Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f22f5cb60302e75748b1e2a92ffe7e440c761415.roa
File: f22f5cb60302e75748b1e2a92ffe7e440c761415.roa (raw, json)
Hash identifier: uj3xvKfGF7udEm4pC0Yj8BcpGrnGSHZPfqbN2o+mmEY=
Subject key identifier: 10:3A:11:C1:10:E1:D4:FF:9A:C2:75:B6:A2:B0:09:BA:8D:40:9B:26
Certificate issuer: /CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Certificate serial: 20EC75
Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f22f5cb60302e75748b1e2a92ffe7e440c761415.roa
Signing time: Mon 26 Jun 2023 02:29:37 +0000
ROA not before: Sun 25 Jun 2023 02:29:37 +0000
ROA not after: Thu 26 Jun 2025 02:29:37 +0000
asID: 263801
IP address blocks: 168.196.244.0/22 maxlen: 25
Validation: Failed, certificate revoked on Wed 24 Jan 2024 19:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157685 (0x20ec75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Validity
Not Before: Jun 25 02:29:37 2023 GMT
Not After : Jun 26 02:29:37 2025 GMT
Subject: CN=f22f5cb60302e75748b1e2a92ffe7e440c761415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:dd:a4:02:cb:9a:2a:f9:23:39:d1:7c:f1:
9a:16:8e:83:43:4e:6e:f2:8b:64:4d:6e:70:d7:5e:
c5:72:e1:2a:5e:02:08:ae:6b:2e:02:e0:23:ca:80:
00:fb:c2:0f:16:a1:d4:0f:a1:84:65:76:84:a3:1c:
c9:4f:fc:e2:6e:d9:7a:35:4d:c8:ea:de:48:c3:a8:
53:2c:15:8c:43:b3:5e:dd:fa:98:31:18:f3:ec:8b:
16:ad:f1:d1:66:bc:49:11:7e:14:5c:92:c2:40:3d:
85:b8:f5:70:ca:7c:9e:0b:0a:7b:cd:f7:5a:b5:3f:
38:cb:4c:51:ed:5f:a2:73:d7:f4:f2:0d:07:0a:5d:
b2:87:80:21:bc:d3:f0:4f:08:5b:1d:0a:8d:a7:f6:
68:27:42:55:05:ef:20:ae:e5:ef:92:e2:ad:ef:9c:
61:43:cd:13:52:66:03:d6:14:21:5a:9e:3f:8d:39:
2d:eb:f9:2f:6a:7e:2a:ff:dd:d8:ac:57:f9:89:ae:
cb:a9:71:2a:88:d6:d8:08:15:79:da:e3:d1:95:8a:
5b:22:d0:eb:e2:99:0a:17:19:9e:b5:67:ee:4e:19:
f6:9d:0a:86:0a:f5:26:b9:a2:47:61:1a:12:f6:b7:
3f:7c:b7:15:a3:66:35:cd:51:1c:da:5f:57:f4:ce:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:11:C1:10:E1:D4:FF:9A:C2:75:B6:A2:B0:09:BA:8D:40:9B:26
X509v3 Authority Key Identifier:
keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f22f5cb60302e75748b1e2a92ffe7e440c761415.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:73:5c:22:9e:9b:f2:47:44:ab:8b:ca:7d:07:63:7e:6c:f6:
da:ab:61:84:bd:07:97:2d:85:68:57:05:c7:4a:bc:06:8d:00:
e0:d3:f0:d6:90:44:ec:a3:cc:2b:46:3a:a9:c2:f2:63:71:08:
01:58:5b:fe:7a:4a:02:b9:ef:f5:a1:04:af:d5:ad:0a:3a:32:
11:a7:c2:03:7a:c2:3c:36:9d:92:59:9d:e3:4a:bd:53:b0:77:
80:78:24:34:8c:7a:10:cf:b8:e7:ae:ca:e7:a4:f9:0b:92:2c:
d3:2d:1f:43:c0:81:fd:2f:9d:65:8b:16:93:67:58:49:e3:d9:
b9:13:ac:30:ed:de:25:d7:0f:2b:a1:e9:ec:27:01:b6:08:5f:
ef:65:3e:53:9b:86:64:65:a3:e6:88:ec:59:dc:00:c7:c4:f3:
12:ea:76:b2:ae:09:3f:8a:ae:f0:16:23:7e:15:dd:6f:56:4e:
d4:f9:fc:a6:de:9e:80:bc:07:72:ec:db:e9:c2:bf:68:a1:d9:
4c:86:5d:64:1e:8f:1f:48:7b:73:82:70:f2:a1:a7:25:db:04:
05:85:aa:aa:4f:1f:e4:a6:c3:3d:df:b3:ee:98:f3:c8:ae:f7:
e4:b4:6f:64:9f:61:8a:7b:a0:6a:11:87:2d:48:1d:9e:81:28:
e4:7b:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 22:30:23 2024 by rpki-client on console-ams.rpki-client.org