Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/dc19359e12a4f95d0280c9848b54783f13a404e3.roa
File: dc19359e12a4f95d0280c9848b54783f13a404e3.roa (raw, json)
Hash identifier: qDAIoOlyv6i3i8L48eT1MIjVBoQ5kBqPsXCn9VQK53Y=
Subject key identifier: 04:DB:6B:16:10:E0:27:12:74:F0:F8:8B:B3:85:96:42:24:72:93:B7
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 11D0
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/dc19359e12a4f95d0280c9848b54783f13a404e3.roa
Signing time: Wed 21 Sep 2022 20:43:18 +0000
ROA not before: Wed 21 Sep 2022 20:41:06 +0000
ROA not after: Sat 21 Sep 2024 20:41:06 +0000
asID: 8163
IP address blocks: 186.121.126.0/24 maxlen: 24
186.121.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4560 (0x11d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Sep 21 20:41:06 2022 GMT
Not After : Sep 21 20:41:06 2024 GMT
Subject: CN=dc19359e12a4f95d0280c9848b54783f13a404e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:8c:23:76:bd:a5:db:6f:3f:bd:42:52:fc:
c0:0d:f4:08:be:34:db:6e:a9:38:32:ff:18:7a:5b:
69:fa:36:3b:6c:01:ea:31:f1:1c:df:53:ff:b1:73:
b6:77:23:2d:78:a6:b7:0b:42:16:77:59:f8:35:d1:
2a:96:86:b4:24:f7:90:a9:09:b3:b1:07:58:e3:d0:
a9:33:29:01:57:58:e7:8a:4d:36:1f:7e:49:9d:cc:
11:2b:a5:0c:68:7a:df:b1:f3:ad:8c:fb:8f:32:a2:
d9:ab:29:ef:7f:13:f3:47:df:9a:41:0d:b7:2e:27:
0e:2d:02:f4:d0:88:b9:ac:a2:38:0c:9f:ee:c7:1a:
bf:52:21:43:87:57:a7:63:ca:d4:29:e3:47:e6:c1:
48:a8:f9:71:50:54:a3:82:73:73:a9:33:5f:18:67:
a5:35:e7:ec:e3:a6:62:a6:8f:9e:ce:9f:1e:7f:54:
31:ee:11:7b:e0:b7:c0:65:68:6b:54:57:16:f8:09:
f0:e9:99:8b:ff:50:3a:a1:9e:96:1e:6b:e6:f2:ee:
21:3d:d9:18:97:a4:b5:47:f8:6a:98:a0:39:f3:47:
9a:b4:5d:1c:32:dd:6e:d9:61:0b:f9:e4:36:1b:34:
00:0b:17:bf:67:f2:aa:bf:96:51:8c:c2:31:54:12:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DB:6B:16:10:E0:27:12:74:F0:F8:8B:B3:85:96:42:24:72:93:B7
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/dc19359e12a4f95d0280c9848b54783f13a404e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.121.126.0/23
Signature Algorithm: sha256WithRSAEncryption
95:42:2a:34:22:47:e9:1d:ca:9f:16:44:e0:44:c7:01:90:46:
d8:83:b9:2f:67:59:1d:61:64:0e:d9:24:ad:3f:64:f5:df:d1:
0a:ab:e3:9e:10:b9:af:01:76:4f:59:86:be:ae:cd:13:65:ab:
6c:80:36:d7:2d:e7:d8:84:2f:21:10:29:fe:74:d7:de:16:eb:
14:6f:2e:ba:28:6d:a5:0c:61:c6:6a:fa:a9:30:05:5c:b2:f9:
4f:0f:15:8c:9e:08:38:2f:1c:6b:39:69:72:06:0d:1a:7d:4e:
9f:98:89:3a:b8:7a:88:dc:f3:ca:f4:00:29:e5:23:90:10:39:
80:dc:62:42:bd:b6:48:68:44:6d:f4:6b:0d:03:76:17:30:e3:
11:eb:68:9b:66:9c:f5:81:40:51:9a:5a:6c:3e:94:2f:2d:2c:
0e:11:d2:e3:14:ff:00:06:64:23:8d:7e:62:eb:30:cd:94:74:
d9:45:a6:fb:ce:67:f9:bd:8f:ab:f8:ba:ef:03:2b:50:10:d4:
32:6f:7c:8f:b0:33:0e:bd:e8:2b:d9:06:f9:10:31:9d:15:b1:
35:ff:8b:cb:d3:5b:4b:5f:6a:3c:ac:80:49:2d:5e:b9:9e:24:
2a:09:06:06:80:4f:81:5e:c3:21:d6:df:b2:7a:73:76:f8:1e:
32:f9:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org