Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/758a116c443a46168a08a628be4df9149a26db8f.roa
File: 758a116c443a46168a08a628be4df9149a26db8f.roa (raw, json)
Hash identifier: QnOM9zGFooLNxGOTim6qKvB7ycCnq0k3sTZALJ5/pTI=
Subject key identifier: C2:3B:BD:A1:71:49:AF:B9:47:42:5A:92:FA:FC:9B:F0:8B:BF:4B:44
Certificate issuer: /CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Certificate serial: 1FD0C5
Authority key identifier: 6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/758a116c443a46168a08a628be4df9149a26db8f.roa
Signing time: Fri 24 Mar 2023 08:30:10 +0000
ROA not before: Thu 23 Mar 2023 08:30:10 +0000
ROA not after: Sat 22 Mar 2025 08:30:10 +0000
asID: 265775
IP address blocks: 191.97.64.0/24 maxlen: 24
191.97.65.0/24 maxlen: 24
191.97.66.0/24 maxlen: 24
191.97.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085061 (0x1fd0c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Validity
Not Before: Mar 23 08:30:10 2023 GMT
Not After : Mar 22 08:30:10 2025 GMT
Subject: CN=758a116c443a46168a08a628be4df9149a26db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:10:f2:8c:53:e2:45:1d:e3:f5:7e:0e:fb:
e0:30:60:6f:f1:07:02:63:43:6d:34:2c:1a:dc:6a:
11:49:5b:1f:97:18:8b:80:57:ef:f7:d4:99:9b:71:
6a:93:3a:0e:6f:37:eb:02:3e:33:f5:30:be:c4:ba:
ec:11:ce:d8:f2:a6:db:3c:a4:92:97:6c:bc:07:06:
b1:54:a4:90:e0:72:9c:82:be:c2:ea:11:c3:fb:03:
16:6e:d0:e7:93:07:4d:a9:3b:c7:5b:23:70:01:c8:
5a:a1:48:90:98:c4:f9:69:8c:5c:ba:7e:42:45:b1:
d3:21:c3:b7:87:de:28:09:5f:a2:2a:7a:d9:9e:5e:
2c:97:09:95:7b:b4:d8:9f:57:b3:68:55:25:bd:91:
2d:a2:5a:ea:0d:c2:58:fc:d4:c9:d0:be:a3:4c:01:
98:28:07:64:13:a7:40:5e:0d:1b:7a:10:65:c7:48:
fb:eb:f3:7b:16:8d:f9:cf:61:bc:2c:28:62:82:53:
7b:96:35:35:bf:22:7b:79:63:d6:d3:56:c7:cd:f3:
0c:ab:51:60:b5:dc:40:99:75:ea:2d:d7:88:0c:68:
60:0d:ba:67:eb:98:26:d8:dc:29:cc:ca:c8:77:a0:
a7:bd:ce:bc:dc:96:1b:6a:6c:00:bd:a8:6d:3f:c0:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:BD:A1:71:49:AF:B9:47:42:5A:92:FA:FC:9B:F0:8B:BF:4B:44
X509v3 Authority Key Identifier:
keyid:6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/758a116c443a46168a08a628be4df9149a26db8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/68f7a0910bc6c4f99cea989c6355a0951ef0b528.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:5e:a6:d0:f9:74:78:c4:f7:6b:61:72:74:36:69:46:0e:61:
ae:31:8c:5a:83:13:69:6c:93:46:50:c8:1f:70:e7:1c:cd:bf:
48:3b:4c:ca:9d:dc:01:3b:e7:c2:90:c0:07:ff:48:44:b3:a1:
ea:fe:be:12:5e:ac:33:f1:b3:b4:8a:45:8c:14:d8:7f:8f:7d:
e1:f2:a9:c3:62:47:06:d6:c1:7e:47:01:83:1a:fc:f9:5d:b6:
7e:ab:ea:70:7f:8e:52:bc:c2:a2:cb:c7:7e:80:ee:0b:fe:8d:
f9:c0:b8:d1:89:e5:9e:b1:3d:2c:44:db:23:9f:6e:02:a6:38:
17:87:5a:c7:bd:9e:10:d1:23:49:f2:a6:ca:17:34:70:bc:f4:
4a:38:e1:e4:b2:06:22:0c:1d:51:5c:ad:51:c9:d1:c0:92:7c:
8c:91:c3:5d:95:d8:6e:21:a8:94:d2:4a:9f:ad:a5:2f:fe:66:
5f:db:39:0a:03:f1:aa:99:68:66:37:d8:35:4c:a4:f4:cd:87:
83:0b:f4:36:29:28:36:bd:5e:74:56:eb:10:8c:b4:0f:6d:87:
7b:52:91:13:8e:39:21:07:e5:aa:48:79:0b:4e:b4:e6:d0:84:
5a:b8:a0:50:4d:a3:8d:d1:e2:ed:8a:b1:5b:33:80:c4:89:80:
f8:75:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 14:56:35 2023 by rpki-client on console-ams.rpki-client.org