Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/00f5d3169c6c3be35fa4e2f9c6a35224c2faa3dd.roa
File: 00f5d3169c6c3be35fa4e2f9c6a35224c2faa3dd.roa (raw, json)
Hash identifier: 3HMlwKi+A4dEuay6NVfSje8hGRR/8dbqudk02cWOwCw=
Subject key identifier: 18:ED:F0:4F:EF:36:CA:22:2C:1C:04:AF:40:11:0D:E2:D5:32:C7:3D
Certificate issuer: /CN=9f38530271142a50ccefbe64df571c9b0e259487
Certificate serial: 0D29C0
Authority key identifier: 99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/00f5d3169c6c3be35fa4e2f9c6a35224c2faa3dd.roa
Signing time: Wed 24 Mar 2021 14:34:50 +0000
ROA not before: Wed 24 Mar 2021 14:34:50 +0000
ROA not after: Tue 24 Mar 2026 14:34:50 +0000
asID: 18678
IP address blocks: 45.65.232.0/24 maxlen: 24
190.102.120.0/24 maxlen: 24
190.102.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862656 (0xd29c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f38530271142a50ccefbe64df571c9b0e259487
Validity
Not Before: Mar 24 14:34:50 2021 GMT
Not After : Mar 24 14:34:50 2026 GMT
Subject: CN=00f5d3169c6c3be35fa4e2f9c6a35224c2faa3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:b8:80:3d:8c:a6:e7:10:b6:9e:b3:8b:97:
cd:f2:e5:3a:26:c3:71:0b:16:e5:09:85:cb:89:d4:
38:3d:4e:f1:07:02:1f:67:c2:2e:cc:07:b9:e2:e6:
db:83:d0:40:8e:ae:57:ef:db:d6:76:15:65:f4:f2:
b7:48:80:9b:58:ad:4e:ca:ba:dc:62:38:69:12:25:
d1:50:77:f8:a3:1a:b5:b0:2a:e5:15:b0:89:2d:bf:
db:84:86:8e:89:9e:9c:87:b0:40:14:09:12:bd:64:
03:78:b4:e6:73:71:3a:4e:2d:37:0d:72:0c:37:da:
ff:7f:5d:6a:98:40:01:a1:b4:1f:dd:8f:b2:6e:1a:
c4:6d:78:66:f9:39:81:7c:88:a7:6f:1d:86:ab:ba:
c4:0e:66:97:f8:de:82:07:66:aa:26:d8:58:75:28:
ee:8d:82:71:62:18:37:61:ee:ba:e7:c6:b7:c2:d0:
b3:65:8f:f9:67:69:43:22:af:6d:ae:04:2c:7e:15:
ec:14:2f:4f:6c:bc:4e:b5:32:c6:ee:b8:54:2b:30:
eb:2c:2a:ae:95:70:05:d4:90:1b:a5:bd:f9:b9:bd:
df:1f:a6:ac:24:a6:40:58:e1:f1:ab:60:b4:50:3d:
49:40:56:03:b1:c2:a7:42:81:db:8e:96:03:99:07:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:F0:4F:EF:36:CA:22:2C:1C:04:AF:40:11:0D:E2:D5:32:C7:3D
X509v3 Authority Key Identifier:
keyid:99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/00f5d3169c6c3be35fa4e2f9c6a35224c2faa3dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/9f38530271142a50ccefbe64df571c9b0e259487.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.232.0/24
190.102.120.0/24
190.102.123.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a2:13:ac:58:f5:c1:67:2b:72:7c:17:c3:b0:13:a0:35:85:
6a:8e:36:88:1c:1d:66:16:f2:18:58:81:2e:eb:45:f6:1c:ac:
a8:b2:26:8a:e5:d2:66:ff:16:31:60:ea:7a:f4:5a:b8:0e:e2:
75:e8:5a:71:39:d0:2a:d4:a8:2b:d1:2b:14:9e:d1:16:36:8f:
80:32:54:80:79:d9:fa:5a:db:08:b8:6e:57:4d:63:9c:e6:ee:
ff:16:47:8d:46:78:39:bc:c0:ba:4d:25:8a:85:2c:78:e1:47:
86:f3:c2:4f:19:85:f9:68:11:72:8d:45:86:5c:d8:41:14:f5:
8b:c0:c0:f6:4e:f8:e1:d6:9f:83:63:b0:89:aa:ae:4c:d7:c9:
dd:ed:db:23:b6:d5:ab:31:4f:57:d7:60:d8:8f:48:4b:2c:da:
fd:ee:20:33:cd:fc:6e:20:7a:8f:21:47:e3:2d:bd:44:7c:d6:
cf:4a:80:8d:c5:a9:5b:c6:93:67:81:c7:fa:23:8e:8b:01:17:
6a:ec:5d:96:c5:1a:59:e1:98:85:cd:20:3d:22:ec:6a:31:df:
74:68:d7:c2:c4:2e:a9:87:aa:40:8c:79:3b:cb:63:ad:79:36:
36:e4:92:a7:fa:f3:d3:7c:cd:14:ea:58:89:a8:79:92:b5:8f:
66:fe:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org