Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e47f554610c3ff32840f8b0b5ff2f2bd8055e208.roa
File: e47f554610c3ff32840f8b0b5ff2f2bd8055e208.roa (raw, json)
Hash identifier: hoES3LKAku/O8hGN7UmazQB57gAuFbsRoQz3hGv3DsA=
Subject key identifier: 5A:E6:33:BB:BC:B3:72:A8:EF:67:61:D8:6B:EE:75:5B:3B:BC:B7:43
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 25B4
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e47f554610c3ff32840f8b0b5ff2f2bd8055e208.roa
Signing time: Wed 21 Sep 2022 20:54:51 +0000
ROA not before: Wed 21 Sep 2022 20:53:37 +0000
ROA not after: Sat 21 Sep 2024 20:53:37 +0000
asID: 8163
IP address blocks: 201.220.84.0/24 maxlen: 24
201.220.85.0/24 maxlen: 24
201.220.88.0/24 maxlen: 24
201.220.92.0/24 maxlen: 24
201.220.94.0/24 maxlen: 24
201.220.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9652 (0x25b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Sep 21 20:53:37 2022 GMT
Not After : Sep 21 20:53:37 2024 GMT
Subject: CN=e47f554610c3ff32840f8b0b5ff2f2bd8055e208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:82:2d:f9:77:73:2d:0c:c6:1e:c8:a3:2d:
a1:3b:00:ea:85:cd:98:b1:58:8a:c3:16:a7:ff:02:
16:cc:85:eb:08:66:df:6b:f2:56:23:ec:a3:f1:1d:
fd:e6:30:eb:01:45:70:89:90:37:23:ad:f5:9e:db:
d3:53:99:32:43:73:d8:e2:48:76:d8:57:6f:96:db:
83:00:96:3a:90:79:24:73:a1:53:36:24:1a:42:bf:
63:40:7d:79:e1:20:f0:8e:86:fd:d6:be:d5:b0:1a:
4e:f9:c7:a8:7c:4d:dd:8b:4f:9f:72:b4:33:90:c9:
4d:c0:31:50:1c:22:64:85:26:f3:79:21:03:74:f0:
5c:fb:b0:cd:a0:40:38:a7:01:80:00:31:14:74:4b:
f0:b3:15:8b:f5:87:8a:c1:83:d0:62:c9:28:54:cd:
a9:6f:e0:67:98:9d:d6:06:55:d4:e5:1d:a4:4b:56:
b8:84:96:fe:66:fa:d4:8c:19:56:4b:f0:f5:9e:b7:
6a:93:29:c0:1b:3a:3c:2c:6f:78:89:aa:4f:d1:57:
b7:af:7e:71:52:e0:c7:00:5d:12:fb:ee:84:13:c3:
50:6a:bf:93:6b:59:65:2a:36:51:2b:08:7a:be:b8:
8d:0c:5b:dc:2b:7b:b7:dc:84:3f:b9:f3:1a:ac:d9:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:33:BB:BC:B3:72:A8:EF:67:61:D8:6B:EE:75:5B:3B:BC:B7:43
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e47f554610c3ff32840f8b0b5ff2f2bd8055e208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.84.0/23
201.220.88.0/24
201.220.92.0/24
201.220.94.0/23
Signature Algorithm: sha256WithRSAEncryption
73:59:b0:5d:97:3f:7d:7a:4e:88:75:03:6b:8f:d3:1d:0f:84:
89:96:36:81:7a:cf:af:06:a6:5b:cb:a7:bb:88:e0:8a:75:7b:
21:f7:94:f6:53:14:84:18:77:7e:9f:5f:3c:e5:04:20:a8:67:
a2:21:74:a3:c2:63:e1:c6:16:32:44:0e:f4:ba:ac:57:96:48:
fe:b4:df:c8:34:03:4b:a2:c6:f1:8c:11:06:f2:3f:49:87:ab:
1d:5c:99:c6:8d:ae:4a:ae:25:f9:5d:ec:a2:0d:db:14:b8:51:
15:b5:e1:e5:34:00:f0:08:5a:62:eb:24:8d:06:45:98:29:98:
e2:2d:78:12:d8:c0:6e:c3:91:b0:58:82:ba:f7:a3:90:99:f7:
0f:aa:8e:72:d1:2c:53:85:ee:e1:f0:35:7f:5d:d9:d8:a2:86:
9f:e3:8d:22:4e:55:c5:e0:18:ec:97:51:19:68:92:35:43:5c:
a4:4c:04:6e:f8:d3:68:6c:8e:32:45:b0:d1:14:4c:fa:b6:93:
dc:61:01:1b:47:55:6b:ed:6c:15:40:e0:6b:5b:8b:29:08:c9:
91:b8:ab:96:4b:2d:cd:be:b6:09:35:8c:04:93:4e:a5:bd:8e:
7f:97:3a:48:ef:cb:49:71:f1:ec:14:68:33:38:b1:6d:5a:22:
b4:b8:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org