Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/284325d45d2233affe216106277c9017ed3d19fe.roa
File: 284325d45d2233affe216106277c9017ed3d19fe.roa (raw, json)
Hash identifier: /sQokcvq1C+O7YMyUwmAbKH893zqpmtTZtrHkRVz/xo=
Subject key identifier: 8C:44:48:93:FC:B2:1F:D6:71:51:4D:9C:CF:26:A4:D9:A1:04:84:19
Certificate issuer: /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial: 0E099C
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/284325d45d2233affe216106277c9017ed3d19fe.roa
Signing time: Thu 08 Apr 2021 12:59:08 +0000
ROA not before: Thu 08 Apr 2021 03:00:00 +0000
ROA not after: Sat 08 Apr 2023 03:00:00 +0000
asID: 262234
IP address blocks: 131.108.232.0/22 maxlen: 24
170.245.56.0/22 maxlen: 24
179.49.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919964 (0xe099c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Validity
Not Before: Apr 8 03:00:00 2021 GMT
Not After : Apr 8 03:00:00 2023 GMT
Subject: CN=284325d45d2233affe216106277c9017ed3d19fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:bd:ab:99:e7:95:18:02:80:52:13:db:39:
76:14:c4:47:04:4a:45:51:fc:6f:9f:f8:57:43:ed:
83:44:2e:85:28:6c:b8:05:df:d7:17:e7:e4:04:81:
ac:60:e2:11:1c:29:6e:7f:40:ef:2c:3e:8a:1b:e4:
d7:b2:b7:ff:54:3f:9b:0c:fa:f9:ca:43:57:07:9f:
74:3d:29:68:a3:c5:bb:8d:d7:98:e7:fb:70:7c:c4:
e4:ef:74:a9:8c:6b:87:f5:bd:a3:06:49:44:8a:24:
3a:eb:04:1c:62:0c:57:37:ea:48:53:b2:2e:0c:5b:
f9:a7:6c:fa:42:89:63:c0:17:5f:df:a5:4e:6b:98:
7f:14:18:f1:0f:5b:21:49:b6:7a:30:29:c7:4a:2d:
ac:b6:ee:bc:e0:4b:a8:b5:76:eb:fe:eb:86:b0:9c:
dd:6e:e8:79:12:fe:fb:b8:8f:f9:ed:b1:c2:5b:7a:
f1:95:de:41:9b:3e:f0:73:62:20:6b:93:ca:cc:af:
ca:06:71:2a:0f:58:a2:94:78:8a:f7:2c:09:9e:4a:
9d:74:f8:02:08:e7:3a:48:eb:ff:bf:51:ba:be:98:
0e:ae:6d:16:cf:8c:61:4a:6d:8d:0a:b4:f8:bc:f8:
3f:22:75:ce:48:12:56:7c:2e:2e:14:30:27:76:25:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:48:93:FC:B2:1F:D6:71:51:4D:9C:CF:26:A4:D9:A1:04:84:19
X509v3 Authority Key Identifier:
keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/284325d45d2233affe216106277c9017ed3d19fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.232.0/22
170.245.56.0/22
179.49.112.0/21
Signature Algorithm: sha256WithRSAEncryption
23:e8:60:31:b5:30:1e:cb:6f:14:68:f6:88:15:0c:97:d0:3c:
b2:a7:33:74:36:54:2f:fa:10:84:4f:a9:ee:94:53:16:f6:1c:
35:50:dc:94:7a:ff:9b:a2:6f:93:8a:7e:54:85:98:29:45:d2:
a0:df:04:45:58:a5:09:9a:ed:e8:f9:b8:35:64:73:d0:0f:52:
5e:19:b5:40:92:bc:f1:93:a2:0d:b3:b3:cb:ba:17:f6:98:fe:
37:87:7a:c5:5b:6c:1c:1a:8b:ee:a6:18:38:6b:f8:5c:f5:39:
02:7b:b8:e0:ca:66:55:f6:d6:08:ed:28:90:c0:4a:87:27:1c:
f7:b6:b5:d4:1c:76:82:ac:bd:26:41:40:fc:0a:fe:98:71:81:
3d:32:7a:93:60:b2:e4:8d:f0:ef:c4:27:eb:41:b4:47:c8:3a:
af:87:e4:75:2b:4c:17:52:34:8e:6b:1a:20:73:5d:01:21:9d:
dd:8d:eb:6d:0b:f1:cb:1f:9b:0f:ed:6f:4f:71:5d:45:04:03:
a4:7a:be:53:ac:da:28:57:be:10:f5:74:ac:8b:f9:64:5e:c9:
10:76:31:f8:50:6b:6d:15:7e:8d:bc:72:65:1f:7f:25:40:d0:
ed:73:86:46:17:15:fc:38:03:16:72:ba:e4:28:44:24:e8:76:
77:46:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org