Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/116fa36fbd852b7131ae1b76333c7509a82aa051.roa
File: 116fa36fbd852b7131ae1b76333c7509a82aa051.roa (raw, json)
Hash identifier: ZRo/iEIaptoFp6wGOoT+y+6U22QKOrdox+nmEthrFls=
Subject key identifier: F4:5D:CB:BD:87:E5:5C:87:17:C3:BF:5D:46:29:25:7A:97:81:26:6A
Certificate issuer: /CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Certificate serial: 0A5B
Authority key identifier: 45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/116fa36fbd852b7131ae1b76333c7509a82aa051.roa
Signing time: Tue 01 Feb 2022 18:30:32 +0000
ROA not before: Tue 01 Feb 2022 03:00:00 +0000
ROA not after: Thu 01 Feb 2024 03:00:00 +0000
asID: 271991
IP address blocks: 168.195.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 07:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Validity
Not Before: Feb 1 03:00:00 2022 GMT
Not After : Feb 1 03:00:00 2024 GMT
Subject: CN=116fa36fbd852b7131ae1b76333c7509a82aa051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:77:38:a2:85:24:1d:99:61:45:3a:a9:12:
9a:f8:44:0c:af:d2:1d:63:ca:5e:82:46:66:70:7c:
2e:df:cf:c0:3a:91:0c:f6:f1:9a:fa:c3:0a:d3:35:
a2:a6:e5:7d:f7:8f:be:40:45:78:bb:4f:e3:49:56:
38:f1:07:a9:38:49:1e:ad:21:2e:14:fb:66:60:2e:
63:cc:9c:65:dc:e6:db:a1:3c:22:72:fe:77:9a:67:
a0:b0:33:f1:7b:4a:28:c4:29:a0:14:2b:3e:c9:f2:
4b:93:ba:d6:bf:b4:37:a8:a2:62:c9:8e:4d:a8:98:
24:9f:93:d4:35:48:ab:eb:4d:6c:5d:34:db:c6:67:
7f:d9:92:ca:be:17:3e:90:4b:f4:1e:62:f5:38:4f:
61:60:75:76:ed:10:47:83:5e:b3:05:53:3a:99:e0:
2b:e0:f6:7f:41:4d:39:1f:2e:4b:3f:36:29:3e:a8:
b7:e9:75:43:a1:62:9c:ee:ef:01:d4:d4:45:96:af:
86:ac:1a:f7:44:db:54:39:e8:26:0b:8f:b9:5c:12:
75:4c:70:80:6c:4f:6a:82:1e:a9:ce:23:1b:09:7f:
43:e7:58:ca:56:d9:6f:23:78:17:dc:0b:8c:8e:01:
da:af:ed:35:1a:28:2f:25:1d:1d:42:a7:55:ed:77:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:CB:BD:87:E5:5C:87:17:C3:BF:5D:46:29:25:7A:97:81:26:6A
X509v3 Authority Key Identifier:
keyid:45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/116fa36fbd852b7131ae1b76333c7509a82aa051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0f:be:1d:78:f4:a7:ae:3a:ac:75:32:27:92:cc:d3:b2:44:
ca:bb:cb:91:19:18:b0:1a:df:fc:54:82:0a:05:ab:8c:e2:0d:
e4:0d:6b:02:09:e9:91:c7:52:f3:eb:a4:32:23:f2:96:c5:7e:
7f:e5:26:ca:7f:c4:2a:51:66:4f:7c:e0:42:d4:1f:92:25:fc:
74:60:9e:af:be:51:83:fd:b4:06:74:d1:d1:f2:f9:0f:07:c8:
49:7d:55:3f:a2:4b:14:2d:fa:8f:28:c6:13:1e:76:7e:28:ff:
09:9d:41:82:c6:0c:6b:ea:4e:78:93:f7:a5:12:23:2a:d8:1c:
70:b6:e6:1e:c0:0e:5e:76:3e:05:40:7e:bf:bd:58:56:bc:21:
0f:27:75:5a:92:56:81:e1:d8:de:57:17:17:87:0b:a1:24:12:
c7:87:f6:42:04:b9:f9:b7:48:fb:e2:b9:bb:cc:4a:95:93:f4:
ae:72:63:25:69:51:92:b9:c8:ec:a3:7c:84:c2:05:b3:01:98:
9c:74:9d:2d:1c:3c:72:09:02:04:15:18:97:87:95:3b:fd:0f:
f0:43:99:f7:53:ce:ef:7f:38:c8:7b:9c:80:6c:cf:67:52:20:
77:cd:45:6c:c5:79:d9:80:f7:d3:02:c7:62:a9:cd:b6:9f:1d:
2a:79:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 12:07:40 2024 by rpki-client on console-fra.rpki-client.org