Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/4c838573c13560628a72e81ead05295ae95b21b6.roa
File: 4c838573c13560628a72e81ead05295ae95b21b6.roa (raw, json)
Hash identifier: vdbz5KevgTP2JCk27GDnfZFbNaPlt4G3p98K7DzDukg=
Subject key identifier: 26:1F:D3:9D:D9:67:27:82:F7:9B:76:29:12:7D:C7:A7:2E:C7:EE:48
Certificate issuer: /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial: 0BFCDC
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/4c838573c13560628a72e81ead05295ae95b21b6.roa
Signing time: Tue 03 Oct 2023 15:38:59 +0000
ROA not before: Mon 02 Oct 2023 15:38:59 +0000
ROA not after: Fri 03 Oct 2025 16:38:59 +0000
asID: 272150
IP address blocks: 192.141.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785628 (0xbfcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Validity
Not Before: Oct 2 15:38:59 2023 GMT
Not After : Oct 3 16:38:59 2025 GMT
Subject: CN=4c838573c13560628a72e81ead05295ae95b21b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:d8:85:4c:00:c9:77:c7:ea:e0:51:c5:84:
70:3c:1e:4f:98:9b:f4:13:cd:56:5f:9b:51:64:b5:
59:84:00:3b:c7:ba:14:1a:b7:d8:1d:fa:75:32:e4:
fd:05:40:cd:50:7e:57:84:a7:97:54:6e:18:b8:3e:
7f:13:26:2f:60:48:77:75:14:ac:4a:67:99:a0:8d:
c8:26:b3:97:a4:f0:31:0b:03:cb:53:44:2e:07:7a:
25:79:f5:c1:a4:6e:fd:76:d9:be:4a:f5:74:9c:ef:
d4:52:04:e8:08:69:cf:30:30:fc:21:aa:b9:f6:55:
ea:a0:47:44:a9:41:3c:07:03:89:dd:8e:c1:3d:ba:
8a:0e:bc:8d:87:08:25:0d:2a:06:96:8e:34:53:79:
ee:f1:44:48:d8:23:67:b5:25:ef:14:3c:9e:ad:a4:
8a:a6:5c:2e:4c:ac:c7:0e:01:df:b3:5a:34:f0:76:
ac:96:e8:7e:43:5a:fa:6a:0a:27:8d:20:08:40:06:
be:25:9a:3c:27:92:0d:36:e9:01:b4:85:85:65:5f:
df:af:e8:ad:08:42:05:7b:1a:ff:6f:00:15:f2:1c:
5d:4b:6a:3a:06:d2:61:cf:07:ec:f8:85:d4:cf:ff:
7b:1f:d8:26:2a:56:2f:c5:ad:20:da:93:8a:03:09:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:D3:9D:D9:67:27:82:F7:9B:76:29:12:7D:C7:A7:2E:C7:EE:48
X509v3 Authority Key Identifier:
keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/4c838573c13560628a72e81ead05295ae95b21b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.20.0/22
Signature Algorithm: sha256WithRSAEncryption
29:9e:b8:c8:76:71:c3:ec:99:44:a4:4e:95:0b:f6:f9:20:6e:
e7:d6:dd:42:71:9d:cd:2f:d1:37:83:11:01:05:42:2e:b4:b0:
ee:a4:8f:b2:d3:55:f3:dd:61:64:4f:d6:7a:42:b9:9b:15:b7:
e9:f1:24:b3:fa:25:21:85:46:d0:dc:6a:38:45:c6:6d:d6:8b:
80:8d:23:06:9a:1f:93:5d:98:79:e8:26:c8:0a:72:de:c5:84:
73:14:8d:0b:3c:ab:62:fb:b5:3a:82:43:1b:20:cb:9c:8a:21:
c7:5d:f0:5f:e4:58:9b:c6:cd:d9:92:3f:2e:59:dd:dd:60:b5:
6d:08:07:bf:37:46:13:bb:7d:58:16:cd:07:7c:03:36:8e:24:
32:34:34:ab:8e:e0:f5:fc:52:02:de:89:0d:6c:55:7d:a2:03:
3a:76:82:fe:2b:a9:8b:86:36:d5:eb:f9:c3:b0:0b:2b:db:9d:
48:bb:36:20:00:31:ae:12:0f:7d:11:4b:81:bf:7f:d6:12:8e:
c9:17:12:94:9a:1d:10:6a:31:72:5d:68:50:60:11:d4:b3:7a:
dc:b6:7e:1b:b6:08:ff:2b:d4:77:96:9e:61:49:dd:4f:c5:5a:
3c:5d:2d:12:28:02:8e:40:dd:12:eb:1a:5e:c3:11:df:ae:f1:
26:ed:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 10:39:05 2023 by rpki-client on console-fra.rpki-client.org