Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/d13ccb0368379754629a9a22a8c00703bb30b18e.roa
File: d13ccb0368379754629a9a22a8c00703bb30b18e.roa (raw, json)
Hash identifier: nFwSFC+p6Iv/i+VLdMYJkZqhmMuB4Po9fZ84ojXoui8=
Subject key identifier: 0E:33:45:0D:1D:88:09:B6:90:88:B3:F0:CE:BB:05:45:D4:84:E8:1E
Certificate issuer: /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial: 1D639C
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/d13ccb0368379754629a9a22a8c00703bb30b18e.roa
Signing time: Wed 01 Mar 2023 16:53:49 +0000
ROA not before: Tue 28 Feb 2023 16:53:42 +0000
ROA not after: Sat 01 Mar 2025 16:53:42 +0000
asID: 27837
IP address blocks: 186.1.168.0/24 maxlen: 24
186.1.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926044 (0x1d639c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Validity
Not Before: Feb 28 16:53:42 2023 GMT
Not After : Mar 1 16:53:42 2025 GMT
Subject: CN=d13ccb0368379754629a9a22a8c00703bb30b18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2e:6f:d4:92:4a:bc:6a:d4:aa:94:f1:26:27:
46:30:5c:f1:c5:34:0d:e3:63:92:8a:32:fc:9c:6f:
8c:3b:85:37:24:13:29:d7:e0:92:5f:2b:3f:a8:7d:
fe:75:59:71:ec:f5:5e:3e:b5:23:16:bd:3e:42:8f:
72:e5:6b:9d:49:31:b4:75:c4:ba:ac:cf:44:2f:a5:
ca:d4:aa:17:e4:a4:03:43:6a:c7:03:70:ee:56:15:
f9:04:25:59:7e:44:22:9a:dd:a0:85:12:30:ab:0c:
37:54:22:e4:83:e2:33:d8:72:98:71:dd:e9:68:7c:
08:0f:c0:00:0f:fc:02:8e:ad:e9:24:f8:b6:d0:df:
15:22:d1:3f:dd:a6:e0:77:34:8a:c5:a5:d4:8c:fe:
b9:47:8b:fd:66:61:b3:ab:98:16:22:14:ec:48:ea:
06:77:e7:e3:b1:a3:b4:bd:f6:e5:05:1e:77:64:f8:
92:64:19:43:39:8b:56:97:3a:3f:2a:ea:e5:0a:68:
fd:46:3b:69:f0:7c:e4:dc:33:14:1c:d7:8c:d6:d0:
49:11:74:f1:f6:af:88:56:7a:49:5c:41:41:a1:7e:
a6:4a:e5:4b:fb:f1:5b:77:5a:01:b6:c0:67:66:43:
0d:b8:09:23:8e:e6:9b:bf:3a:8a:0b:e2:51:ff:2c:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:45:0D:1D:88:09:B6:90:88:B3:F0:CE:BB:05:45:D4:84:E8:1E
X509v3 Authority Key Identifier:
keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/d13ccb0368379754629a9a22a8c00703bb30b18e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.1.168.0/24
186.1.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fe:a8:53:ce:aa:94:99:5a:37:d6:e8:48:48:aa:e8:4b:0e:
44:bb:5e:36:1b:54:70:5d:61:78:77:b9:de:79:4f:7a:bc:fc:
92:62:f4:fb:55:2b:ae:c7:ef:0b:06:21:df:60:19:61:55:5d:
70:d7:09:7f:25:da:62:5c:8d:89:17:7b:86:35:99:3f:de:1b:
ce:97:29:3f:35:7f:37:5d:cc:99:08:f6:f9:0a:f1:88:b8:34:
64:8f:77:00:14:ae:95:78:66:e4:f9:f1:db:df:55:5f:f3:92:
ab:b2:42:1c:3c:97:c5:ec:1c:9b:0c:b3:f2:23:68:62:f5:a1:
28:8b:ef:dc:48:bb:82:75:53:3e:c8:63:b5:8b:6e:16:03:ed:
05:ed:fd:34:37:dd:1f:e9:62:72:04:21:52:da:0d:66:cb:da:
d1:76:02:98:b4:19:6a:92:3f:48:6e:0c:40:db:50:b0:d5:0f:
df:cb:85:d1:24:64:f9:d7:62:27:ef:75:2f:42:96:5c:e2:43:
f5:c9:52:23:4b:87:0d:25:cc:f4:28:ed:78:e2:74:0f:4e:9a:
ed:24:0e:a2:9a:ba:03:ca:20:8c:02:cb:a4:c4:64:2d:5d:b1:
23:97:ce:43:09:e2:12:d2:fe:b3:ae:24:11:10:a1:48:03:08:
da:86:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org