Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/66f3543ca79f61c868484a770eacb0f6db65c87c.roa
File: 66f3543ca79f61c868484a770eacb0f6db65c87c.roa (raw, json)
Hash identifier: hkGXmk76yeUd7A7+IpYwH1rY8Azv7IeOAAsS5GOB9lY=
Subject key identifier: 21:F0:00:E3:A8:D7:53:66:A1:8F:7E:48:B2:D3:EB:56:45:C6:3E:6F
Certificate issuer: /CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Certificate serial: 0CDB0C
Authority key identifier: 7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/66f3543ca79f61c868484a770eacb0f6db65c87c.roa
Signing time: Wed 24 Mar 2021 14:47:06 +0000
ROA not before: Wed 24 Mar 2021 14:47:05 +0000
ROA not after: Tue 24 Mar 2026 14:47:05 +0000
asID: 393629
IP address blocks: 201.221.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842508 (0xcdb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2c33fa01901f703e3730e28e99eb8bc4cba62a
Validity
Not Before: Mar 24 14:47:05 2021 GMT
Not After : Mar 24 14:47:05 2026 GMT
Subject: CN=66f3543ca79f61c868484a770eacb0f6db65c87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c8:1c:7c:cb:54:b9:bc:32:88:df:93:82:20:
18:05:18:6e:93:1c:ad:ee:2b:a0:58:ac:2e:7b:5d:
e9:64:0b:1f:e9:5a:49:98:85:f1:ab:ff:46:51:0d:
2a:d0:48:da:6c:86:14:7d:11:8b:12:7e:e9:04:00:
f0:b5:b5:ad:93:54:2a:90:23:72:84:40:cc:a8:48:
69:e4:6c:7c:0b:d3:97:f6:8f:a0:c3:82:7f:e4:b4:
38:7c:98:6d:1e:b1:7c:77:6f:05:96:41:58:75:73:
72:fd:9a:68:5b:c6:76:a5:dd:cd:ea:b7:67:bb:70:
46:e4:80:70:4e:72:36:4a:eb:c9:1f:2f:6a:bb:a3:
f0:9d:1e:4b:00:aa:03:6b:77:96:ff:ce:e1:26:c1:
98:f2:fc:f7:2a:fb:0a:35:55:5f:d1:47:36:fe:56:
54:8e:b8:69:d5:17:df:b6:6c:06:33:71:65:2d:8d:
70:0d:0a:6b:e8:b6:99:73:52:b3:95:02:91:b4:85:
18:83:50:ea:7e:e2:85:32:11:c7:80:a7:20:36:94:
c9:af:9d:fb:7b:82:7d:e1:e8:43:ad:e6:70:06:39:
6f:ab:2f:cd:56:ac:55:92:4b:81:12:93:80:e5:d7:
e2:ad:2e:3e:63:ca:93:a2:aa:d4:f1:0c:07:60:aa:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:00:E3:A8:D7:53:66:A1:8F:7E:48:B2:D3:EB:56:45:C6:3E:6F
X509v3 Authority Key Identifier:
keyid:7E:07:32:CF:57:4A:84:22:29:36:D3:A8:EC:65:2E:F3:37:D2:52:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/66f3543ca79f61c868484a770eacb0f6db65c87c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/6b2c33fa01901f703e3730e28e99eb8bc4cba62a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.88.0/22
Signature Algorithm: sha256WithRSAEncryption
47:40:96:63:44:a0:f6:08:e0:63:0d:67:04:2a:94:db:a1:19:
8b:c9:88:cb:b2:6b:9e:ad:8f:5f:87:f0:5c:d4:2a:88:5e:1e:
9c:dd:12:29:cc:f0:cf:14:5f:9e:a1:60:9c:46:3e:31:cd:e6:
b1:90:06:f7:52:13:a5:da:50:58:5d:05:04:69:83:0d:e6:89:
bc:d8:be:67:e6:61:26:48:79:e7:a5:5b:2f:5b:65:06:55:ec:
70:27:9a:f9:69:bb:46:33:98:55:a2:f0:bb:e2:ba:fd:cb:8c:
1a:94:fe:12:14:f3:f4:6a:4d:ed:4b:9a:b7:98:57:98:39:98:
20:d1:c1:b3:f9:8b:b2:d3:f3:fb:55:dd:f6:93:41:e6:6c:ee:
f3:11:65:de:c1:a9:15:62:64:33:06:73:f9:77:83:67:f1:a1:
5e:90:dc:b0:6f:2e:ac:4a:10:19:f2:62:91:05:a6:75:99:8f:
0e:b2:1b:bb:17:32:f2:28:21:84:2b:b1:b9:49:4c:26:ba:24:
1d:9a:01:e5:11:cc:3f:80:65:46:15:06:1a:88:2d:ad:6e:2b:
76:6c:f6:2c:24:b9:25:5f:c6:24:de:23:6e:e5:9e:3a:b6:3b:
42:49:86:05:55:cd:38:ba:f6:1a:00:2b:46:7f:cc:38:6e:54:
bb:3a:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org