Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/84ddf50cf69680bff08552c6b7b882e80191a305.roa
File: 84ddf50cf69680bff08552c6b7b882e80191a305.roa (raw, json)
Hash identifier: KsNsu9d3pKEc73V1kgaH054XgEugfu3b6rcmAPG12y0=
Subject key identifier: B7:55:C2:66:2D:F8:C5:BD:82:73:23:49:CC:65:AA:F7:27:66:6C:03
Certificate issuer: /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial: 11F6EF
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/84ddf50cf69680bff08552c6b7b882e80191a305.roa
Signing time: Mon 06 Dec 2021 07:30:00 +0000
ROA not before: Mon 06 Dec 2021 07:30:00 +0000
ROA not after: Wed 06 Dec 2023 07:30:00 +0000
asID: 271835
IP address blocks: 201.218.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177327 (0x11f6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Validity
Not Before: Dec 6 07:30:00 2021 GMT
Not After : Dec 6 07:30:00 2023 GMT
Subject: CN=84ddf50cf69680bff08552c6b7b882e80191a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:4d:0f:82:6d:9c:f7:d6:3a:63:14:94:1c:
e6:77:59:16:98:d7:52:0a:67:08:73:a3:88:58:41:
3c:c0:72:3d:0c:89:f0:96:b8:58:98:78:f8:36:2a:
39:80:f4:3a:05:a7:d2:f8:cc:31:f5:d8:1c:3a:94:
8f:24:a9:67:cf:52:73:e8:ec:32:e8:30:c3:03:86:
67:ee:25:6f:ea:4d:50:65:da:b1:da:70:f9:57:0e:
e7:90:c6:15:7a:b1:ec:f8:00:fe:a0:fa:56:2d:51:
c4:31:f5:ef:f6:b6:c7:5a:43:ca:71:1c:af:d3:6f:
e5:72:5e:52:51:41:ac:0a:e6:84:c1:2c:3f:bb:d3:
ba:32:f7:b5:3f:f6:60:47:6d:61:3b:b1:32:69:4a:
d2:ea:8e:ce:9f:31:10:a8:c2:50:1f:b7:d2:63:75:
48:4e:05:64:0f:d7:d0:3a:6d:76:32:1b:04:24:05:
69:d6:89:71:4b:84:16:4f:05:3c:42:5f:64:b3:b8:
63:05:2e:fd:7c:24:74:fe:ac:eb:04:1d:ad:46:3d:
9c:6f:80:66:3f:98:ba:7e:ce:59:b2:69:1a:aa:1f:
cc:2c:08:2e:cd:5b:ab:d2:32:70:d5:e7:36:1a:9d:
8c:28:19:d6:c4:57:86:e2:c6:47:f8:96:ea:78:c7:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:C2:66:2D:F8:C5:BD:82:73:23:49:CC:65:AA:F7:27:66:6C:03
X509v3 Authority Key Identifier:
keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/84ddf50cf69680bff08552c6b7b882e80191a305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d3:cb:25:03:24:18:01:48:c4:a1:e5:16:f6:9a:4f:a0:e4:
69:c9:cb:b4:fa:a9:ea:ff:2e:9f:15:9f:a2:58:8c:a8:0c:42:
cd:07:7f:a0:3d:00:28:76:99:4c:af:f8:f9:6c:ed:d4:ec:81:
95:26:46:32:75:d8:fb:0a:90:18:19:08:aa:b1:0e:b8:6e:4e:
a1:4d:73:dd:13:3b:e9:65:93:cf:db:0f:a9:c6:07:81:e3:27:
6f:0b:56:85:f1:51:56:4e:1e:73:37:60:67:d6:36:40:b3:27:
8e:d8:dd:cd:77:ba:83:e9:26:89:97:85:40:4d:fc:25:f0:a6:
85:b2:bf:ae:ad:f1:18:52:86:40:5b:a4:67:d6:9c:63:41:e3:
86:e3:cc:f2:2a:f8:fe:66:48:23:33:8d:18:5e:0a:28:9f:36:
6a:5a:b8:0c:ad:10:50:43:60:7b:2c:7e:93:9e:ca:63:01:dd:
7e:1e:ad:30:25:44:12:85:32:35:84:d1:f5:d9:f2:b1:29:9b:
ff:01:da:3b:a1:df:b9:3b:0d:cc:48:f6:a7:2e:5e:ba:78:d1:
22:91:b7:88:4d:8f:e9:76:4d:42:51:66:c1:5e:48:c4:30:46:
97:80:93:f0:ee:f6:5b:60:30:e6:4d:8b:f9:d3:86:d5:50:f6:
be:90:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 08:18:14 2023 by rpki-client on console-ams.rpki-client.org