Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/e17015a6f2218fd08e260d1f80c6150ab949afb9.roa
File: e17015a6f2218fd08e260d1f80c6150ab949afb9.roa (raw, json)
Hash identifier: RXKFsWx59PPYmwQcslqCpRm1odn6snp8pBK8xhzkdSg=
Subject key identifier: 43:BA:04:65:5F:CD:36:5E:2F:03:63:10:78:2E:39:BF:A9:A7:70:9F
Certificate issuer: /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial: 12947D
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/e17015a6f2218fd08e260d1f80c6150ab949afb9.roa
Signing time: Tue 30 Aug 2022 20:04:04 +0000
ROA not before: Wed 29 Sep 2021 03:00:00 +0000
ROA not after: Fri 29 Sep 2023 03:00:00 +0000
asID: 64127
IP address blocks: 167.249.28.0/24 maxlen: 24
167.249.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217661 (0x12947d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Validity
Not Before: Sep 29 03:00:00 2021 GMT
Not After : Sep 29 03:00:00 2023 GMT
Subject: CN=e17015a6f2218fd08e260d1f80c6150ab949afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:76:d0:b8:f1:f4:29:f5:51:32:3f:6e:5f:
af:b9:f8:7e:4e:00:3a:14:49:8b:59:f2:f9:66:2e:
dd:cc:d7:b8:dd:08:9a:fc:82:2a:6e:42:77:08:d3:
03:6c:46:9d:0a:46:cf:34:42:e4:9d:31:16:9c:47:
f2:63:d4:0b:72:72:4e:19:73:82:d6:59:1c:dc:b4:
09:6c:84:98:ba:4e:c3:77:72:c0:52:96:12:cb:bc:
fc:98:17:b1:64:3d:93:d6:0b:e9:e8:1a:37:6f:0c:
ea:0f:f5:fc:d3:97:35:50:bc:7a:fc:0d:f3:fa:6b:
c6:b5:3b:2f:af:9d:9d:b5:ca:8c:04:0f:91:e3:a0:
d3:23:fa:8c:ba:da:f6:4f:e4:8b:c0:98:10:b1:24:
5e:68:e8:9d:10:df:94:56:4a:4f:66:74:db:10:b2:
18:98:ae:6d:54:cd:d6:55:b7:37:5e:13:46:b7:85:
59:16:e1:fc:7e:96:c0:4d:ee:04:8b:a1:d3:18:f5:
60:4e:38:76:83:5f:ee:e7:75:10:ed:52:77:41:cc:
cb:c6:99:79:40:1a:46:70:60:e0:06:ed:bd:0b:2b:
00:94:bf:be:0d:e6:9e:39:fb:fe:f9:be:f7:55:fa:
9a:78:d5:1c:9e:c8:af:0e:5a:d2:84:60:15:7c:a1:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:04:65:5F:CD:36:5E:2F:03:63:10:78:2E:39:BF:A9:A7:70:9F
X509v3 Authority Key Identifier:
keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/e17015a6f2218fd08e260d1f80c6150ab949afb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.28.0/24
167.249.30.0/24
Signature Algorithm: sha256WithRSAEncryption
06:50:44:8a:b9:61:a4:cf:30:0d:d5:dd:51:5f:1b:57:9b:09:
ae:b4:3b:6a:2f:f9:d3:33:11:76:6e:04:d4:c0:8e:fa:92:ab:
ee:83:b5:be:d1:bc:72:cd:1e:2e:6f:a7:28:8e:b2:75:2b:10:
34:44:c8:9e:e4:c3:43:53:62:98:0a:16:aa:23:a9:b1:e6:65:
84:b8:c1:88:90:5e:23:cb:dc:d7:c3:a8:2f:67:c5:d8:4d:60:
e9:ea:95:c3:19:ac:9b:08:18:92:ff:1f:80:77:de:08:81:8a:
df:1c:b7:09:2a:de:c3:2f:76:23:05:fe:46:57:73:57:37:f7:
77:26:33:3a:2d:4b:6f:00:29:8a:1c:c2:ad:ca:b2:dd:d7:96:
58:31:29:08:20:8a:19:0c:3a:2b:21:c6:2d:b1:9c:ee:1a:93:
d1:bc:ee:2a:f5:6e:17:0c:4c:a2:70:d1:8a:fe:3f:fb:cb:68:
a5:f8:75:6e:8e:4f:d1:86:18:9d:66:bf:07:57:98:81:34:20:
02:1b:62:49:97:e3:1d:a2:69:16:0a:4d:7c:ea:f1:7a:d0:1c:
44:6e:14:c6:e0:28:8e:c5:ad:ca:c7:21:96:85:dc:05:4b:ba:
bf:23:e6:92:3f:55:98:18:31:e5:47:86:72:54:b4:38:21:66:
58:9b:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org