Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/dd9be561cc46c0956faa311e4d7c0cf2eed4a09c.roa
File: dd9be561cc46c0956faa311e4d7c0cf2eed4a09c.roa (raw, json)
Hash identifier: 7dnYd4UVYqZ4QLRNcfEJ9Ynf8T4WmAE5RvtExw3/EVA=
Subject key identifier: 61:D5:DB:D8:11:1F:91:E6:FD:1A:92:72:4F:D9:F6:3A:EE:60:29:8E
Certificate issuer: /CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
Certificate serial: 21A95D
Authority key identifier: D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/dd9be561cc46c0956faa311e4d7c0cf2eed4a09c.roa
Signing time: Wed 05 Jul 2023 23:27:25 +0000
ROA not before: Tue 04 Jul 2023 23:27:25 +0000
ROA not after: Sat 05 Jul 2025 23:27:25 +0000
asID: 52468
IP address blocks: 164.163.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206045 (0x21a95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
Validity
Not Before: Jul 4 23:27:25 2023 GMT
Not After : Jul 5 23:27:25 2025 GMT
Subject: CN=dd9be561cc46c0956faa311e4d7c0cf2eed4a09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:ee:3f:13:b9:fb:85:36:29:79:59:e2:28:
da:93:33:91:b6:0b:05:b0:e1:71:57:a3:8d:f8:f5:
84:e4:35:37:0f:4f:17:48:8d:ec:7f:6c:61:1e:0b:
51:60:e0:f3:16:0f:82:c8:89:6a:2f:f9:75:6e:b0:
d0:b3:2c:1b:cd:cf:43:90:58:30:4f:5e:b4:0d:a2:
59:d7:d8:40:6d:05:f1:33:46:71:33:72:1a:0f:29:
8f:2a:00:2f:38:76:09:c9:42:53:94:b0:43:c0:cc:
45:41:32:47:14:2b:10:89:a9:21:d5:4f:91:76:c3:
aa:22:20:cc:8e:16:01:be:b4:31:d4:84:27:a5:8e:
a5:99:71:02:69:92:80:85:db:d5:43:3e:c5:63:d0:
0e:7f:e1:3d:e8:96:19:00:bc:44:ae:61:0c:f6:e9:
7e:b0:37:f1:e4:e4:b2:72:c8:44:13:41:c6:a6:e3:
4d:e2:83:a1:e8:e7:25:0a:6d:72:df:0b:1b:76:24:
e2:43:fd:86:a5:17:98:b6:11:b4:d4:b3:57:dc:72:
f5:65:62:48:0f:1a:ef:24:09:d4:88:56:70:58:e6:
9a:ca:13:3e:2a:38:d4:1e:5d:26:3b:d3:c1:76:2a:
55:71:71:fa:2f:ae:80:81:9d:df:25:0e:1d:80:c6:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:DB:D8:11:1F:91:E6:FD:1A:92:72:4F:D9:F6:3A:EE:60:29:8E
X509v3 Authority Key Identifier:
keyid:D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/dd9be561cc46c0956faa311e4d7c0cf2eed4a09c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/27dd18c956e9fcc73465d89de8aa38f3385acb6e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:80:d1:9d:38:d2:bf:66:67:d1:0d:d1:63:f9:e7:3e:2e:bc:
fd:db:c2:f4:d4:ea:ce:e7:18:79:d2:ce:fe:a7:13:f1:63:99:
25:a6:a7:5c:a3:da:77:dc:8d:6b:ed:93:9f:2d:fa:35:df:45:
2c:b9:bd:01:fb:b6:8f:03:68:3e:87:81:06:82:28:38:b0:5f:
12:eb:8a:d2:ec:3f:b4:b8:dc:5d:b1:a3:19:53:a4:53:2a:d2:
ff:fe:fe:64:dc:4d:91:3a:8b:57:e2:30:d5:ca:c4:35:96:8d:
26:7f:4b:34:5c:87:92:99:ba:de:84:18:5a:92:ee:db:fb:c5:
dc:40:3b:e0:88:6a:75:9f:8c:be:fe:15:87:b5:c9:61:12:de:
23:d8:d6:cc:9f:bd:83:19:e6:86:5d:b3:73:cf:07:de:0e:ee:
f8:98:44:3e:d5:7a:2c:cd:47:2c:20:a1:ff:9b:59:ef:1e:a1:
90:96:ff:1e:3f:d9:13:db:ce:8a:90:88:2b:67:ed:de:48:f4:
2e:26:e8:30:b7:11:8d:30:d3:4c:28:60:36:53:1f:8f:f8:8b:
ab:c3:f9:4f:53:2e:c2:a6:26:23:c8:b4:df:20:a6:83:45:33:
21:c1:aa:6c:03:7d:67:bb:43:3f:cb:d9:77:7e:73:86:d1:68:
f0:e8:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org