Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa
File: f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa (raw, json)
Hash identifier: hvuPC30cqvlR1SDi71Y6+aPEsIZUYl0RCZsd3xKAe7M=
Subject key identifier: CF:FE:95:0D:62:BF:1A:BF:91:47:AF:55:F2:00:BD:2F:53:A7:69:FB
Certificate issuer: /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial: 0DABA6
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa
Signing time: Wed 24 Mar 2021 22:48:54 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 264683
IP address blocks: 168.227.24.0/24 maxlen: 24
168.227.25.0/24 maxlen: 24
168.227.26.0/24 maxlen: 24
168.227.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895910 (0xdaba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=f4f4be58acc88ba4e0704e59fbb3c5adea98d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:f9:86:81:12:b5:6f:48:73:06:7f:2a:2b:
f2:09:15:e8:05:1e:08:46:6d:a5:31:d5:1c:81:51:
42:5a:8d:ac:85:72:f5:7f:d8:18:1e:9c:d9:be:7a:
e5:1a:b4:fd:c6:9d:77:08:0c:6b:00:ab:39:91:48:
c1:c5:e3:7d:62:0e:54:bf:b6:4e:70:74:30:ad:90:
39:cd:7a:2e:3c:5f:81:57:4a:e4:63:af:d6:48:49:
05:a7:e0:2a:85:aa:ee:c0:92:1c:97:6d:95:a0:af:
9a:a4:b5:de:29:45:2c:53:1b:5f:b8:e6:c1:45:39:
6c:46:a5:fb:ab:26:1a:35:7c:10:a2:bd:a1:ae:95:
c1:c3:48:f1:c0:d8:6c:af:c8:b8:8b:c8:5a:d7:8e:
8f:92:3f:83:1e:ac:3c:76:da:20:0a:37:8d:c4:08:
d9:80:ed:b1:a8:f4:03:e5:d8:99:08:37:b3:28:da:
53:9f:7f:33:8f:85:6a:43:e2:ab:f8:4b:95:16:8e:
ae:35:89:2f:3a:6b:56:ba:6d:f2:41:0a:fc:9a:86:
f6:e7:28:d9:c4:9a:28:01:44:55:42:e9:76:da:9d:
42:79:19:d7:80:b5:e3:32:2a:e6:66:9c:e1:c2:7d:
ba:73:c8:3b:ee:b5:39:f6:aa:88:19:a4:b9:f1:ea:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:95:0D:62:BF:1A:BF:91:47:AF:55:F2:00:BD:2F:53:A7:69:FB
X509v3 Authority Key Identifier:
keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:4c:77:5a:38:c9:0b:e0:94:cd:3e:72:54:43:88:27:a5:40:
2a:e6:d5:a3:0c:f7:fd:e3:b2:c1:de:93:a8:63:9f:73:70:e9:
5f:b5:8e:4f:7f:f5:0f:75:6a:91:b9:fa:a3:77:7d:4c:5b:bd:
84:73:83:3d:58:17:1a:1c:ad:a1:39:44:b2:2d:49:33:fe:ba:
50:c1:55:74:d4:7e:17:7b:d1:d9:bc:29:a5:f3:22:5d:15:85:
e9:0b:b0:5f:9c:6d:17:bd:90:30:e6:bc:93:da:5c:ee:40:e5:
47:7e:b5:b7:2f:b0:63:e1:f9:ff:5b:24:97:df:a4:ce:98:f7:
19:05:60:0d:6a:67:a3:75:42:18:59:79:a7:cd:1e:f8:81:51:
39:58:45:f5:9a:f1:9c:38:58:ef:61:7d:91:c6:1d:34:7c:eb:
78:fb:8c:8b:e5:82:9f:28:81:4e:44:0f:b2:22:0d:96:68:e5:
a0:7a:22:35:02:a7:47:42:1e:2f:56:8d:94:2d:af:66:17:fd:
94:09:07:9f:4a:b4:8d:a5:b9:e6:09:49:c8:55:32:e4:87:d3:
31:a3:ee:2e:9d:cf:fd:9e:4f:4e:0d:07:3d:ec:8d:c3:c0:c0:
b4:db:dc:b3:20:62:f1:62:ed:ef:42:7b:2a:ad:a4:77:88:cd:
9c:c5:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org