Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/00baff276b2465140186d63265e37ea0cf2027b3.roa
File: 00baff276b2465140186d63265e37ea0cf2027b3.roa (raw, json)
Hash identifier: rNRFdnmtnS9GnE3RPX5ZJd0Xg7Nomrl1gioo2Wx8Bv4=
Subject key identifier: 86:9C:0E:98:2F:66:59:7F:9E:EB:1C:55:59:ED:45:F5:3C:04:EE:04
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 269691
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/00baff276b2465140186d63265e37ea0cf2027b3.roa
Signing time: Wed 30 Aug 2023 17:36:33 +0000
ROA not before: Tue 29 Aug 2023 17:36:22 +0000
ROA not after: Sat 30 Aug 2025 17:36:22 +0000
asID: 12956
IP address blocks: 190.66.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528913 (0x269691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Aug 29 17:36:22 2023 GMT
Not After : Aug 30 17:36:22 2025 GMT
Subject: CN=00baff276b2465140186d63265e37ea0cf2027b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8f:0a:b7:0d:95:5d:17:17:78:3f:bf:0e:04:
e2:90:22:42:b5:8e:62:fb:8c:01:c6:6e:d4:97:74:
b6:05:ff:9c:3a:78:cb:15:a4:f5:16:0e:ab:da:18:
b0:60:e0:df:b5:83:5c:bc:5e:1d:ab:5f:47:3f:00:
d8:47:e6:72:45:50:5b:35:e1:83:30:be:17:4f:08:
fc:24:67:0b:41:08:23:a4:76:8a:50:c0:89:ac:fb:
c6:2f:cb:54:48:c4:06:ae:59:ab:de:2b:28:16:58:
38:f2:5c:30:7e:57:f0:27:d7:84:72:ae:88:a8:82:
7d:ef:44:5c:5a:bc:39:05:97:c5:22:42:07:9f:ba:
e3:41:80:a2:82:1c:a6:a9:ad:c8:d1:a3:54:61:1d:
5b:ff:32:93:28:e0:88:a4:9c:cb:89:af:44:0b:8a:
88:ec:c8:5e:9e:c1:9f:c3:29:30:b2:c6:d1:dd:2b:
72:07:2d:ac:1d:ff:87:6e:0e:74:c2:13:ed:af:15:
2a:aa:ac:4a:1f:22:4f:2d:1a:2a:22:24:f3:d1:96:
1c:e0:36:19:89:4a:a8:0a:c3:c6:66:4e:4d:06:84:
27:d8:0d:d2:f9:6b:fd:0a:85:0d:48:a6:e4:1f:05:
1a:a9:e4:35:ff:04:03:59:b8:9d:19:93:71:68:7c:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:0E:98:2F:66:59:7F:9E:EB:1C:55:59:ED:45:F5:3C:04:EE:04
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/00baff276b2465140186d63265e37ea0cf2027b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.66.4.0/24
Signature Algorithm: sha256WithRSAEncryption
38:21:1b:c7:3d:55:29:75:b7:0e:d3:43:ed:88:b7:7c:33:f4:
ab:28:12:47:85:86:3e:77:ed:ce:eb:de:60:3d:a6:8d:b5:55:
1a:11:89:e5:26:2c:0d:72:55:30:4c:21:b1:f1:83:04:54:ab:
04:34:fe:2e:f9:d0:91:dc:9f:9d:b3:f4:85:7f:2b:57:a2:e0:
64:f9:d8:f0:80:96:8a:09:85:e5:06:3b:f2:71:98:45:f5:05:
37:cc:a4:2c:fb:ea:9d:7b:86:f7:a6:bf:4b:f6:d1:2e:5b:98:
64:63:50:f3:eb:2e:cd:f5:5c:dd:e4:99:83:3c:1e:8e:46:1f:
3e:7e:ca:71:5a:0b:e1:41:53:f4:e4:fc:16:d9:75:0c:d6:85:
72:ce:e9:8c:9a:a0:66:69:4b:91:c1:b6:55:07:c3:95:fc:cb:
17:c1:37:c6:d1:7b:21:57:84:d1:2f:da:9a:70:93:77:79:96:
80:a1:70:e6:09:04:11:64:66:74:39:40:5a:99:0d:94:91:d8:
78:84:98:f3:e5:7d:3e:92:d5:ac:80:68:c6:0c:f3:2f:8c:2c:
c1:a6:1c:65:9c:6f:ac:f5:31:10:b5:fa:3a:46:0e:b0:8a:f1:
a3:ea:ef:3d:45:ae:d5:38:6f:8d:ea:a8:0e:1d:25:04:e2:28:
63:72:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 19:01:12 2023 by rpki-client on console-fra.rpki-client.org