Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/14c43a23f3e37c9a7b6d8c3d1d5baeee94e66e9e.roa
File: 14c43a23f3e37c9a7b6d8c3d1d5baeee94e66e9e.roa (raw, json)
Hash identifier: UibCw//arScWIXHikPNGG+6M4UizM0UlZ30oPId3Urs=
Subject key identifier: D5:6A:FC:C0:12:56:AF:CD:85:50:57:CF:08:9D:51:66:B1:86:15:E5
Certificate issuer: /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial: 0E4619
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/14c43a23f3e37c9a7b6d8c3d1d5baeee94e66e9e.roa
Signing time: Wed 24 Mar 2021 14:39:08 +0000
ROA not before: Wed 24 Mar 2021 14:39:07 +0000
ROA not after: Tue 24 Mar 2026 14:39:07 +0000
asID: 61468
IP address blocks: 143.255.248.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935449 (0xe4619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
Validity
Not Before: Mar 24 14:39:07 2021 GMT
Not After : Mar 24 14:39:07 2026 GMT
Subject: CN=14c43a23f3e37c9a7b6d8c3d1d5baeee94e66e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:92:20:6d:2f:72:f3:b1:4e:e2:96:7d:93:
0c:b9:cc:8b:04:5e:59:7f:58:d9:ef:01:07:e0:76:
69:06:70:25:e1:6c:cd:fc:0f:60:f2:96:3e:af:ee:
2d:63:18:0e:fe:db:68:0d:a4:d7:08:ad:57:c0:cf:
74:20:08:a8:13:23:84:eb:81:b9:fb:c8:b9:0a:d7:
9b:ca:79:c5:eb:4c:41:10:3d:4e:1e:11:ee:c0:96:
25:d1:ff:59:36:05:9b:6a:a2:79:b1:07:63:bb:f9:
31:10:70:3c:0d:c9:aa:ce:53:5a:9b:b7:73:c0:cf:
ce:86:df:b5:da:3e:50:81:2d:8a:82:b7:8a:ac:55:
f8:19:15:6f:7b:d5:61:44:8f:17:67:55:1b:28:33:
83:d9:8e:f7:1e:6b:68:a1:dd:74:ce:89:8f:a4:cb:
56:3c:78:a3:20:e3:23:f7:93:f0:b4:0f:f2:10:04:
53:e5:61:76:93:94:ba:47:d0:e7:b6:c4:3c:d3:26:
da:6c:83:18:85:ab:97:50:03:1d:94:90:ca:86:3e:
93:31:ea:84:53:de:08:90:ca:f4:05:7c:7a:90:fb:
68:77:6f:a3:2d:16:59:f8:fd:82:56:05:b6:a3:0a:
77:51:b1:30:f5:42:0e:32:d3:ab:63:b0:d6:59:0c:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6A:FC:C0:12:56:AF:CD:85:50:57:CF:08:9D:51:66:B1:86:15:E5
X509v3 Authority Key Identifier:
keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/14c43a23f3e37c9a7b6d8c3d1d5baeee94e66e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.248.0/22
Signature Algorithm: sha256WithRSAEncryption
19:48:af:0f:35:e0:70:39:80:6a:8a:fa:55:1e:6d:de:89:1c:
b0:23:0d:fe:6a:95:90:98:b1:de:93:ca:ee:5f:e2:3a:16:59:
7d:3c:f2:19:34:f4:b7:62:38:58:aa:8b:30:1e:65:18:e5:c4:
84:02:d2:e5:3f:74:be:40:0c:71:f5:14:1a:f3:a0:52:be:83:
9d:cf:89:bd:71:2a:64:f1:a8:72:ec:98:7f:52:a0:2c:82:03:
b0:ba:21:7d:be:e4:0a:26:5d:52:30:58:71:e6:bb:55:0f:2e:
fc:45:22:15:74:5a:f1:d3:01:cd:6f:13:fe:5d:ac:f7:49:3d:
7e:62:18:95:06:76:bb:12:b1:8c:97:91:7a:04:43:e9:1e:a9:
1b:86:fd:27:2e:73:bb:d6:95:41:be:03:28:f7:f2:07:a9:cf:
6b:29:29:66:46:5c:cf:f9:af:cf:5e:d9:9f:d3:5d:e2:29:d2:
9f:87:49:cd:dc:81:4a:34:bd:06:69:5f:5c:8c:34:77:28:57:
ba:bf:54:58:df:ae:f2:de:58:ef:fc:41:a8:62:f4:a2:fb:fa:
ed:db:e8:64:e8:13:18:9e:43:d5:7b:9d:e9:73:8d:2c:cd:cc:
5f:30:de:0f:ea:dd:7e:96:70:4f:85:fd:b7:19:19:59:49:59:
9c:34:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org