Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/cee6fd88bf48326ecabb30a662d647a8f0debfe5.roa
File: cee6fd88bf48326ecabb30a662d647a8f0debfe5.roa (raw, json)
Hash identifier: c1mGynNN+NDnIKjfTU//KfBi1Jvwjfm74RdRIwVnVFA=
Subject key identifier: 64:AB:E3:61:AE:9B:E4:12:6F:23:30:69:F1:BF:96:51:57:EC:AF:A8
Certificate issuer: /CN=2d7ada75860472b45a97cb9e0c6698ff1f4fb086
Certificate serial: 0319
Authority key identifier: DB:2D:9C:F6:4E:E6:D5:B4:9A:8D:AF:E3:A1:3D:E9:0E:C4:A4:46:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/cee6fd88bf48326ecabb30a662d647a8f0debfe5.roa
Signing time: Wed 14 Sep 2022 15:59:40 +0000
ROA not before: Wed 14 Sep 2022 15:53:13 +0000
ROA not after: Sat 14 Sep 2024 15:53:13 +0000
asID: 28408
IP address blocks: 167.249.252.0/22 maxlen: 22
170.244.108.0/22 maxlen: 22
2806:20f::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7ada75860472b45a97cb9e0c6698ff1f4fb086
Validity
Not Before: Sep 14 15:53:13 2022 GMT
Not After : Sep 14 15:53:13 2024 GMT
Subject: CN=cee6fd88bf48326ecabb30a662d647a8f0debfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:c3:27:70:60:bd:75:03:7f:bb:3e:20:9c:
b2:e3:84:5c:5c:59:59:e9:0e:42:0c:01:19:d0:1f:
99:04:da:6c:2d:20:66:a9:5a:ab:4b:5b:24:ff:92:
43:b3:12:6a:5f:b2:25:d0:8f:2c:64:bb:58:c2:3f:
f2:6a:98:90:72:ab:1f:e1:e0:f0:c2:5d:35:0c:5d:
00:b7:81:08:a7:be:0c:4d:f1:0f:e4:73:db:af:d0:
42:8f:94:70:b0:af:ca:2f:47:7b:84:59:b7:a7:1e:
4a:57:28:9c:33:6e:d4:8c:33:7d:94:22:9c:e6:cb:
6e:01:48:08:c2:a5:64:67:28:7b:12:f4:09:62:1f:
5b:02:7a:02:99:84:17:de:c5:3a:f2:32:45:27:71:
45:85:55:51:bf:4c:15:5b:02:82:2e:e8:89:53:86:
34:3f:73:4a:ab:80:cc:c7:8d:04:2e:d0:92:c4:93:
48:f4:6e:88:f3:c2:e3:8a:6a:c9:3a:16:01:60:11:
7d:c7:6f:74:52:78:12:90:07:e9:54:c2:20:67:c9:
1b:ac:3a:a9:07:79:37:2c:99:40:24:35:0a:e7:9a:
e4:cd:2c:d7:40:7c:bc:6f:68:8e:e3:7d:e3:ee:fd:
a5:84:20:67:99:fb:9b:bd:09:4b:80:4a:8a:96:99:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AB:E3:61:AE:9B:E4:12:6F:23:30:69:F1:BF:96:51:57:EC:AF:A8
X509v3 Authority Key Identifier:
keyid:DB:2D:9C:F6:4E:E6:D5:B4:9A:8D:AF:E3:A1:3D:E9:0E:C4:A4:46:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/cee6fd88bf48326ecabb30a662d647a8f0debfe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.252.0/22
170.244.108.0/22
IPv6:
2806:20f::/32
Signature Algorithm: sha256WithRSAEncryption
15:52:93:6b:38:40:cb:00:0c:c3:5c:6f:a1:42:5d:41:12:17:
2b:dc:f4:9c:72:0f:59:ad:28:38:bc:b3:c8:42:ce:97:a1:50:
48:06:1a:63:2f:10:3a:30:ee:1d:5a:d0:56:08:ad:9c:c6:bf:
3e:53:21:1c:b0:66:08:e5:4c:35:06:b1:b9:93:53:4d:ad:24:
77:bf:1b:34:bd:c4:a7:12:c0:1c:09:74:13:7b:6b:4e:8c:21:
f0:37:c8:7e:72:be:6e:0e:cc:af:64:08:f0:cd:0f:6e:01:71:
db:1d:8d:54:e5:26:b9:4f:14:3e:b5:7e:2f:18:36:28:a8:24:
0b:03:fd:89:a8:e4:11:f3:6b:de:23:c3:bf:a7:68:f6:4e:e2:
3d:3b:f8:02:9a:3d:fc:cc:17:4a:2e:a6:4b:33:35:6c:10:64:
b3:4f:6c:36:f4:dc:c3:46:b6:cc:ba:12:a9:ed:9b:7d:27:09:
3c:be:2a:74:a7:bc:aa:02:3e:81:7d:90:15:93:14:fd:0d:b9:
9a:a4:87:92:ac:76:50:43:ff:13:77:8f:7a:17:9d:f1:d3:b4:
f7:1f:2d:e0:4b:70:2f:26:6c:be:9c:16:ca:1e:df:58:09:dd:
05:6e:70:78:37:15:a7:bd:4b:e8:0e:67:0e:20:39:a9:7a:92:
7a:af:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org