Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa
File: 60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa (raw, json)
Hash identifier: YEJS9xw0TuTLcWsvQLLr+ftKBFHySnGa+ADgDUo+2yg=
Subject key identifier: 08:F7:2E:33:C7:E7:13:8A:60:D2:FD:0E:8E:32:FD:24:CE:2C:FF:C7
Certificate issuer: /CN=9155d1ceb3948af4b1d280927ef77d604a5582eb
Certificate serial: 0D1DE9
Authority key identifier: EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9155d1ceb3948af4b1d280927ef77d604a5582eb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa
Signing time: Wed 24 Mar 2021 14:45:23 +0000
ROA not before: Wed 24 Mar 2021 14:45:23 +0000
ROA not after: Tue 24 Mar 2026 14:45:23 +0000
asID: 264676
IP address blocks: 168.205.8.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859625 (0xd1de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155d1ceb3948af4b1d280927ef77d604a5582eb
Validity
Not Before: Mar 24 14:45:23 2021 GMT
Not After : Mar 24 14:45:23 2026 GMT
Subject: CN=60e9dc7556400e31c1197dce1f3f55b44c670bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:83:ab:d1:6c:92:ba:df:92:79:91:57:2f:
04:30:a2:e9:1c:0a:47:d1:75:d7:fa:3f:ae:ef:1a:
9e:f1:28:98:6a:ba:c2:af:71:ea:06:05:28:77:d3:
2a:f4:f9:cf:eb:a3:27:6e:cb:cb:59:0a:b5:c1:23:
d5:24:37:4b:dc:b4:1d:50:66:b8:60:41:cb:ed:69:
9c:f9:fd:bf:f7:b1:0c:46:a5:f8:d9:2a:90:9e:ae:
2e:05:11:f8:12:5f:28:7c:ec:44:34:c1:37:a4:20:
5e:9e:9f:ae:16:92:1a:47:7d:b6:62:da:88:8b:6c:
7c:a8:d1:71:49:85:4b:60:0c:46:a2:5c:99:08:ca:
6f:79:2c:b9:e8:ad:7e:14:2b:25:57:94:40:b9:08:
3a:f1:49:9c:ab:ac:55:8b:ba:08:3d:36:3c:fd:dc:
ba:d5:bb:b9:90:f7:73:56:b4:53:e2:65:a7:9f:64:
19:0f:62:c6:d4:21:38:ef:82:12:7d:a8:8b:71:6a:
10:ea:a1:f8:b6:06:39:b8:56:8b:93:18:5b:53:f3:
c0:fa:6b:6b:db:a3:e1:be:db:31:61:28:64:f2:70:
47:7f:62:fd:ed:68:84:45:cc:b8:80:c0:13:0b:63:
dc:b4:3a:fe:48:b6:6f:4f:e4:e4:c5:1a:0e:84:c3:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F7:2E:33:C7:E7:13:8A:60:D2:FD:0E:8E:32:FD:24:CE:2C:FF:C7
X509v3 Authority Key Identifier:
keyid:EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9155d1ceb3948af4b1d280927ef77d604a5582eb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/9155d1ceb3948af4b1d280927ef77d604a5582eb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.8.0/22
Signature Algorithm: sha256WithRSAEncryption
71:27:19:d0:4b:a7:a5:84:07:0a:39:eb:18:7e:61:f2:32:f2:
2a:54:72:ba:1a:fe:75:48:17:22:4a:d9:42:00:4e:2c:90:32:
fc:f6:c1:3b:a3:56:a0:c2:63:ce:02:f6:75:16:62:3e:7c:81:
7f:87:d5:5d:85:bd:11:15:dd:43:fb:50:f1:d9:de:57:9b:18:
ff:f1:95:6a:ce:5a:0f:21:97:d0:0b:80:07:9f:f1:7f:34:0e:
cd:47:2c:4c:67:94:9c:56:49:1e:bb:bc:bf:04:34:fc:62:bb:
ec:10:9d:43:e1:b4:25:8c:01:c1:69:eb:f3:c9:e9:9b:a1:a1:
6e:6b:46:cf:57:da:e7:ff:2b:05:46:4a:b9:de:ba:4d:1a:d8:
33:10:de:43:75:0d:c6:9d:38:c7:c7:f7:a7:d2:57:73:53:e3:
2d:d8:08:f1:21:8f:4a:68:37:3a:69:38:10:dd:91:dc:50:65:
ee:55:81:a7:8e:5f:38:62:46:da:b3:f3:58:f4:cc:de:bf:45:
4e:10:1e:99:92:47:c6:4d:96:c9:73:83:fc:34:da:49:ba:36:
a7:e6:b0:24:5e:be:bc:3a:82:c9:a5:f0:05:b5:ee:7d:69:79:
e5:0d:2d:2e:13:47:1d:32:50:76:e3:98:99:cf:44:bb:b7:25:
5d:30:7d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org