Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/df48f39ed16a11358834d2ca3aba48530584842d.roa
File: df48f39ed16a11358834d2ca3aba48530584842d.roa (raw, json)
Hash identifier: J9G1xET7OWCY6gcvzgByvuGDUF9osLuAEis/vN1eNDY=
Subject key identifier: D7:09:76:6A:13:B4:E6:11:03:2F:15:65:20:16:F6:C4:7B:3B:0E:05
Certificate issuer: /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial: 058B16
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/df48f39ed16a11358834d2ca3aba48530584842d.roa
Signing time: Wed 05 Jul 2023 19:41:59 +0000
ROA not before: Tue 04 Jul 2023 19:41:59 +0000
ROA not after: Sat 05 Jul 2025 19:41:59 +0000
asID: 16629
IP address blocks: 152.172.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363286 (0x58b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Validity
Not Before: Jul 4 19:41:59 2023 GMT
Not After : Jul 5 19:41:59 2025 GMT
Subject: CN=df48f39ed16a11358834d2ca3aba48530584842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:36:9e:d8:9b:c2:9d:32:ee:fd:8c:0f:db:
f0:71:b6:16:63:bc:e5:3a:76:f1:3b:ee:8c:06:6e:
91:40:de:c6:db:7a:31:3c:89:a5:e3:91:ba:86:f0:
88:78:78:3f:ac:33:4b:5f:79:ef:40:0e:39:94:85:
85:60:2a:0b:31:64:24:0c:21:d4:39:6b:a2:96:f4:
29:fd:c6:ac:42:d1:df:25:a8:3d:00:8a:ff:4b:51:
f8:d3:59:eb:53:fa:e7:82:99:59:89:8f:83:c7:95:
7a:59:4e:d4:f7:07:db:39:62:10:89:f9:0b:cb:0b:
ad:b4:37:3e:2d:44:15:61:6a:fd:42:cb:62:f1:08:
c4:07:17:97:6f:30:43:71:03:16:86:5a:9b:bc:73:
e5:e0:2e:22:04:ec:93:98:36:f4:13:43:e5:c3:82:
3c:1d:f7:29:43:cd:cf:34:28:ec:9f:b7:02:18:af:
23:82:b3:f7:3c:ee:f9:9f:6b:38:06:4b:dc:c1:1b:
51:88:bf:06:ab:49:a1:5e:a2:2c:f8:40:a3:13:e4:
8a:64:fc:be:d2:fa:7e:be:a6:00:06:cc:87:fd:a3:
db:b1:5a:0f:a7:db:0d:e9:dd:68:2f:40:25:9e:20:
b8:25:27:de:21:a7:90:23:b8:27:3a:89:4d:72:38:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:76:6A:13:B4:E6:11:03:2F:15:65:20:16:F6:C4:7B:3B:0E:05
X509v3 Authority Key Identifier:
keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/df48f39ed16a11358834d2ca3aba48530584842d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:e3:55:ff:e5:8e:fc:1e:7b:17:d0:f8:37:99:91:40:f7:13:
5b:f9:78:45:df:d9:57:42:b3:d4:cc:87:88:0a:a3:09:54:f0:
a4:cc:34:29:63:c6:1f:c2:d3:b9:ab:d4:29:cd:11:b9:14:4f:
4a:f1:d7:c2:cb:54:a5:4e:f9:f8:e1:85:e8:ff:21:21:df:3c:
40:ec:74:d3:5b:5d:fc:eb:93:b5:16:ed:50:86:a4:b6:7a:d9:
6c:72:1e:29:92:65:f6:0b:d6:06:2c:d0:b1:a7:5b:ee:18:bc:
c3:b1:98:0c:c0:5c:2d:63:72:c2:18:88:6a:b3:54:33:b9:e4:
82:a1:cd:ee:e5:49:d9:31:2a:39:34:f5:57:61:d4:d0:b2:90:
cf:dd:ab:ef:71:f3:7f:c5:e8:81:ec:93:f5:9d:af:09:50:1d:
6a:07:8a:30:d9:5e:82:4b:3c:90:6f:92:a1:ac:98:5e:08:a3:
15:58:67:69:0c:4c:c9:37:e9:1a:b5:51:44:4b:bf:16:8c:74:
ce:5d:4b:35:0a:26:31:95:a2:63:89:2b:48:9b:6d:3d:b0:cd:
8b:31:64:b1:ce:82:b9:67:df:ab:de:9b:af:f4:12:2d:db:4d:
26:56:d0:d6:d3:51:ce:06:82:eb:84:e0:23:de:80:9c:7e:e6:
ac:22:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org