Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa
File: 2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa (raw, json)
Hash identifier: tt+ne0PQr0HHm+lLWf4dFiVghKXn2jIdCA/ZI1AdWj4=
Subject key identifier: 5A:5D:1A:4B:68:A4:50:F2:1D:D6:BB:01:5E:5B:48:EB:1C:1A:A0:22
Certificate issuer: /CN=6ce6d1bf69eb5ad45d04c6d15358e247afe93e94
Certificate serial: 07E836
Authority key identifier: 37:4C:48:A5:20:C7:96:45:BB:F3:AE:DD:90:EE:75:95:DE:00:36:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa
Signing time: Wed 24 Mar 2021 22:52:27 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 265786
IP address blocks: 192.141.148.0/24 maxlen: 24
192.141.149.0/24 maxlen: 24
192.141.150.0/24 maxlen: 24
192.141.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518198 (0x7e836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce6d1bf69eb5ad45d04c6d15358e247afe93e94
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=2cc5b22287498434988b31f4cb27ab1dafbab2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:ef:d5:8e:cb:86:7c:6c:e8:2a:a2:fa:cf:
26:39:5b:bc:8b:95:50:e5:00:6f:2a:99:e5:eb:40:
bc:f0:32:28:d1:b4:6a:c1:72:93:c2:8b:c3:4b:2d:
d6:ce:2d:2d:8a:a2:16:c4:18:6b:79:39:24:4c:2c:
39:3b:18:cf:3a:e2:94:ac:83:e5:da:b0:37:96:05:
76:f1:1f:27:6b:20:79:f2:b0:14:c4:16:6c:4a:f8:
93:4b:06:aa:de:8a:96:5b:ed:38:05:d1:b4:ca:f9:
71:b9:e6:bc:a8:73:68:eb:af:c4:51:28:e5:d0:9b:
15:05:01:36:2a:24:13:17:67:f6:aa:db:0f:8a:7b:
5b:10:b5:07:d7:68:5e:86:65:93:e2:90:c8:d8:c9:
3a:dc:fc:7b:0b:4a:be:f1:ae:05:8d:5d:66:92:36:
31:75:2d:e4:80:43:9b:a1:97:e8:4e:84:24:47:39:
06:63:bf:a9:48:ef:ce:41:4a:c9:fb:b8:2d:ca:05:
c2:62:81:13:1e:e6:b3:95:9f:90:b4:36:66:97:f0:
e8:b1:e0:20:ba:d1:d7:d6:8c:75:1a:7a:3b:b1:db:
2f:59:45:fb:fb:ce:85:0c:ce:4a:3e:21:b4:8c:43:
6f:94:3e:a8:0b:c1:56:b5:b6:f4:ce:bb:51:8b:2a:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5D:1A:4B:68:A4:50:F2:1D:D6:BB:01:5E:5B:48:EB:1C:1A:A0:22
X509v3 Authority Key Identifier:
keyid:37:4C:48:A5:20:C7:96:45:BB:F3:AE:DD:90:EE:75:95:DE:00:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/2cc5b22287498434988b31f4cb27ab1dafbab2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86e7454a-a655-4f0b-a530-b7d8c3f081c7/6ce6d1bf69eb5ad45d04c6d15358e247afe93e94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:11:49:b1:00:6a:00:3f:95:55:3c:4e:52:e1:75:ca:6a:e3:
8c:bb:94:a4:62:ba:5b:9b:6e:4f:6b:7b:7e:e5:59:74:12:a7:
5a:e8:d8:6f:11:b8:de:3c:97:ab:f6:46:07:3f:04:91:71:64:
4a:cc:98:7e:54:3e:49:07:60:d3:c9:e9:35:99:f3:8e:32:2d:
db:51:ec:7e:b8:32:8b:a7:79:dd:13:b8:41:b2:b4:8c:88:96:
3a:f5:fc:fd:d4:b7:24:fc:7a:7a:ce:52:d0:68:86:88:66:10:
59:01:34:cf:88:a2:8a:96:eb:60:97:84:ab:7a:8d:08:a9:ab:
2f:80:ab:1c:dc:36:c1:d3:5e:c3:30:07:cd:d5:7a:6f:1a:62:
50:af:38:79:73:07:b4:00:b7:c5:ab:77:bc:04:5d:5b:dd:cd:
e4:54:01:7a:0b:95:b4:8b:95:ad:9b:37:c3:0d:10:00:3b:0f:
01:96:37:f8:82:47:05:60:c6:e7:50:32:bd:21:da:d6:55:67:
f2:6c:5b:c0:64:3a:e7:a8:29:bd:b9:e3:f5:ac:cb:b2:3a:33:
ec:9a:48:81:a2:54:5b:90:c6:f9:76:bb:08:2f:87:06:56:93:
57:e2:82:cd:a0:a3:23:f0:ee:e5:d8:be:ed:50:4f:66:d9:fa:
35:e0:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org