Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/2f8ed8965d60b543b3cbe54bf31412b3d9e0a947.roa
File: 2f8ed8965d60b543b3cbe54bf31412b3d9e0a947.roa (raw, json)
Hash identifier: 0kzqRbRjgCua5wxdvDsmwV7vxb4M2RnK4a000x5TYu0=
Subject key identifier: 01:3E:2D:7D:EE:90:49:09:74:58:71:5B:3D:56:FF:ED:EA:CC:4A:65
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1AD188
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/2f8ed8965d60b543b3cbe54bf31412b3d9e0a947.roa
Signing time: Fri 26 Aug 2022 16:54:25 +0000
ROA not before: Tue 11 May 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 179.1.5.0/24 maxlen: 24
179.1.11.0/24 maxlen: 24
179.1.13.0/24 maxlen: 24
179.1.69.0/24 maxlen: 24
179.1.91.0/24 maxlen: 24
179.1.89.0/24 maxlen: 24
179.1.70.0/24 maxlen: 24
179.1.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757576 (0x1ad188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: May 11 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=2f8ed8965d60b543b3cbe54bf31412b3d9e0a947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:77:21:c7:b0:63:69:08:7d:c3:1a:34:64:
09:fa:86:26:1f:a6:aa:d8:a4:7f:6b:be:1d:bf:6d:
8a:a0:39:e2:35:8a:aa:48:82:ff:47:8e:97:d6:34:
6e:f2:89:dc:13:09:5c:65:a9:69:56:4a:28:40:00:
e0:1c:51:8d:bd:ec:d1:d3:28:4b:68:97:a4:32:1b:
8e:c5:00:b5:60:30:00:81:0a:cc:88:89:bb:2e:be:
36:65:c1:fe:72:20:03:7b:72:db:88:ae:87:e2:d8:
f1:94:0b:99:fb:e2:54:63:b6:7d:d3:0b:13:bd:ec:
cd:e0:df:3a:cb:e9:25:f8:ee:4f:5d:25:a5:34:e6:
03:be:de:fc:91:78:f7:06:67:c4:57:18:6b:f6:2c:
6d:3c:5d:10:76:0d:fc:96:41:c6:fe:6a:52:29:4d:
4d:d3:2a:c8:6e:56:a0:3f:2b:3d:07:9e:f9:44:24:
d9:fd:61:a6:ed:5e:8e:7a:81:a5:f7:6c:26:d4:20:
b1:66:d0:6d:6c:3a:c8:e6:e8:ed:b4:a6:b1:15:4a:
de:38:22:9f:a3:fa:72:0b:2e:37:97:ce:d4:09:0d:
0d:6b:34:27:14:ca:3d:6a:a9:87:b6:77:3a:9a:86:
02:8e:f1:04:93:41:d0:8a:cd:c0:51:3c:d7:84:dd:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:2D:7D:EE:90:49:09:74:58:71:5B:3D:56:FF:ED:EA:CC:4A:65
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/2f8ed8965d60b543b3cbe54bf31412b3d9e0a947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.5.0/24
179.1.11.0/24
179.1.13.0/24
179.1.69.0-179.1.70.255
179.1.89.0/24
179.1.91.0/24
179.1.132.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d1:14:0b:38:cc:8b:fd:76:42:8d:bc:ff:e4:21:29:4e:54:
93:df:53:b5:bd:46:2d:b1:34:d0:d8:45:27:90:4b:77:9a:69:
2d:73:8b:66:59:a2:32:e7:7f:2f:f3:0e:90:b1:88:c6:05:e1:
30:76:f0:fa:3e:92:f6:c3:78:09:45:dc:09:37:57:56:2c:e5:
4c:aa:dd:3f:2a:6c:1f:42:d3:ca:d8:c6:62:94:a7:75:eb:be:
70:9c:ea:ec:ee:0b:2b:5e:06:70:96:98:a7:fc:9c:44:c2:eb:
22:68:4b:20:d8:18:8a:4a:b6:2a:78:54:2e:51:15:47:d5:df:
6d:95:93:08:93:97:f2:ef:2b:50:e4:56:96:52:3e:47:5c:e2:
c0:ca:ad:96:7a:66:69:48:95:58:df:3d:a4:23:05:91:65:a9:
09:94:91:09:79:43:9a:50:fb:1a:53:6a:e0:20:d1:36:aa:ab:
a1:dc:af:85:87:ff:85:20:b5:89:71:e9:51:49:d6:71:f8:49:
18:08:78:5b:56:60:81:b5:c9:00:0c:bd:40:8a:1a:4d:f2:e6:
76:0f:a6:a7:e7:05:46:c3:92:ee:78:0d:06:9f:e3:6b:47:85:
ff:54:e1:dc:47:2a:49:45:ad:c7:17:c2:b5:40:cf:cf:af:91:
41:f3:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org