Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/d55b2824f8309ffce035a21b2a134c862ad34586.roa
File: d55b2824f8309ffce035a21b2a134c862ad34586.roa (raw, json)
Hash identifier: GNF5q8at8dHlG4Z17YgYOLQGstp/XJ8O8ZUxbro2d98=
Subject key identifier: 21:20:A1:55:4F:6B:F4:6E:B2:F0:27:CE:D0:3C:C2:C7:0A:99:23:EA
Certificate issuer: /CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Certificate serial: 1F4254
Authority key identifier: 19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/d55b2824f8309ffce035a21b2a134c862ad34586.roa
Signing time: Thu 11 May 2023 16:58:40 +0000
ROA not before: Wed 10 May 2023 16:58:40 +0000
ROA not after: Sun 11 May 2025 16:58:40 +0000
asID: 27837
IP address blocks: 186.1.160.0/22 maxlen: 24
186.1.165.0/24 maxlen: 24
186.1.166.0/23 maxlen: 24
186.1.168.0/21 maxlen: 24
186.1.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 20:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048596 (0x1f4254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae85768adef6d4dde1ca45bae430571e45d9370a
Validity
Not Before: May 10 16:58:40 2023 GMT
Not After : May 11 16:58:40 2025 GMT
Subject: CN=d55b2824f8309ffce035a21b2a134c862ad34586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:a9:58:be:67:63:3e:75:f1:e5:93:cb:88:
ed:bc:3a:e0:89:60:71:b5:ac:01:e5:66:94:27:8c:
49:ad:31:9d:d9:93:da:7b:a3:62:72:fe:72:4d:64:
cc:83:42:52:da:bb:af:0f:3b:98:e4:8d:47:ec:d8:
88:d7:a5:e3:37:4d:cc:fe:47:1f:d8:b7:b8:d5:5f:
e1:6a:aa:5f:24:94:c8:0e:e7:fd:08:c8:5e:b3:55:
d5:6a:ad:79:41:86:45:eb:0c:8d:18:66:55:ed:21:
44:c9:ac:f8:bd:e5:ea:64:74:00:36:b4:2b:2a:26:
41:02:c9:42:72:0b:b6:10:77:64:1a:2a:a2:ca:fe:
c2:22:8e:a5:e7:d7:d2:d3:de:11:c2:77:98:b3:a9:
4d:cc:45:c2:c6:cf:6e:a4:be:56:d5:2c:82:87:d8:
d6:6a:08:32:09:d5:25:10:72:71:a7:c5:9a:3e:4f:
6d:04:62:f1:b6:45:88:82:18:d7:c8:ab:1f:93:16:
44:a2:2e:45:ba:78:f3:74:ec:b5:aa:36:45:67:ca:
5b:f3:13:99:ad:62:8b:8e:90:09:ff:2f:99:b5:86:
d1:23:b0:ae:5a:fd:bd:67:eb:81:49:a3:16:25:86:
7a:ae:f6:1d:8f:1e:30:a7:37:ba:f6:26:92:0f:ce:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:A1:55:4F:6B:F4:6E:B2:F0:27:CE:D0:3C:C2:C7:0A:99:23:EA
X509v3 Authority Key Identifier:
keyid:19:6C:07:87:F8:83:DF:6F:A4:8F:29:4A:61:D0:34:D2:3D:EF:8C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae85768adef6d4dde1ca45bae430571e45d9370a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/d55b2824f8309ffce035a21b2a134c862ad34586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b976380d-2e90-4e28-b0a6-4b3dfe1d8ad5/ae85768adef6d4dde1ca45bae430571e45d9370a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.1.160.0/22
186.1.165.0-186.1.191.255
Signature Algorithm: sha256WithRSAEncryption
b4:c5:9d:78:9f:4c:fb:32:20:df:b2:df:50:8b:e8:82:47:76:
0c:f6:a0:eb:27:c3:b4:89:04:c6:5f:f3:1e:7f:5d:d6:38:fc:
ce:d8:47:2d:eb:e2:3f:90:d0:de:6a:86:a5:44:27:58:ff:73:
47:ba:95:f1:eb:24:17:d3:46:97:8e:00:6c:42:d4:ce:d0:96:
25:4e:83:ac:10:ae:b5:31:6a:51:dc:d8:6d:93:bc:22:d5:36:
5a:41:06:29:cf:c1:6d:db:93:56:da:d4:c6:eb:cb:fc:bd:22:
b1:9e:e7:79:dc:4c:b9:1a:c9:23:50:c4:ea:17:ef:fb:fa:cb:
05:d8:b1:b2:27:a8:e9:ee:94:ab:6d:74:76:b3:a5:5d:73:b9:
22:dc:69:6b:78:d5:de:87:e0:32:5e:7f:30:86:0f:b8:53:ab:
04:e2:fd:66:14:03:f6:9c:57:65:62:26:1d:08:38:d8:5a:cd:
ad:3a:50:10:af:a0:4a:2c:6b:3f:ca:b7:31:4b:ba:3e:1a:8c:
85:95:b4:57:27:ed:69:b2:7e:96:79:ea:e4:6e:6b:37:42:db:
da:fd:db:53:f0:bd:55:bc:e5:26:33:1f:04:35:9e:09:ca:bb:
86:b9:1a:46:8b:6f:e2:b7:82:c9:7d:ba:9f:cb:6e:de:a5:ae:
bb:39:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 00:02:56 2024 by rpki-client on console-fra.rpki-client.org