Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/b8b7509a3502e237271d81a44d2a61e62b07a0eb.roa
File: b8b7509a3502e237271d81a44d2a61e62b07a0eb.roa (raw, json)
Hash identifier: EEiElzO2OJNj75OLRqsUGnrK8ICOyenaaCBNZ8X5oSU=
Subject key identifier: 7D:8C:F0:3B:61:C5:B9:4A:A9:B3:9E:DA:1A:9E:D9:86:03:F8:47:44
Certificate issuer: /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial: 23B2B7
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/b8b7509a3502e237271d81a44d2a61e62b07a0eb.roa
Signing time: Mon 25 Sep 2023 15:28:13 +0000
ROA not before: Sun 24 Sep 2023 15:28:11 +0000
ROA not after: Thu 25 Sep 2025 15:28:11 +0000
asID: 27892
IP address blocks: 150.189.72.0/23 maxlen: 23
150.185.192.0/24 maxlen: 24
150.185.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339511 (0x23b2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
Validity
Not Before: Sep 24 15:28:11 2023 GMT
Not After : Sep 25 15:28:11 2025 GMT
Subject: CN=b8b7509a3502e237271d81a44d2a61e62b07a0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:07:9d:4d:0a:22:95:42:e2:e9:03:00:36:
55:86:92:a1:87:05:94:3e:9d:1b:d4:d1:e2:10:b9:
43:6e:04:2d:68:85:2c:7c:55:54:77:2e:67:73:a6:
25:16:95:65:43:6b:53:54:73:72:b0:a0:df:6d:46:
77:29:1d:80:25:0d:be:bb:34:35:27:d8:99:37:aa:
7c:8b:4a:e4:b6:56:0a:45:89:da:60:e4:1e:41:43:
f7:37:af:50:56:1e:29:af:1b:86:a9:4f:90:05:33:
a6:9c:7e:04:9c:d6:d7:a2:0c:64:ff:53:e7:55:a0:
a1:34:68:62:3d:45:62:ea:ee:9d:2f:c4:ee:ed:d2:
e5:51:3f:74:e2:fd:3d:81:d9:a8:33:ed:74:b0:6b:
01:ce:24:07:cf:b0:52:cd:bb:ea:ce:96:2a:cb:e2:
91:84:21:d9:78:96:93:68:99:7a:cf:9f:31:6e:c2:
da:19:b1:fc:7d:78:d0:9c:c0:c0:92:b4:49:c3:1f:
cc:df:79:2c:0e:ba:7f:48:c8:27:a7:b3:94:06:59:
48:28:a2:f6:78:d3:dd:30:77:1e:c6:55:98:0b:67:
67:48:49:8b:c3:b0:62:4e:dd:6c:09:76:39:61:c3:
6a:00:28:c5:73:1b:9f:7a:7f:13:90:11:7f:83:fa:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8C:F0:3B:61:C5:B9:4A:A9:B3:9E:DA:1A:9E:D9:86:03:F8:47:44
X509v3 Authority Key Identifier:
keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/b8b7509a3502e237271d81a44d2a61e62b07a0eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.185.192.0/24
150.185.222.0/24
150.189.72.0/23
Signature Algorithm: sha256WithRSAEncryption
03:c6:16:3f:6e:a9:49:d6:16:a1:86:c1:70:9b:14:a6:8b:d4:
fd:14:86:38:c5:4a:99:ca:b3:64:6d:1d:c4:d4:38:d9:03:21:
b3:50:5c:d2:99:b4:88:82:9a:3a:82:f4:80:53:7c:41:ef:c5:
58:94:b2:23:4d:25:9b:bb:b5:9b:e4:12:65:21:d9:70:25:14:
43:29:02:1d:28:fb:b6:b3:c3:b7:b9:b5:54:e9:91:7a:c3:1d:
55:fa:84:5e:39:41:64:b4:25:25:f6:62:d5:2d:ec:c2:cf:30:
e8:f9:4c:30:a0:df:4c:a3:da:f4:a7:59:ad:7e:e7:e9:3e:58:
10:7c:57:b6:e9:2e:4f:8e:ab:d4:ed:d6:ed:c3:5e:74:f5:d2:
a6:47:9d:13:c7:41:3a:6b:3f:3e:3c:6d:5d:8f:17:38:78:8b:
63:74:da:56:c5:e5:54:e6:8c:47:b5:69:14:a7:dd:9a:0a:38:
af:8b:07:c9:c3:ee:ea:1a:9b:28:14:45:12:4d:21:73:36:76:
e1:e6:37:86:bd:73:0e:e8:da:b9:fb:41:64:58:ef:c3:57:21:
a3:0b:97:67:e1:4f:bf:b1:fe:8e:03:68:21:7b:98:e9:a0:b6:
95:57:47:05:d7:88:74:6c:3f:7f:97:94:55:d4:58:c3:91:04:
8e:0b:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 17:23:35 2023 by rpki-client on console-ams.rpki-client.org