Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/6908976022f60ea09c47ea5fca4dddf1b65292bb.roa
File: 6908976022f60ea09c47ea5fca4dddf1b65292bb.roa (raw, json)
Hash identifier: 6yqXQ9dGsjkPDRvICjsXXYO04kIyd6H/CU5N4/ctFXU=
Subject key identifier: 9C:83:59:BD:64:B4:60:4D:86:BC:56:EE:2C:D0:CC:78:76:84:C7:F5
Certificate issuer: /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial: 16972E
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/6908976022f60ea09c47ea5fca4dddf1b65292bb.roa
Signing time: Mon 28 Mar 2022 21:42:40 +0000
ROA not before: Thu 06 Jan 2022 03:00:00 +0000
ROA not after: Sat 06 Jan 2024 03:00:00 +0000
asID: 52423
IP address blocks: 168.197.96.0/24 maxlen: 24
168.197.98.0/24 maxlen: 24
168.197.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1480494 (0x16972e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Validity
Not Before: Jan 6 03:00:00 2022 GMT
Not After : Jan 6 03:00:00 2024 GMT
Subject: CN=6908976022f60ea09c47ea5fca4dddf1b65292bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:7e:a7:18:81:e1:16:65:3b:21:91:94:f9:
0a:db:26:dc:ad:e9:60:27:9b:e0:9d:01:ff:c8:4e:
1c:50:4f:b8:20:6b:00:19:e7:9a:28:5a:ca:1e:06:
f5:ae:17:3c:ab:f1:e7:b7:30:f5:63:dc:40:e5:9c:
ea:17:c9:09:52:03:ae:52:95:06:97:7b:1e:cb:3a:
76:58:d7:0c:2a:95:4f:7c:46:4d:05:e7:88:c9:d0:
53:bf:d7:a5:97:b9:7c:a7:09:2d:83:b0:40:c0:74:
e9:1b:f0:7e:c9:01:65:d4:04:52:fb:17:34:b8:ab:
ae:f7:95:05:f1:fd:19:32:eb:cf:68:46:ad:f7:29:
e2:52:66:1a:2c:e2:18:0c:d5:6f:3f:f7:69:63:ea:
06:24:c4:4a:de:3b:d7:9c:e6:70:f9:cd:56:69:e4:
42:83:c8:4e:ad:19:c1:7b:96:ca:02:6c:3a:2c:fc:
9b:b2:0d:2b:4d:f0:0b:3b:15:4d:ef:7d:f2:e8:70:
6d:4f:15:e9:4d:67:98:13:82:10:6b:1f:78:3a:4e:
d0:d6:22:30:ef:9a:ea:a4:bc:56:32:f5:0d:c8:f1:
02:e8:2e:d8:b5:e0:91:d2:c9:95:fb:77:e7:55:bb:
e8:6c:c1:cd:54:eb:d4:bf:b2:b3:bd:c3:24:63:cc:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:83:59:BD:64:B4:60:4D:86:BC:56:EE:2C:D0:CC:78:76:84:C7:F5
X509v3 Authority Key Identifier:
keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/6908976022f60ea09c47ea5fca4dddf1b65292bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.96.0/24
168.197.98.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:a2:3a:14:1e:1d:d9:47:bc:2b:00:60:2d:4f:c0:bf:47:ce:
3f:c8:35:49:5b:0d:d3:35:42:f3:8b:75:99:ea:46:e4:86:1c:
5d:ed:e1:36:9a:44:66:65:93:7c:e4:ca:31:83:5d:60:98:a2:
95:56:39:a5:7c:8f:9a:61:34:da:b7:b2:49:00:b7:af:ac:86:
a5:4f:02:a8:5c:ab:2d:82:8e:26:20:da:94:a1:db:2c:96:c0:
3b:cb:a2:03:a9:09:e8:47:68:44:e9:13:c5:16:a8:f3:d9:f4:
7f:aa:db:07:9d:3f:75:38:47:71:c5:81:d2:2b:98:16:e6:fd:
11:0e:a3:26:1c:05:9a:49:9e:c9:bb:e5:5e:9d:71:2e:b2:5b:
1a:f8:2c:4e:89:a4:92:c6:c0:59:c4:bf:42:de:1f:8a:ba:79:
6a:ee:75:15:8e:3b:7a:ec:a6:74:ba:55:2f:13:15:a4:3f:b3:
20:f1:e4:81:71:6c:e2:d8:1f:34:cc:b0:fc:9d:73:f9:b9:53:
9d:24:80:a5:fb:a2:18:1b:e5:dd:fc:d9:0c:b6:b9:dc:85:44:
04:23:82:e0:01:b4:82:6d:df:97:dc:70:0d:c5:29:cb:75:27:
46:d7:d0:dc:c4:89:5c:fc:e8:6c:fb:10:91:1b:a3:6a:f8:23:
d4:fc:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:22:13 2023 by rpki-client on console-ams.rpki-client.org