Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/9fa4a2681b27016fc989210732279382e691eb72.roa
File: 9fa4a2681b27016fc989210732279382e691eb72.roa (raw, json)
Hash identifier: k5lC2CZOROLuRGaWGUPzD5Bd76+U3KHnRI4rxt8INUI=
Subject key identifier: F0:BC:3F:A8:C7:12:6A:37:D5:F1:1E:61:D7:40:32:00:6A:29:3F:CB
Certificate issuer: /CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Certificate serial: 0848
Authority key identifier: 45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/9fa4a2681b27016fc989210732279382e691eb72.roa
Signing time: Tue 01 Feb 2022 18:24:43 +0000
ROA not before: Tue 01 Feb 2022 03:00:00 +0000
ROA not after: Thu 01 Feb 2024 03:00:00 +0000
asID: 264761
IP address blocks: 168.195.186.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 07:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Validity
Not Before: Feb 1 03:00:00 2022 GMT
Not After : Feb 1 03:00:00 2024 GMT
Subject: CN=9fa4a2681b27016fc989210732279382e691eb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:e9:23:9a:c2:18:39:61:f7:c6:23:69:b3:
d6:37:49:86:59:62:b0:6e:45:be:c4:1f:c7:83:5d:
b1:40:82:87:b2:63:15:d4:00:b4:49:c8:61:03:b2:
fa:4e:f2:8a:29:d4:4f:12:e2:9b:7d:5c:f9:cb:16:
e3:66:4b:6a:b2:20:c0:95:d7:fa:73:a7:16:29:5a:
fe:08:84:fe:a7:47:0b:37:5c:08:9d:87:90:09:eb:
bd:aa:e6:c2:c6:99:17:e1:ee:33:5c:47:e3:46:db:
b5:81:be:bf:f1:6e:fe:b9:2c:d1:f5:ca:22:e2:35:
3a:28:58:72:28:2a:1f:6c:3f:ab:06:4c:8f:0d:b7:
0d:10:99:30:b1:70:b5:8a:f4:9f:2f:43:4f:7a:db:
c7:9b:b5:c7:2b:a8:be:45:dc:28:51:cf:3b:86:2f:
0c:ff:4b:8a:47:71:de:97:c5:02:6c:d4:bf:fb:f2:
3a:43:9d:35:11:69:fd:e8:9d:dc:53:8a:28:3b:70:
7d:65:6f:14:07:92:e0:1e:9a:f2:8c:b2:fb:a9:e3:
38:41:6b:8f:a5:7f:13:55:45:5d:2b:a9:24:e4:ec:
86:19:e6:27:fb:20:b5:cc:0e:58:0a:d8:39:8c:98:
c6:42:9b:eb:f5:2a:0e:da:0e:27:36:85:4e:6c:a4:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:3F:A8:C7:12:6A:37:D5:F1:1E:61:D7:40:32:00:6A:29:3F:CB
X509v3 Authority Key Identifier:
keyid:45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/9fa4a2681b27016fc989210732279382e691eb72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.186.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:5e:68:99:ad:62:4c:91:5d:7c:35:16:89:1a:c4:d7:b8:73:
af:4d:e4:5f:a6:27:21:05:39:f0:7d:a0:fe:fb:b7:f6:08:0a:
cc:d9:29:e2:2d:6d:83:54:80:dd:f2:64:8b:73:f1:5a:4f:22:
d2:9a:83:c7:d4:0c:cf:8c:99:00:04:9e:3c:ea:4b:97:33:ac:
95:4c:65:49:7c:51:55:8e:fa:f6:53:09:3a:0e:1c:04:03:ba:
5d:12:14:2f:31:8f:4d:44:02:2f:2b:47:53:49:67:56:0d:fd:
04:8f:36:c6:5d:5c:11:82:06:8e:9a:63:61:1d:82:cf:6d:37:
89:e8:2f:51:2c:fd:b0:67:5d:6e:7f:37:9a:ce:68:62:4a:e2:
d1:31:58:90:9d:58:af:ba:ec:79:d5:ef:27:79:32:75:79:0d:
e9:58:f8:3c:69:c9:7a:1d:9a:c8:61:35:96:99:4e:6c:15:ae:
90:a6:bb:f8:f0:6d:9e:3d:9d:dd:39:df:e2:85:36:af:4a:76:
99:73:8c:0a:74:26:a8:7b:40:d5:02:ab:ae:66:6b:0d:23:cc:
9e:69:9e:4d:40:1f:19:29:a3:9b:5c:59:69:0e:d6:ad:cb:c3:
a0:24:2d:33:b1:07:19:81:ef:f5:49:41:49:33:7a:d1:62:ce:
99:d9:88:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 12:08:29 2024 by rpki-client on console-ams.rpki-client.org