Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/28f257bdcff7588d07c9e493165c3961cabb321f.roa
File: 28f257bdcff7588d07c9e493165c3961cabb321f.roa (raw, json)
Hash identifier: mEm2eMMyNw1my+Pr1Wuz5+operYtkKYmiP+9scmPokk=
Subject key identifier: 2C:5C:F8:53:BD:67:86:88:5C:05:19:5D:25:AB:47:E6:0F:90:95:75
Certificate issuer: /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial: 1A4F19
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/28f257bdcff7588d07c9e493165c3961cabb321f.roa
Signing time: Wed 05 Jul 2023 16:04:24 +0000
ROA not before: Tue 04 Jul 2023 16:04:23 +0000
ROA not after: Sat 05 Jul 2025 16:04:23 +0000
asID: 64139
IP address blocks: 167.249.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724185 (0x1a4f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Validity
Not Before: Jul 4 16:04:23 2023 GMT
Not After : Jul 5 16:04:23 2025 GMT
Subject: CN=28f257bdcff7588d07c9e493165c3961cabb321f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:76:88:74:ea:30:88:56:61:9e:22:3e:80:
3f:d3:c2:4d:2f:6a:4b:93:c5:5c:38:19:e7:32:46:
a1:2a:ce:c5:3c:11:e0:ab:48:4e:5d:74:01:ef:6b:
62:40:f2:97:62:8c:c3:c8:b6:e7:6a:82:bd:54:d0:
34:2d:5f:f3:b2:8f:fc:8d:6a:fc:19:00:72:87:ca:
c3:ba:ec:f2:b0:2c:00:b8:ef:6e:ff:df:79:9c:96:
e5:0c:f2:4c:2f:cc:3e:4c:f6:12:86:4b:c6:a2:74:
f2:fe:a5:13:f1:9d:79:4a:2b:4f:38:81:77:4f:80:
55:35:1c:67:d3:0e:d6:57:89:a2:d8:7f:27:ab:62:
0c:d2:04:2c:fb:49:bd:a0:a8:e9:8f:6b:86:29:a6:
46:56:d9:62:26:3c:6d:30:b6:ff:7e:be:46:5f:4b:
71:f7:2a:8f:af:06:b5:2e:09:78:95:c4:df:96:ac:
80:2e:a1:93:8b:89:2c:54:e6:de:c6:11:d0:38:c2:
83:72:4f:36:c1:fe:94:80:9e:a8:c3:a7:98:dd:76:
84:50:00:7d:18:00:f0:bc:6a:9c:c7:6d:f7:61:16:
6b:f4:7a:15:bc:a7:aa:7a:ac:08:9e:96:8a:48:3f:
8f:9a:10:a7:27:6a:75:53:28:2a:04:fe:6e:08:2f:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:F8:53:BD:67:86:88:5C:05:19:5D:25:AB:47:E6:0F:90:95:75
X509v3 Authority Key Identifier:
keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/28f257bdcff7588d07c9e493165c3961cabb321f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.29.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d7:f9:44:b1:cb:51:b5:86:26:89:f2:7c:4a:5a:cf:1b:ab:
5f:76:8a:72:4d:8a:b6:a4:28:5a:9a:48:7a:56:db:29:f8:3a:
b3:bf:2f:b8:9e:fc:2a:ac:c8:96:e2:31:8f:e9:db:30:31:46:
fb:52:30:3f:56:df:04:82:9e:14:c4:85:d0:b7:b4:17:b1:d2:
48:94:70:7a:3f:44:77:4e:33:6e:f8:cf:e5:38:d0:90:dc:1c:
a4:8e:15:3d:82:9b:c7:61:50:e9:79:79:72:ab:3c:63:20:78:
54:16:0d:b4:b6:0b:77:f3:51:4a:4c:59:49:6d:1d:a4:69:89:
67:f2:49:82:66:b7:d7:db:4a:74:6e:62:2b:f5:8a:00:c5:55:
c4:b9:96:c5:e4:e2:c3:2e:80:70:b4:4b:21:6a:4a:64:f6:3c:
e3:9a:4e:1b:66:d2:08:c0:90:d3:c1:1e:31:54:5d:fb:02:d1:
fa:69:0d:4d:5a:81:d3:49:ca:aa:6e:39:5f:fe:e9:08:2c:db:
59:ce:40:c0:75:cb:59:91:b6:e2:bc:ba:d3:e7:5e:a4:ea:0d:
54:12:f0:98:46:fc:69:31:a4:0a:c4:dc:d4:31:8a:19:3a:1a:
46:29:49:44:e6:b9:62:af:0d:bd:04:b0:ab:36:62:17:7d:d4:
c7:71:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 15:09:53 2023 by rpki-client on console-fra.rpki-client.org