Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/e1ef30946283881c7f5d62de3cfadcaa590039cd.roa
File: e1ef30946283881c7f5d62de3cfadcaa590039cd.roa (raw, json)
Hash identifier: N6kt1K4zivaG8UVNdS1OEFTVJLxj8qqiRMgL64XdIjA=
Subject key identifier: 9A:2E:7B:BA:45:08:18:09:19:7A:44:E8:94:90:33:48:5B:6E:16:A6
Certificate issuer: /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial: 0D7B2B
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/e1ef30946283881c7f5d62de3cfadcaa590039cd.roa
Signing time: Thu 08 Apr 2021 12:35:36 +0000
ROA not before: Thu 08 Apr 2021 03:00:00 +0000
ROA not after: Sat 08 Apr 2023 03:00:00 +0000
asID: 21826
IP address blocks: 167.249.32.0/22 maxlen: 24
170.84.136.0/22 maxlen: 22
200.229.152.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883499 (0xd7b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Validity
Not Before: Apr 8 03:00:00 2021 GMT
Not After : Apr 8 03:00:00 2023 GMT
Subject: CN=e1ef30946283881c7f5d62de3cfadcaa590039cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:41:0d:7e:d2:92:52:d6:58:cb:9d:4f:50:
be:6f:a2:e2:07:2d:1c:cb:d6:d4:38:2b:fc:d8:32:
93:08:fc:bf:05:63:54:66:ea:3c:69:60:26:4b:f9:
39:2d:06:ab:71:44:ac:9a:ed:66:ca:78:eb:90:bc:
5d:b0:b6:60:76:4b:dc:fe:2f:20:af:72:bd:f0:0f:
29:82:ff:48:b0:fc:0b:8d:f6:85:08:61:f8:4b:fd:
81:3e:fb:9d:33:5a:c6:a4:46:b6:d8:2e:8a:88:dd:
65:04:48:eb:c4:3b:6b:2a:ba:e6:13:f2:fb:0c:00:
12:a3:d5:ab:94:54:9c:83:1e:e8:5c:d9:15:23:83:
ea:9d:17:d2:14:a6:5f:20:de:34:32:58:cf:19:ef:
f4:c3:5c:7a:53:1b:6b:f9:31:f4:35:d7:41:45:9d:
91:3e:ab:df:b5:04:05:ea:65:5a:79:c1:7b:e3:1f:
08:dd:9e:4f:d6:7f:b0:86:58:ce:5b:ad:20:7e:17:
65:78:ff:33:0f:5b:6a:6e:d4:c5:7f:2f:4a:01:ae:
9b:0d:0d:24:42:e4:02:37:cb:e7:ed:e7:b7:e7:97:
a5:a3:e5:62:6e:49:54:9d:2e:a3:de:81:98:d7:86:
0b:90:dd:3a:db:ee:43:23:de:d3:fb:21:a1:b9:6d:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:7B:BA:45:08:18:09:19:7A:44:E8:94:90:33:48:5B:6E:16:A6
X509v3 Authority Key Identifier:
keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/e1ef30946283881c7f5d62de3cfadcaa590039cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.32.0/22
170.84.136.0/22
200.229.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:41:2b:21:f6:f5:1e:87:0e:9b:40:55:3a:9c:f8:4c:d0:5f:
15:94:f8:9e:93:bd:c8:59:bb:70:82:03:30:a4:de:7b:bb:70:
de:82:40:6f:b8:42:8b:d4:92:a8:22:94:2b:5e:53:a3:f1:fe:
dd:70:ab:dd:bb:86:37:a7:11:d4:05:e6:07:8f:c6:b5:e1:25:
82:ed:bd:02:31:a5:bc:f4:9a:38:61:6c:ed:62:72:f4:a8:c2:
69:d0:22:53:c8:e8:92:b0:65:2d:1e:34:24:3a:78:09:cb:4f:
02:90:14:d9:ab:f6:f2:f5:0b:8f:05:e5:d6:85:f8:d5:d7:66:
57:bc:bb:cd:e9:c4:be:97:d6:30:5b:54:68:84:26:5d:2b:d6:
87:63:b6:a7:d5:de:7e:ce:54:39:bc:77:9f:f0:b3:95:02:8c:
ab:c9:b6:0e:45:53:ee:48:9e:d9:58:79:d4:67:ee:ad:2d:b3:
7f:0d:20:72:36:86:ab:cc:cd:66:35:5d:08:24:d8:62:dd:cd:
fc:94:75:3f:f4:57:c6:81:2a:20:63:80:7e:31:2e:be:68:eb:
ee:4b:b6:7e:10:76:05:d1:b8:64:78:5d:89:a3:37:bf:30:b9:
9d:ab:c3:4d:aa:93:c7:46:4e:0a:e8:a4:67:b8:19:ef:b7:4b:
69:96:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org