Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/2551f998accb36afbebaf76379294b05274dac3c.roa
File: 2551f998accb36afbebaf76379294b05274dac3c.roa (raw, json)
Hash identifier: K4dIUaeBl5NOrEI1yH0N79H78vOqGWdw8+QIxaQ+ijI=
Subject key identifier: E7:D9:62:27:92:BE:44:09:76:D3:50:3D:33:D9:65:7E:09:CA:49:AD
Certificate issuer: /CN=901c0d961f219c9ac4920f36c147c92354e14b00
Certificate serial: 0D7B02
Authority key identifier: 4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/2551f998accb36afbebaf76379294b05274dac3c.roa
Signing time: Wed 24 Mar 2021 14:31:05 +0000
ROA not before: Wed 24 Mar 2021 14:31:05 +0000
ROA not after: Tue 24 Mar 2026 14:31:05 +0000
asID: 265763
IP address blocks: 164.163.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883458 (0xd7b02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901c0d961f219c9ac4920f36c147c92354e14b00
Validity
Not Before: Mar 24 14:31:05 2021 GMT
Not After : Mar 24 14:31:05 2026 GMT
Subject: CN=2551f998accb36afbebaf76379294b05274dac3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:46:c6:72:52:58:cc:3e:11:f6:ec:02:06:
0a:a3:07:da:06:bc:a4:28:59:9b:8d:f3:8f:73:9a:
32:03:91:a8:12:29:7f:61:42:8b:5e:2b:32:20:93:
af:b8:4c:58:4e:d3:ac:09:1c:7d:69:60:7e:d1:3d:
cc:69:4e:10:18:40:e0:24:99:63:44:04:80:60:20:
94:5e:ce:bd:4b:56:01:54:77:c9:a1:c7:dc:40:3b:
d9:07:1b:a9:6a:28:c4:26:dd:a7:cb:48:73:36:64:
63:74:a2:15:6e:4e:e0:4c:09:0e:58:a4:fa:28:43:
89:25:b5:37:69:8a:39:8a:04:35:4e:db:3c:47:06:
5b:c4:bc:5e:4e:90:db:7a:c8:58:cb:bb:fb:3d:1b:
da:1f:f6:da:47:5f:e6:d5:74:b9:0d:8b:7a:ff:d6:
72:4e:70:a8:fa:d2:bf:83:07:af:2c:28:b1:b9:84:
da:cf:5d:9f:65:bb:21:50:51:08:36:38:0b:32:3e:
c8:14:5e:bd:ca:4a:a2:7d:f5:0f:05:40:ce:13:aa:
ce:8b:9e:41:b5:ce:e2:ab:1f:e4:9b:f9:48:33:bb:
48:7b:f8:03:e8:5f:e5:a0:82:e5:56:7d:fd:89:53:
4b:27:ec:b5:30:29:45:90:12:da:6e:c6:35:42:f8:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:62:27:92:BE:44:09:76:D3:50:3D:33:D9:65:7E:09:CA:49:AD
X509v3 Authority Key Identifier:
keyid:4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/2551f998accb36afbebaf76379294b05274dac3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.40.0/22
Signature Algorithm: sha256WithRSAEncryption
29:c6:d3:b9:67:ad:77:42:2e:f6:0b:03:d0:50:27:46:45:e0:
1a:a3:42:be:ff:e5:9a:e9:08:7d:24:2e:20:b9:15:4d:2f:6f:
41:37:93:40:d7:c3:60:00:11:e9:20:35:b2:77:a7:07:de:71:
3b:e2:a1:51:ea:87:27:ce:b8:22:d9:74:cd:63:f1:4b:7c:0f:
bb:90:3e:c8:17:3a:fa:18:61:46:20:42:e6:29:57:0b:54:d6:
d7:b0:48:89:40:94:f1:68:38:ea:e7:c7:bc:7d:b4:90:15:1f:
2a:4a:5f:bb:fe:48:d6:86:e9:5d:de:42:17:23:16:79:32:43:
83:7b:3c:62:c5:8c:6d:24:17:00:58:fe:3b:b6:2a:36:34:92:
69:55:14:48:e4:4a:7e:a3:6f:9d:ec:3b:25:b9:74:ac:08:01:
e5:75:1c:f8:50:1b:f5:f4:30:1e:14:40:65:66:e2:06:51:e5:
c2:11:6e:9c:38:c3:67:ea:01:19:f1:02:3b:48:5b:5b:42:13:
d9:11:b1:df:a9:62:22:03:c4:e6:9e:9e:0d:b9:05:cc:95:8c:
28:f5:7a:6c:bb:f4:05:65:db:50:e9:0e:2f:b9:77:28:e1:2a:
a0:1e:09:1f:0d:17:0a:28:55:bd:0e:46:ca:83:8b:00:a9:29:
2d:b7:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org