Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/cbfd9d0497f35b9a47ddabb299391d9500a145b5.roa
File: cbfd9d0497f35b9a47ddabb299391d9500a145b5.roa (raw, json)
Hash identifier: eN8JQRUeSoLTnHOvEFR5oELic3xqbye0il7itcEZG7g=
Subject key identifier: 47:53:5F:80:52:D4:DA:76:22:D5:5B:FB:53:49:9E:46:57:34:69:43
Certificate issuer: /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial: 11BA2B
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/cbfd9d0497f35b9a47ddabb299391d9500a145b5.roa
Signing time: Sat 06 Aug 2022 15:22:38 +0000
ROA not before: Wed 24 Mar 2021 14:46:32 +0000
ROA not after: Tue 24 Mar 2026 14:46:32 +0000
asID: 27775
IP address blocks: 168.121.84.0/22 maxlen: 23
200.7.148.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161771 (0x11ba2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Validity
Not Before: Mar 24 14:46:32 2021 GMT
Not After : Mar 24 14:46:32 2026 GMT
Subject: CN=cbfd9d0497f35b9a47ddabb299391d9500a145b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:29:fc:82:d0:96:75:37:96:e9:6a:8c:b7:
21:85:22:78:15:ed:eb:d7:37:98:e0:ab:34:91:b9:
45:10:6b:9f:6d:fa:3a:98:14:bd:b3:08:f1:d3:bc:
66:ab:76:0a:2e:16:c2:0f:b4:23:99:88:f7:54:33:
6a:e9:66:aa:ac:5b:b6:8d:88:b5:a6:19:12:3f:6d:
9d:95:f9:7c:c2:41:0b:99:ee:56:e4:77:2f:69:0a:
34:56:40:74:3f:d1:95:30:0a:a3:78:1d:24:3a:9a:
a2:8d:5a:d3:0d:49:bb:42:55:3d:3e:eb:2e:88:76:
3e:d6:4c:b4:36:35:75:f0:83:37:a3:58:ae:44:ad:
7b:c6:88:ac:bb:3f:7a:03:e4:f5:df:33:30:ab:bf:
3b:95:c1:78:47:7f:bb:a2:e1:63:2d:48:ea:dd:12:
42:1e:e6:28:41:1e:44:74:9d:a5:29:c4:cd:8e:2a:
06:61:7a:76:b1:f3:7f:aa:e9:f3:a6:78:8e:ab:a9:
96:df:a7:ec:b5:96:85:5b:81:b3:df:f0:5b:63:5e:
38:30:15:8b:e9:a1:11:c1:c4:96:0d:7e:86:cc:dc:
3f:eb:95:1f:a0:02:96:0c:2e:96:70:78:61:50:f4:
f3:7f:ee:43:3c:07:65:bd:41:77:a1:c7:b8:01:71:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:5F:80:52:D4:DA:76:22:D5:5B:FB:53:49:9E:46:57:34:69:43
X509v3 Authority Key Identifier:
keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/cbfd9d0497f35b9a47ddabb299391d9500a145b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.84.0/22
200.7.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:7f:4c:82:d5:43:48:ea:42:1f:bc:d7:97:f3:2f:03:41:01:
3f:0d:5b:5d:81:19:f9:9d:ed:e9:5b:a7:a4:94:a3:ef:af:fa:
4d:3f:09:d7:72:10:95:3d:45:8c:ec:7c:74:5c:58:0f:fe:ad:
3f:bc:c4:3a:11:e1:1c:26:f6:e4:67:42:f7:8b:0a:e6:89:47:
fc:d5:a2:6a:b0:3a:f5:a3:77:f5:84:69:d8:5e:ba:2c:9e:59:
43:bb:9c:a2:73:4c:a5:e2:57:f4:5e:30:58:83:5b:8a:85:d4:
f2:fc:1f:66:0e:be:36:d8:e1:3b:83:a8:ea:4e:08:f5:34:5e:
85:f2:af:df:ee:0b:fb:1b:a1:06:71:fa:ab:ae:58:45:71:00:
71:1e:16:ad:87:e1:e0:71:20:94:62:f6:36:ca:2b:7c:f0:d1:
7b:d9:8b:79:c3:9c:be:e5:73:62:e4:d4:01:99:8a:cc:51:75:
ff:91:2b:a2:e5:a4:1d:74:91:da:94:c9:82:7e:e1:ce:a2:94:
52:a9:1d:65:d7:a8:6b:42:da:c8:b2:08:df:50:9f:d0:48:7e:
48:71:a1:c4:69:79:53:63:06:18:46:99:1a:53:f6:0e:b4:0c:
0e:62:f5:82:bd:2a:9a:c7:60:9a:fb:61:55:da:93:77:39:8f:
b7:d4:8d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-fra.rpki-client.org