Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9bcc7ecebe376ebccd1a747d0cbb1d2196c0e23c.roa
File: 9bcc7ecebe376ebccd1a747d0cbb1d2196c0e23c.roa (raw, json)
Hash identifier: 7d8B9PYXJV8Puq5gsvbwzE0hom7GTJrvMFk+M+Fv3kg=
Subject key identifier: 83:CA:10:EB:7C:79:44:E9:3D:62:99:0B:22:FC:40:1E:C1:C2:5E:E9
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1B86B8
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9bcc7ecebe376ebccd1a747d0cbb1d2196c0e23c.roa
Signing time: Tue 06 Sep 2022 21:47:21 +0000
ROA not before: Tue 11 May 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 179.1.0.0/21 maxlen: 24
179.1.8.0/21 maxlen: 24
179.1.16.0/20 maxlen: 24
179.1.32.0/20 maxlen: 24
179.1.48.0/20 maxlen: 24
179.1.69.0/24 maxlen: 24
179.1.91.0/24 maxlen: 24
179.1.89.0/24 maxlen: 24
179.1.70.0/24 maxlen: 24
179.1.96.0/20 maxlen: 24
179.1.128.0/20 maxlen: 24
179.1.129.0/24 maxlen: 24
179.1.130.0/24 maxlen: 24
179.1.131.0/24 maxlen: 24
179.1.132.0/24 maxlen: 24
179.1.133.0/24 maxlen: 24
179.1.134.0/24 maxlen: 24
179.1.135.0/24 maxlen: 24
179.1.192.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803960 (0x1b86b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: May 11 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=9bcc7ecebe376ebccd1a747d0cbb1d2196c0e23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:b1:a3:77:e2:84:70:af:0c:f3:f1:db:49:
d4:3d:d5:a3:11:62:9e:84:87:82:65:fd:a4:77:7a:
6f:59:52:2e:2e:62:78:77:bc:53:e3:14:87:5a:b8:
f7:29:1a:1d:af:df:f4:54:62:20:e7:83:c2:2a:27:
c0:22:1b:a7:6f:08:4b:97:95:fa:e3:00:a1:4f:7a:
9d:79:9c:e7:8b:22:00:73:2d:b0:9e:50:07:70:88:
3b:fa:60:dc:41:28:53:2e:82:24:52:84:fd:26:2a:
ad:eb:a7:3d:62:32:9e:ef:87:70:49:84:8f:f8:51:
ad:d4:96:d7:42:66:ad:28:ac:c7:5a:3d:2b:d2:f2:
a4:d3:71:f1:88:3b:7c:f2:a4:29:95:8a:0d:fb:97:
52:38:52:d8:de:a4:6b:81:d0:4a:74:35:7d:78:ca:
06:9b:50:38:e5:0a:6c:be:ed:1c:e6:d8:bf:57:83:
77:4f:9e:20:91:0b:7e:09:fe:7e:ec:88:0d:8f:26:
9f:bc:1d:40:54:20:d0:83:a7:72:ab:58:46:99:d1:
51:cf:88:18:54:e3:38:b0:ad:51:3e:7f:ab:b1:6d:
42:04:d8:ae:a6:da:16:c9:de:0e:62:2c:e9:40:fa:
5c:a3:a1:ec:2a:c9:e3:1a:ad:6d:1f:fd:07:17:1c:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CA:10:EB:7C:79:44:E9:3D:62:99:0B:22:FC:40:1E:C1:C2:5E:E9
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/9bcc7ecebe376ebccd1a747d0cbb1d2196c0e23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.0.0/18
179.1.69.0-179.1.70.255
179.1.89.0/24
179.1.91.0/24
179.1.96.0/20
179.1.128.0/20
179.1.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:6b:42:56:17:a1:94:9d:a0:ae:c1:78:7f:2e:64:39:79:55:
21:9b:ce:4d:2e:10:3a:7f:00:88:5e:53:a4:70:fd:bb:2d:bf:
66:53:7d:72:76:62:1d:47:a9:ac:cb:3c:e7:d0:b0:c8:b5:fe:
77:57:72:ba:bf:01:e6:a1:ab:2a:b4:ee:10:53:25:b5:ab:95:
61:04:d7:b9:84:05:ef:34:7d:6c:aa:33:3f:f4:b6:31:9b:ee:
39:0c:c0:ac:b9:a8:78:c4:93:5d:c7:bf:45:6c:c1:a6:98:51:
9a:10:35:da:12:54:3a:95:8c:d4:fc:6b:b8:c1:1e:b9:bd:ee:
b7:8e:24:f8:66:dc:b4:54:e8:cd:cc:c8:69:e7:2c:e3:08:7d:
4a:a6:54:e3:b4:dd:01:f3:90:dc:1d:eb:03:79:22:9d:07:b4:
5a:09:e8:88:97:59:2d:ec:ea:73:32:45:c3:fd:35:19:6b:91:
82:a6:f8:a5:80:43:61:cd:d9:8e:e9:66:56:20:46:b0:cf:db:
2f:9d:6a:08:9f:aa:f4:56:ab:e0:79:70:fc:5e:24:4f:8f:ea:
74:94:b8:83:e7:86:71:0f:20:f2:52:9c:ba:07:0a:d0:58:db:
a4:d2:2f:49:1a:f7:24:55:ce:39:c5:98:d1:63:21:61:3a:28:
99:bd:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org