Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/ffc593f865e3b05796bc13e3b1d24a5d34e3952e.roa
File: ffc593f865e3b05796bc13e3b1d24a5d34e3952e.roa (raw, json)
Hash identifier: EqXsU6xtDAweNRr8cr0NLlbIcCZivxJ47dn0fu/IOMk=
Subject key identifier: 7A:25:5C:E2:F4:77:2C:3A:4C:3F:A5:13:E9:25:78:C2:8C:33:78:28
Certificate issuer: /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial: 54F2
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/ffc593f865e3b05796bc13e3b1d24a5d34e3952e.roa
Signing time: Mon 17 Oct 2022 20:17:36 +0000
ROA not before: Sat 08 Oct 2022 14:19:50 +0000
ROA not after: Fri 11 Oct 2024 14:19:50 +0000
asID: 28415
IP address blocks: 189.201.224.0/24 maxlen: 24
189.201.225.0/24 maxlen: 24
189.201.227.0/24 maxlen: 24
189.201.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21746 (0x54f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
Validity
Not Before: Oct 8 14:19:50 2022 GMT
Not After : Oct 11 14:19:50 2024 GMT
Subject: CN=ffc593f865e3b05796bc13e3b1d24a5d34e3952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:b5:1a:de:2f:45:69:7a:9c:7a:bb:a0:62:
c3:ee:3f:2c:8e:ea:0a:f3:61:79:f6:0e:16:66:5d:
3f:26:e1:91:1f:03:06:8f:5e:65:cf:5d:f2:19:f4:
94:db:d6:de:1b:c0:7a:73:d1:6c:04:26:50:ae:ee:
d2:1f:ec:1e:ca:0b:c0:66:c1:e4:d5:6a:97:e4:37:
55:5d:76:41:d6:cf:20:f7:70:42:d1:21:32:58:6c:
4b:63:b1:a3:cc:40:b8:e8:87:11:32:05:30:67:94:
15:e6:62:33:67:db:a6:69:a4:ba:42:43:0e:f6:a7:
ce:58:3a:73:ee:3f:fc:b4:7a:ac:32:1d:dc:25:5b:
19:d7:9c:2a:0e:09:bc:c5:21:d4:6d:70:82:75:f7:
bb:7a:49:38:6e:b7:71:be:a1:66:70:c4:29:6a:63:
a0:73:76:a8:70:43:4f:1c:8a:e9:00:a5:51:5d:1a:
64:db:6d:0d:15:1c:2d:64:c2:de:74:cd:f1:88:a2:
43:cd:38:c9:64:9a:53:59:d5:6f:0e:ab:d3:a3:da:
d4:e8:d8:2a:bc:19:0c:38:07:23:ba:86:d8:2c:dd:
a6:ec:4d:a2:f4:fd:41:71:ca:32:23:95:32:dc:32:
b3:b1:e5:38:bb:fb:f1:17:92:44:14:48:a0:32:f2:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:5C:E2:F4:77:2C:3A:4C:3F:A5:13:E9:25:78:C2:8C:33:78:28
X509v3 Authority Key Identifier:
keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/ffc593f865e3b05796bc13e3b1d24a5d34e3952e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.224.0/23
189.201.227.0/24
189.201.231.0/24
Signature Algorithm: sha256WithRSAEncryption
72:31:a1:aa:9d:37:57:18:b3:ed:0b:c8:a4:88:8a:b2:34:5b:
49:8f:db:cf:f2:5c:30:9c:d0:e9:2b:ef:cf:e6:78:35:7e:1d:
ba:25:57:68:f0:dc:cf:f2:9e:e0:fe:a5:a3:ad:64:90:08:d6:
df:7c:34:5e:da:d8:e6:38:93:00:30:b2:f3:73:da:39:87:8c:
a2:d2:cf:3b:bd:f6:60:3d:b2:70:8a:47:5e:d6:6e:24:82:6d:
3f:54:9c:8c:0b:ae:e2:90:39:ef:f0:f0:47:54:53:a8:b5:b8:
b7:f3:44:bc:cb:31:a8:d2:13:0b:ef:b4:5e:0d:a2:d0:42:e6:
c9:b1:f2:e4:f2:47:89:10:b9:1c:c8:ca:ed:4a:79:33:09:2d:
01:e8:57:24:c9:7d:ee:fa:ec:93:d5:4c:ed:e8:a5:b9:3d:9a:
e6:f2:b7:58:46:00:71:f5:47:a2:35:6e:aa:ad:0f:52:49:45:
87:54:d6:6a:e5:89:75:21:a8:d0:ab:d7:ea:40:83:19:51:ae:
a2:76:9c:e9:02:fb:cb:c0:1c:96:77:c9:6f:1f:47:98:9b:a4:
70:cc:06:7a:46:29:b9:2c:94:8d:44:60:c1:ff:33:ef:c2:50:
d5:4b:2d:c6:1b:8e:23:43:1e:63:a3:7d:83:bb:c2:1c:71:d2:
34:34:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 22:04:25 2023 by rpki-client on console-ams.rpki-client.org