Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/8b8e003d845062402c1fb51cecc6459177d680c2.roa
File: 8b8e003d845062402c1fb51cecc6459177d680c2.roa (raw, json)
Hash identifier: pl6thRi5d7PpGcdI4JTAEgF2obcLs0+V3e6OD58YL2o=
Subject key identifier: 19:82:D8:D2:53:26:D3:E2:3C:C4:79:E5:3E:25:B4:BE:6A:41:5E:89
Certificate issuer: /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial: 1F9018
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/8b8e003d845062402c1fb51cecc6459177d680c2.roa
Signing time: Fri 24 Mar 2023 08:30:06 +0000
ROA not before: Thu 23 Mar 2023 08:30:06 +0000
ROA not after: Sat 22 Mar 2025 08:30:06 +0000
asID: 264683
IP address blocks: 168.227.24.0/24 maxlen: 24
168.227.25.0/24 maxlen: 24
168.227.26.0/24 maxlen: 24
168.227.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068504 (0x1f9018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Validity
Not Before: Mar 23 08:30:06 2023 GMT
Not After : Mar 22 08:30:06 2025 GMT
Subject: CN=8b8e003d845062402c1fb51cecc6459177d680c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:d6:db:c6:64:d6:fb:7a:db:57:5d:c1:7d:
90:77:9e:63:2b:5e:d7:c4:5b:85:0b:c8:b5:45:b5:
cb:46:ea:3f:9a:a9:f9:2d:14:89:82:2e:c1:74:ef:
f1:49:50:c1:74:3a:67:f7:1b:9c:2a:56:9a:b5:60:
af:35:b1:d5:16:69:8f:b3:58:1f:00:5e:96:58:a1:
85:2b:b9:41:16:9c:1c:88:7b:f9:df:56:cf:54:89:
b8:db:70:c3:ea:eb:d9:36:46:a8:f9:7d:73:45:6b:
79:9e:32:ea:9e:41:97:5f:c1:a4:93:d4:fd:3a:e8:
aa:78:d1:78:0c:7b:89:05:da:3f:71:e7:ba:6e:dc:
1f:b0:9d:b9:52:09:95:5f:55:97:3f:79:1f:72:aa:
bc:77:69:20:a8:eb:94:a7:58:bc:71:34:7e:2f:e2:
d8:ca:c8:cd:0b:d6:ed:c6:c5:4b:d3:6a:e8:30:96:
79:69:35:64:8d:de:5d:f6:18:22:4c:04:95:e3:14:
1e:fd:81:5b:3b:60:f3:29:cc:b1:fc:d0:e7:db:17:
3e:cd:b0:60:aa:77:bf:6b:b2:1f:90:04:f0:39:6f:
d8:9f:de:f6:88:d0:f6:32:c0:22:1a:71:7b:6d:ca:
89:a0:d5:2a:29:b6:de:e9:93:07:bf:28:fe:26:e7:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:D8:D2:53:26:D3:E2:3C:C4:79:E5:3E:25:B4:BE:6A:41:5E:89
X509v3 Authority Key Identifier:
keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/8b8e003d845062402c1fb51cecc6459177d680c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
10:52:9f:c7:dc:01:60:f5:a0:39:4b:8e:70:8b:2d:2e:71:7b:
5c:12:fd:c3:5a:fa:f2:42:37:3e:7d:11:06:25:07:85:4b:35:
e6:c1:9b:87:03:96:b7:b2:bf:84:ee:a9:fa:ec:64:fe:88:8a:
66:ab:54:a3:39:91:60:97:96:db:e8:f8:30:9f:1f:eb:92:a4:
23:85:72:cc:de:cc:96:7f:89:98:47:b3:2f:ea:8a:44:fb:e7:
a8:23:18:e0:67:de:37:fd:41:2d:f6:46:73:22:41:89:c5:d0:
2c:e7:6f:86:ae:f4:38:a5:37:18:c5:60:77:0d:39:2b:e0:c3:
42:e0:a8:a6:4a:67:ec:87:f7:e8:33:03:30:da:ed:ef:38:b4:
13:4d:11:23:51:6f:a0:bd:f2:76:8b:a5:1c:c0:1d:61:8c:88:
52:e1:60:30:d8:13:5e:de:a9:fc:19:bf:4c:25:98:50:d0:b3:
fe:97:6a:6c:24:e4:2e:21:19:f1:a2:c7:40:b4:0d:c0:16:d0:
73:bf:65:80:6d:e8:e8:8f:5c:00:76:8a:fe:d0:9c:48:3a:75:
dd:db:42:67:43:12:d4:06:44:5a:ac:e1:86:4c:88:ea:eb:dc:
5e:cd:1d:9c:e7:7a:6d:2f:72:19:ac:fe:86:3c:b3:f2:f0:de:
66:31:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org