Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/75d9d49a4f3d55b65115dad5addb953a344ca1bd.roa
File: 75d9d49a4f3d55b65115dad5addb953a344ca1bd.roa (raw, json)
Hash identifier: lk94iN0b/EFxTxl6+87+9ZZ6LsysMVPsVDSpUInIX+4=
Subject key identifier: 93:8B:E2:AE:7C:F8:93:8C:2B:62:FA:41:6C:A9:2B:FB:A8:3C:28:F6
Certificate issuer: /CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Certificate serial: 1FD259
Authority key identifier: 6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/75d9d49a4f3d55b65115dad5addb953a344ca1bd.roa
Signing time: Fri 24 Mar 2023 08:32:30 +0000
ROA not before: Thu 23 Mar 2023 08:32:30 +0000
ROA not after: Sat 22 Mar 2025 08:32:30 +0000
asID: 264746
IP address blocks: 191.97.64.0/24 maxlen: 24
191.97.65.0/24 maxlen: 24
191.97.66.0/24 maxlen: 24
191.97.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085465 (0x1fd259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Validity
Not Before: Mar 23 08:32:30 2023 GMT
Not After : Mar 22 08:32:30 2025 GMT
Subject: CN=75d9d49a4f3d55b65115dad5addb953a344ca1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:02:4e:7f:0c:75:2f:fb:08:4e:fc:9a:44:
e5:48:c3:a1:8e:c2:4e:b9:25:c1:7a:bb:9f:39:90:
0f:0b:7b:c5:10:c4:2d:8f:ca:e5:8c:98:22:9f:eb:
a4:a5:07:53:fb:9d:96:11:7f:a5:dc:58:f2:9c:5d:
47:b3:be:1d:c6:ce:ce:72:80:50:e8:69:60:7f:c0:
78:79:59:74:dd:f2:da:c7:d2:4a:2c:91:50:ba:f9:
42:c0:3e:d5:05:83:dd:82:20:3d:c8:e9:75:47:ce:
74:cd:7d:4a:16:0a:ad:87:14:64:ab:9f:0f:6f:70:
5c:a3:71:56:c7:e2:2b:3c:c3:0b:02:fa:d3:80:38:
1e:1e:82:fe:82:c0:cc:ff:92:f2:6d:a7:a3:20:3d:
85:cb:a4:e4:99:9a:31:9f:4b:eb:69:5b:bf:95:1d:
42:54:16:41:ba:45:f9:ad:3c:59:0b:ce:78:ee:e6:
2f:4e:cb:44:f2:f0:3d:de:0b:6d:a8:9b:4c:c1:9d:
a5:d1:79:1a:40:1d:33:83:77:45:d3:4d:2f:d5:dd:
30:57:f0:35:67:2d:df:ab:a3:59:50:11:2e:44:cd:
c1:2c:14:60:07:11:cb:06:b5:83:86:44:fd:1c:d1:
30:40:99:cc:27:06:1a:62:e1:53:6d:f1:e0:86:f4:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:E2:AE:7C:F8:93:8C:2B:62:FA:41:6C:A9:2B:FB:A8:3C:28:F6
X509v3 Authority Key Identifier:
keyid:6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/75d9d49a4f3d55b65115dad5addb953a344ca1bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/68f7a0910bc6c4f99cea989c6355a0951ef0b528.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:87:c8:c5:04:6e:fc:a6:80:22:f6:a8:a6:e9:64:12:89:88:
1d:28:a4:53:74:3e:bb:e9:60:02:af:c6:5a:b6:fe:0d:ad:88:
45:3d:ad:bc:1f:01:20:1c:38:95:5f:42:fb:c6:10:02:93:43:
3f:d5:e8:d6:61:25:93:e1:87:ed:3e:47:9f:05:05:ef:0e:42:
35:6e:a1:21:be:4b:44:a0:99:4e:fa:8e:05:9c:e6:11:63:13:
f9:78:c4:2c:45:49:66:6d:f0:4c:8b:08:18:ff:b9:0f:40:6c:
4f:5a:6f:41:ed:fa:b5:da:e2:27:b9:25:26:d4:a3:5b:32:76:
01:10:39:d5:d3:44:e0:a4:d8:c6:0e:c3:99:de:80:23:33:bc:
00:8b:39:94:da:80:a3:b6:a0:b3:b2:1f:5f:64:9c:e8:30:61:
76:06:b5:cf:35:57:65:4e:ce:91:93:70:0f:bc:eb:9e:7b:d8:
48:55:24:44:21:04:fe:c8:53:8d:96:df:5d:6c:53:dc:85:df:
a4:4d:5d:c6:b1:29:d6:9b:89:be:23:5b:bb:17:95:ef:2a:6e:
02:8b:e1:4d:00:ca:8f:cc:94:20:d0:4b:3f:ec:13:67:4b:d2:
2b:e9:34:2c:c8:58:a7:11:9f:96:c0:54:a2:de:03:5a:e8:c0:
29:2c:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 15:01:11 2023 by rpki-client on console-fra.rpki-client.org