.0.168.0/22 maxlen: 22
200.114.96.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262628 (0x134424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048f7ccf5bff2d8c4761bd7702a6985bca4ed931
Validity
Not Before: Jan 9 18:34:55 2023 GMT
Not After : Jan 10 18:34:55 2028 GMT
Subject: CN=8af2b2ac4e0bf7521eb2f4f8e322057d35a19ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9a:50:0d:8d:9d:79:5b:2d:ca:5c:d6:38:68:
3f:ac:ea:0b:68:4a:88:bd:28:39:0e:50:91:42:75:
2c:bf:c3:fe:d2:41:6d:75:4d:52:e9:df:5a:3d:3e:
48:98:60:59:4f:7a:69:df:d7:ba:d7:3d:0b:5a:e1:
19:a6:65:fc:5a:6e:cf:6d:50:06:f7:fd:e4:ec:ca:
28:dd:4d:20:40:8e:ac:c7:85:94:3e:09:3b:66:22:
32:3a:b1:0e:d4:ef:f5:b9:d0:12:4e:22:37:3d:e8:
5f:95:73:07:49:2c:44:1f:d7:f7:ef:51:dd:1e:2c:
32:f8:b1:97:20:13:d6:9e:0a:ba:c6:96:68:c8:d0:
cf:89:18:eb:07:b8:54:56:fa:d6:56:9d:2f:80:ae:
9d:2a:8f:4f:95:d0:f6:aa:f6:3d:a9:48:31:bc:a1:
c5:1b:40:e7:fe:99:83:dd:fb:9a:a9:49:15:12:ad:
1c:dc:34:33:73:4b:9a:0a:b2:34:9e:c4:99:e0:57:
af:aa:7d:a2:b9:3f:65:ba:dc:c6:14:bd:b7:10:0c:
08:ce:07:d4:e6:4b:8e:12:91:b0:3b:2a:0f:28:49:
53:1b:2e:f2:72:38:8d:8c:6a:64:15:56:5d:04:42:
bb:74:a0:f8:2b:35:a0:a4:cf:79:21:6b:f2:72:be:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:10:84:CE:78:8D:B4:7C:83:4F:C7:B2:EF:EB:E6:08:CC:21:67
X509v3 Authority Key Identifier:
keyid:01:7D:D9:A1:92:A3:91:08:70:71:12:1E:10:53:10:0A:5E:4A:FA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/8af2b2ac4e0bf7521eb2f4f8e322057d35a19ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/75446e49-c090-4105-bbe0-1fb7bdb9d378/048f7ccf5bff2d8c4761bd7702a6985bca4ed931.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.168.0/22
200.114.96.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:0d:36:78:14:36:8e:94:4e:45:e7:d5:2e:86:28:2c:64:6b:
6f:5c:10:1e:02:b1:62:53:c2:5c:51:b5:6c:e4:5e:d1:e4:bb:
b5:e9:a5:ac:83:1d:de:1d:3e:94:da:40:2c:a3:c5:3b:0f:d0:
db:25:b4:fd:07:c9:37:03:76:48:5e:bb:df:8a:d3:be:63:cd:
c3:60:c6:c6:7e:db:83:19:c1:37:eb:fa:f6:e2:66:46:07:3e:
fd:85:87:f6:70:53:6f:69:f5:13:28:9e:e0:50:95:2f:e7:d4:
0a:b8:b7:06:48:a5:41:8e:4a:83:91:42:cf:0f:b2:cc:8b:9e:
2c:cc:db:73:29:c9:77:a8:69:63:ac:a5:41:da:6d:9b:13:cd:
02:03:1a:71:9f:2b:bf:62:81:14:90:f6:fb:85:f9:84:cc:f6:
c6:c2:2e:eb:c3:d4:21:03:12:e6:fa:30:85:ec:6d:3d:00:37:
7b:13:f0:08:71:12:7e:1c:64:ce:93:60:bb:3d:8f:12:16:fe:
bf:df:b7:a7:1e:b4:fe:df:9f:08:d6:9e:68:7b:1b:1f:44:f1:
5f:be:34:58:d7:a2:aa:40:72:99:dd:cc:8f:50:49:d1:f6:d0:
12:fa:3e:03:6e:55:45:10:76:30:27:6a:f9:85:2a:b4:43:41:
0d:c8:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org