Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/95b74daf3ca4f0c393b72dee264ff0449e00d487.roa
File: 95b74daf3ca4f0c393b72dee264ff0449e00d487.roa (raw, json)
Hash identifier: N/NlTTmu2OwIjz8nbRpetW9TBLCYsEKhlzYe8nHPGX0=
Subject key identifier: 2C:D2:D9:79:DE:49:6B:42:08:28:06:CF:12:BD:FF:1F:51:13:89:12
Certificate issuer: /CN=d0615608a5f64a875e5be0a66c710b668ecb0886
Certificate serial: 12206A
Authority key identifier: C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/95b74daf3ca4f0c393b72dee264ff0449e00d487.roa
Signing time: Mon 10 Apr 2023 08:30:00 +0000
ROA not before: Sun 09 Apr 2023 08:30:00 +0000
ROA not after: Tue 08 Apr 2025 08:30:00 +0000
asID: 28398
IP address blocks: 164.163.188.0/22 maxlen: 22
164.163.188.0/24 maxlen: 24
164.163.189.0/24 maxlen: 24
164.163.190.0/24 maxlen: 24
164.163.191.0/24 maxlen: 24
2806:2ed::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 21:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187946 (0x12206a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0615608a5f64a875e5be0a66c710b668ecb0886
Validity
Not Before: Apr 9 08:30:00 2023 GMT
Not After : Apr 8 08:30:00 2025 GMT
Subject: CN=95b74daf3ca4f0c393b72dee264ff0449e00d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:96:7a:0d:2b:58:c3:fd:3c:b2:03:71:8e:
1e:f6:d1:e8:41:15:d0:34:cb:95:2c:be:fe:6b:b9:
f5:0d:18:bf:3b:51:e0:bb:e6:43:60:1a:3d:f0:52:
bf:cd:5f:ef:8e:2a:ec:6f:21:6e:02:22:fb:5c:0a:
b9:d0:1e:90:37:17:51:5c:7c:53:3d:0d:3d:34:e2:
19:9f:96:64:85:be:43:1d:d1:2a:50:23:7e:d4:8d:
fa:e5:0b:3c:ce:6c:56:3d:29:54:9a:ab:3c:8b:43:
13:45:d4:30:45:26:10:ba:af:6f:fb:71:b2:27:c5:
25:57:98:10:34:2f:07:f2:37:59:11:ca:4e:86:d2:
2a:6e:f6:45:2c:5f:18:87:a5:9f:77:72:34:a3:60:
02:cc:24:cd:5d:d6:5f:6a:fd:b8:38:db:f4:37:41:
42:e3:2b:ad:f8:ff:19:da:e6:f4:ec:b1:a3:dd:51:
b4:dd:39:20:7c:d5:dd:39:ea:9f:38:27:b3:e3:87:
16:22:5e:14:38:b6:f9:30:36:a5:70:00:b7:10:14:
71:f9:29:e2:fd:02:46:9b:bd:5b:33:61:14:26:79:
89:72:be:1c:d2:8d:24:7b:10:10:db:8c:6d:1d:e9:
41:55:9b:cf:03:1f:a2:4f:4f:bf:d6:fb:ec:57:db:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:D9:79:DE:49:6B:42:08:28:06:CF:12:BD:FF:1F:51:13:89:12
X509v3 Authority Key Identifier:
keyid:C3:2B:D5:97:7D:9A:F1:4D:F2:53:CB:EB:AC:C7:D2:22:2A:41:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0615608a5f64a875e5be0a66c710b668ecb0886.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/95b74daf3ca4f0c393b72dee264ff0449e00d487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b3eca34-7e5b-46b0-b80b-5f745a510d62/d0615608a5f64a875e5be0a66c710b668ecb0886.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.188.0/22
IPv6:
2806:2ed::/32
Signature Algorithm: sha256WithRSAEncryption
7c:03:e3:4c:02:af:f2:a1:f1:01:1b:c0:46:18:5d:87:51:e9:
e8:57:fd:7f:65:cb:66:a1:8c:91:9a:8e:de:69:95:6f:6f:cf:
5f:b6:24:62:39:45:d9:0f:5c:76:55:43:08:89:e9:df:12:ac:
8e:7e:f1:5f:dd:6b:77:cd:82:95:cf:39:7d:54:98:8e:5c:3f:
7c:4a:45:f1:d5:4d:14:c3:46:61:40:44:59:2a:be:d9:8e:86:
a8:33:8d:99:97:d8:48:49:f3:eb:55:a9:2d:9e:16:a0:3a:a9:
a7:bd:df:54:82:95:4f:d5:52:5c:bd:2d:7c:3f:5f:69:bd:2b:
a7:15:81:1d:df:51:62:8f:82:e0:ac:f3:fa:53:68:52:2c:a4:
c5:d4:35:5d:e0:d5:50:a4:ca:d5:6b:c9:67:94:31:7f:61:28:
4c:89:1b:43:b8:b6:39:29:3e:50:3e:48:3a:bc:f3:d6:c3:51:
93:76:40:29:92:4d:19:a2:2a:3c:3f:82:a4:d4:a9:ef:6d:3a:
5f:d6:11:f0:8a:3f:e0:44:51:5a:1c:0a:68:b8:3a:00:c4:42:
2e:c7:d9:cf:22:bf:56:75:6b:f4:77:bd:85:96:f2:87:86:1b:
89:0d:5f:5e:b3:00:33:37:c4:e1:e7:86:7e:8e:9d:da:d0:59:
08:a9:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:16:36 2024 by rpki-client on console-fra.rpki-client.org