Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/0e2946d35aa54a6df3e9de7576bb0bd543e0ecef.roa
File: 0e2946d35aa54a6df3e9de7576bb0bd543e0ecef.roa (raw, json)
Hash identifier: dy6lRM9UGq6iNbrQL0mZb5UycRzkWzmVEt3x424h2k4=
Subject key identifier: 74:1D:A3:22:F6:41:A4:4E:7A:ED:B3:E6:94:B5:3E:E7:22:F5:02:A9
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 0DFE48
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/0e2946d35aa54a6df3e9de7576bb0bd543e0ecef.roa
Signing time: Wed 24 Mar 2021 14:32:25 +0000
ROA not before: Wed 24 Mar 2021 14:32:25 +0000
ROA not after: Tue 24 Mar 2026 14:32:25 +0000
asID: 62913
IP address blocks: 168.195.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917064 (0xdfe48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Mar 24 14:32:25 2021 GMT
Not After : Mar 24 14:32:25 2026 GMT
Subject: CN=0e2946d35aa54a6df3e9de7576bb0bd543e0ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:c5:a9:22:0e:26:df:56:0d:e4:54:15:f8:
fa:3a:fe:f6:bb:09:ea:71:74:dc:4d:bb:1e:97:46:
77:0a:fc:1e:dd:48:ae:6d:a4:dc:9f:ec:92:d7:4b:
21:db:35:9c:a1:7c:aa:47:42:c3:93:c5:cc:e6:e0:
69:39:11:a9:db:49:60:08:78:f5:bb:82:31:12:ae:
72:54:01:42:94:70:75:c2:e0:5d:3a:77:25:3c:ab:
5f:d3:62:32:c3:24:71:b5:04:24:b5:e7:8a:9e:04:
7e:6f:35:fe:62:a7:87:55:c1:4b:23:5a:e6:3b:b0:
15:8e:48:e2:52:db:8d:8e:3d:48:1b:a8:f0:71:5d:
b4:88:16:fb:d1:85:a4:64:e4:ff:f4:2b:b9:89:c7:
07:e1:86:40:bd:9c:45:0e:22:cd:ee:5e:b1:73:dd:
f5:21:cc:16:1c:df:bd:cd:b6:3a:4d:16:ad:c5:12:
bb:10:5b:d6:6d:3b:20:0b:8b:d6:ed:ab:84:84:49:
46:ac:9e:be:b6:1d:46:dc:64:55:ef:1c:b3:c6:57:
85:d9:22:82:73:8f:23:8b:bb:00:70:49:d7:2c:97:
f4:ec:11:c6:50:64:46:9f:33:5e:bb:4b:22:24:47:
8f:9d:4d:44:0d:8b:6f:20:15:bb:4b:5e:a9:bb:45:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:A3:22:F6:41:A4:4E:7A:ED:B3:E6:94:B5:3E:E7:22:F5:02:A9
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/0e2946d35aa54a6df3e9de7576bb0bd543e0ecef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ee:c5:0c:4a:f3:f4:71:7d:cf:86:17:e2:af:b0:8c:5e:ce:
f0:fa:9f:0c:1e:1f:0b:2e:1c:dc:d6:e0:ea:f6:0a:21:b1:eb:
d4:68:83:d2:5f:3e:cc:02:5b:d9:4a:15:35:a2:9c:4b:30:c0:
7d:1a:5e:13:2f:c1:76:48:5e:9d:2d:3e:33:d8:ae:71:60:90:
85:76:f2:2c:ec:52:81:4c:2d:1b:9e:15:6c:54:8b:08:ee:02:
93:56:75:ee:25:5c:11:13:52:d3:16:6e:e2:5b:5d:2f:57:a7:
52:60:6e:1d:18:01:b7:76:c3:b6:b0:1d:46:01:11:bc:fe:4b:
42:8a:fa:b6:c3:fe:e8:b1:34:45:15:51:b8:d5:cc:78:79:66:
af:2a:ed:12:a1:7d:e0:e6:fe:1f:22:2b:a4:9d:e9:70:e5:82:
46:58:b2:d5:2c:60:51:96:03:7c:4e:10:d7:50:49:28:35:ea:
ff:7f:a9:e3:eb:f1:f2:26:52:6e:bc:dd:54:d7:11:6c:61:af:
fc:0f:d8:4e:9f:b2:9d:13:97:72:13:61:34:1e:59:89:24:08:
30:53:dd:83:86:93:f7:f3:bb:4a:29:62:a3:a6:63:c0:7c:ed:
85:10:30:1a:9b:01:ba:7c:f3:ee:b6:44:56:48:b1:5f:f7:64:
27:bf:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org