Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/e6d127ef91dd04d1367e3fcefd3067dfac3030d3.roa
File: e6d127ef91dd04d1367e3fcefd3067dfac3030d3.roa (raw, json)
Hash identifier: qV2fZOX8oEun8Y1wNHvORdtaiJkmbsJcbZVAzSNZwAs=
Subject key identifier: F2:8A:5E:23:EE:CC:B6:82:82:5C:35:87:24:D0:C6:32:E1:B7:0F:FA
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 1C6823
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/e6d127ef91dd04d1367e3fcefd3067dfac3030d3.roa
Signing time: Thu 22 Sep 2022 21:17:35 +0000
ROA not before: Thu 22 Sep 2022 21:16:13 +0000
ROA not after: Sun 22 Sep 2024 21:16:13 +0000
asID: 22368
IP address blocks: 201.221.144.0/24 maxlen: 24
201.221.145.0/24 maxlen: 24
201.221.146.0/24 maxlen: 24
201.221.147.0/24 maxlen: 24
201.221.148.0/24 maxlen: 24
201.221.149.0/24 maxlen: 24
201.221.151.0/24 maxlen: 24
201.221.152.0/24 maxlen: 24
201.221.153.0/24 maxlen: 24
201.221.154.0/24 maxlen: 24
201.221.155.0/24 maxlen: 24
201.221.156.0/24 maxlen: 24
201.221.157.0/24 maxlen: 24
201.221.158.0/24 maxlen: 24
201.221.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1861667 (0x1c6823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Sep 22 21:16:13 2022 GMT
Not After : Sep 22 21:16:13 2024 GMT
Subject: CN=e6d127ef91dd04d1367e3fcefd3067dfac3030d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:fb:23:f4:b7:6c:78:6d:bb:5d:59:62:ee:
72:04:63:a0:39:54:61:2f:ca:e5:73:3e:b2:d2:9b:
8a:42:16:c0:8f:08:17:cf:42:58:6e:e3:72:d7:5c:
bc:9a:b2:d8:31:cb:c5:cb:ec:ad:84:b4:63:1e:03:
32:0a:22:f7:7c:4c:14:ba:eb:9b:e4:de:0e:05:38:
ea:d8:ea:4f:23:4e:1f:04:07:4c:35:6c:9e:cf:e6:
52:4b:19:0a:19:d0:0c:6a:12:56:83:6d:78:36:c1:
67:3a:a9:bc:67:cd:6f:f6:a6:33:55:51:2b:89:90:
e3:b2:fd:42:75:d6:33:cc:93:41:f2:51:c8:76:e3:
45:65:3d:82:de:47:60:b1:ef:e3:ae:3d:d6:bb:0f:
11:bc:16:56:5b:02:34:45:dd:66:6d:69:3c:7c:9a:
6e:08:a9:3f:86:f0:62:1e:ac:bd:90:07:f6:7e:41:
81:52:63:70:b1:ec:69:cb:66:1f:f6:e9:a6:da:a0:
01:1f:8d:48:ee:1e:52:3a:07:0c:97:43:23:e7:f6:
f8:2e:f1:d3:a6:ab:b1:90:bf:24:14:dd:c0:6f:a5:
30:99:cb:94:fd:59:b7:96:7b:3c:d5:1c:8c:b1:4d:
db:e8:60:f8:77:c8:96:c0:03:51:36:da:ba:0c:6a:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:5E:23:EE:CC:B6:82:82:5C:35:87:24:D0:C6:32:E1:B7:0F:FA
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/e6d127ef91dd04d1367e3fcefd3067dfac3030d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.144.0-201.221.149.255
201.221.151.0-201.221.159.255
Signature Algorithm: sha256WithRSAEncryption
95:50:f1:4a:89:cd:12:24:c3:fc:bb:f4:dc:86:f9:c9:36:89:
6f:d3:81:6e:9d:f0:85:be:5a:2d:4f:c8:a1:49:e7:10:f7:7c:
c0:c5:66:b4:9f:25:1b:bc:a6:2f:66:db:2a:11:9c:8b:4c:7b:
b9:79:0b:80:14:4d:3b:15:db:3a:89:c4:10:94:16:1c:b0:45:
4d:2d:82:6d:ac:9d:e2:40:57:34:92:b8:03:f5:a8:96:4b:e3:
fc:30:e8:12:ea:c1:91:e7:e7:9c:b1:06:b2:5b:5e:6c:21:93:
b7:2f:6f:ac:e6:34:d2:85:b6:02:a7:8a:62:48:78:b1:c2:d8:
6e:b2:13:e3:ab:06:4c:7d:b0:e5:ab:f4:c5:58:35:0a:70:50:
04:f8:91:5c:49:4f:5b:e4:59:51:a4:8e:d5:03:c9:41:2d:29:
ab:9c:ae:2f:df:e5:25:b8:5e:34:01:09:97:1e:49:95:77:7d:
3c:56:44:cd:64:4f:17:fa:4d:e5:85:2f:7e:14:ae:4c:f6:8d:
a9:7e:9a:33:29:a2:b4:2f:3c:81:04:52:7e:1b:06:41:80:51:
f4:2b:a5:43:81:9a:8d:d0:21:79:52:c2:ea:f4:e8:57:ba:97:
c9:44:be:24:b9:ec:8d:f7:3f:9e:27:d5:d6:2b:4a:75:70:7e:
46:96:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 17:43:26 2023 by rpki-client on console-fra.rpki-client.org