Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f5a1cd21bc7342d8bacd1a62650702498274877d.roa
File: f5a1cd21bc7342d8bacd1a62650702498274877d.roa (raw, json)
Hash identifier: azI1/t5pjjSciC+47EHfXWHWE8kLMqDh/76iO+r97F0=
Subject key identifier: CA:DC:35:94:B2:AC:C1:B9:C1:B1:3A:36:C0:16:1F:9D:57:B5:83:1E
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 23F77E
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f5a1cd21bc7342d8bacd1a62650702498274877d.roa
Signing time: Wed 10 May 2023 08:30:05 +0000
ROA not before: Tue 09 May 2023 08:30:05 +0000
ROA not after: Thu 08 May 2025 08:30:05 +0000
asID: 262589
IP address blocks: 179.1.0.0/21 maxlen: 24
179.1.8.0/21 maxlen: 24
179.1.16.0/20 maxlen: 24
179.1.32.0/20 maxlen: 24
179.1.48.0/20 maxlen: 24
179.1.64.0/20 maxlen: 24
179.1.80.0/20 maxlen: 24
179.1.92.0/22 maxlen: 24
179.1.96.0/20 maxlen: 24
179.1.112.0/20 maxlen: 24
179.1.128.0/20 maxlen: 24
179.1.176.0/20 maxlen: 24
179.1.192.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357118 (0x23f77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: May 9 08:30:05 2023 GMT
Not After : May 8 08:30:05 2025 GMT
Subject: CN=f5a1cd21bc7342d8bacd1a62650702498274877d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:11:22:1b:eb:1c:07:2c:59:22:87:25:04:
6a:5e:d8:f7:90:8b:bc:a9:ec:37:ce:6d:00:b5:61:
a8:83:48:95:33:31:e5:67:66:98:62:34:fa:24:09:
0f:98:53:66:a4:cc:d1:d1:ec:38:12:57:36:52:a8:
d5:a6:72:7d:6c:0e:e0:ab:ab:06:a6:29:69:aa:09:
54:95:65:c8:64:25:76:54:a7:01:52:7d:b4:39:b8:
67:38:76:29:f3:33:29:59:7b:39:10:a0:44:c0:44:
80:2d:82:97:fe:65:89:5e:a9:37:44:5d:00:93:81:
0b:e6:7d:51:56:c0:a6:24:b8:f9:e4:6d:ab:5f:7b:
1d:b8:f9:e4:f7:c4:e6:d9:95:3e:0e:6c:a0:6b:fa:
58:3e:fb:e2:ef:3e:99:44:40:8a:34:54:78:b4:35:
5f:cf:0b:f7:81:e9:00:13:7d:06:05:75:f3:d1:ed:
8b:30:12:a8:58:d3:e2:74:f8:38:0e:1d:8f:ad:76:
0a:33:af:00:df:78:6a:de:92:96:aa:b1:50:98:5a:
d4:0e:65:2c:86:d4:cb:db:1e:ad:12:f6:df:c1:b6:
8d:c8:66:c1:05:d4:36:a0:80:3c:e8:72:a5:e1:ca:
6c:76:bc:a4:5a:f8:13:aa:10:eb:fa:37:57:68:34:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:35:94:B2:AC:C1:B9:C1:B1:3A:36:C0:16:1F:9D:57:B5:83:1E
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f5a1cd21bc7342d8bacd1a62650702498274877d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.0.0-179.1.143.255
179.1.176.0-179.1.207.255
Signature Algorithm: sha256WithRSAEncryption
74:8e:cf:65:a2:b6:a7:73:05:10:2d:ae:a4:02:50:3a:0d:32:
ed:46:d7:52:54:3d:20:36:22:57:aa:81:cd:4f:23:18:fa:7a:
c9:2e:bb:c8:27:c1:5d:fc:e7:cf:76:bb:a1:54:34:4b:42:9f:
59:c3:b0:56:ad:79:df:88:c3:fc:a9:5f:5a:75:80:f5:72:b5:
81:72:a7:06:3e:b1:b3:c7:5f:f3:ac:f9:91:5f:82:20:14:61:
b7:05:92:65:1e:d6:ad:18:89:5d:b0:eb:0f:7f:4e:dc:f1:f4:
85:ef:5f:e6:14:4b:b0:0a:81:35:3e:70:2d:33:92:d5:b5:8f:
9a:4a:4c:0f:db:01:94:a0:f6:41:30:47:f6:47:41:75:01:5f:
4f:15:08:a9:84:99:df:45:1b:72:86:54:59:01:c3:e4:4a:4a:
64:9f:73:5a:ef:6f:da:28:8d:bc:98:7e:2b:3c:0d:68:8c:ea:
04:b3:26:ee:4e:e7:12:30:d4:b7:4a:31:cb:4f:87:56:48:0f:
8f:ea:5e:a3:da:27:d4:b1:3f:34:8b:ab:ed:fd:46:03:eb:6b:
27:41:f0:61:15:97:2d:d0:37:ea:eb:ab:5a:e9:36:44:dd:e0:
2a:bd:35:72:d2:2c:39:2e:23:0f:8b:eb:af:88:68:9d:3b:9b:
85:7a:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org