Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/33ef4cc525799d14379602bd38ddfd9d47b30cb5.roa
File: 33ef4cc525799d14379602bd38ddfd9d47b30cb5.roa (raw, json)
Hash identifier: At0BWjz5F34oP+tUCk/R14SLELnPjFxCgUDG/KlwP6w=
Subject key identifier: 50:86:75:53:55:A9:67:9D:D7:6E:AA:B3:79:01:98:C3:65:A6:8D:44
Certificate issuer: /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial: 201F36
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/33ef4cc525799d14379602bd38ddfd9d47b30cb5.roa
Signing time: Fri 07 Apr 2023 08:30:05 +0000
ROA not before: Thu 06 Apr 2023 08:30:05 +0000
ROA not after: Sat 05 Apr 2025 08:30:05 +0000
asID: 262234
IP address blocks: 131.108.232.0/22 maxlen: 24
170.245.56.0/22 maxlen: 24
179.49.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105142 (0x201f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Validity
Not Before: Apr 6 08:30:05 2023 GMT
Not After : Apr 5 08:30:05 2025 GMT
Subject: CN=33ef4cc525799d14379602bd38ddfd9d47b30cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:92:f3:ef:16:71:bd:d3:37:99:1c:77:8b:3e:
e2:41:6e:df:52:58:34:06:24:0c:43:ff:f3:d8:b2:
f0:ac:e4:91:d2:38:f3:6b:6f:13:58:39:9f:76:b2:
34:00:f2:92:aa:4a:22:f9:f7:f4:e3:74:2c:b3:d8:
47:55:31:1a:44:48:f2:ea:d1:5d:ab:f3:38:93:52:
4d:9c:40:be:bf:09:67:31:5e:4e:7a:17:ed:47:b7:
37:eb:db:1b:99:9f:79:03:90:9f:6d:6d:4d:75:78:
dc:71:89:0a:8f:e3:e8:62:ba:9e:d8:d5:53:0b:05:
a6:4f:41:06:1e:1e:34:b8:16:c1:94:4d:f3:14:83:
99:eb:57:f7:5d:3d:af:7a:b8:a2:62:9d:82:f4:b2:
01:ad:8f:0e:f5:1b:12:3d:6b:db:5f:e0:c9:8d:bf:
42:36:9b:e7:d5:32:1e:ba:64:d9:5b:0e:60:e1:72:
16:a6:82:d1:ea:d3:6e:7f:77:96:cf:17:44:50:aa:
34:69:53:27:16:76:f5:1f:f3:ad:91:ba:7f:97:9d:
75:10:fa:5d:ea:37:73:c4:3c:a8:87:ef:49:ce:55:
8e:91:4c:41:9f:a4:ab:c9:cb:f4:ac:8b:34:88:92:
60:3d:2d:17:94:c4:a3:ce:27:e2:ca:97:0f:e2:8e:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:75:53:55:A9:67:9D:D7:6E:AA:B3:79:01:98:C3:65:A6:8D:44
X509v3 Authority Key Identifier:
keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/33ef4cc525799d14379602bd38ddfd9d47b30cb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.232.0/22
170.245.56.0/22
179.49.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:d8:39:a1:e3:c7:61:f9:3e:74:50:4a:ed:78:fa:71:58:66:
c6:3c:72:0e:66:0a:94:81:39:c1:cc:43:fb:49:c2:9a:04:a1:
5d:33:c2:7f:f6:9a:62:57:25:71:65:22:d6:67:52:41:69:73:
2c:0c:f6:22:83:fd:33:42:48:c7:ae:02:34:f8:28:11:0b:e6:
0b:de:23:02:38:41:eb:e4:48:9f:f0:56:21:ad:58:56:cc:1e:
ce:94:17:4c:a6:6e:79:8e:5a:fa:2f:af:d0:c1:b5:c9:6e:d1:
19:08:f5:05:60:f6:be:48:22:0f:e6:dd:f9:87:56:bb:4d:c5:
7a:8b:93:5c:72:cc:d9:64:ed:10:d4:c4:01:97:f4:19:fe:50:
70:12:36:3c:29:1d:5e:d7:82:66:be:45:1f:1a:7a:0d:d5:7b:
a2:a9:b0:b2:1a:6c:05:7a:ca:34:7a:8f:8a:c6:9d:5e:8a:1b:
e1:9e:49:b0:91:4b:43:c3:3a:e9:f4:fa:06:f8:8f:41:4f:1b:
e3:43:d7:20:f8:b8:cc:52:df:50:67:1a:cb:e7:5b:77:c3:2c:
b5:22:14:5d:6f:93:2d:58:14:95:a3:bf:43:46:1c:e6:98:aa:
cd:1c:41:4e:29:9d:f8:69:ed:85:33:c7:b9:ef:22:75:f9:fa:
a5:76:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 00:00:02 2023 by rpki-client on console-fra.rpki-client.org