Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/a2813b506892005a3b8f08ed364990403116f4e4.roa
File: a2813b506892005a3b8f08ed364990403116f4e4.roa (raw, json)
Hash identifier: aufgg3VEy5pG7gga2fAq55yTClZvxxxThhDPoQEseJU=
Subject key identifier: F1:20:B7:71:8F:47:52:8F:F4:C7:4C:35:C0:21:00:B5:F5:F0:5E:7B
Certificate issuer: /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial: 0C08A0
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/a2813b506892005a3b8f08ed364990403116f4e4.roa
Signing time: Tue 03 Oct 2023 17:17:43 +0000
ROA not before: Mon 02 Oct 2023 17:17:42 +0000
ROA not after: Fri 03 Oct 2025 18:17:42 +0000
asID: 272150
IP address blocks: 192.141.22.0/24 maxlen: 24
192.141.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788640 (0xc08a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Validity
Not Before: Oct 2 17:17:42 2023 GMT
Not After : Oct 3 18:17:42 2025 GMT
Subject: CN=a2813b506892005a3b8f08ed364990403116f4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:a0:e2:6c:7c:ba:ac:e9:7b:e6:b8:db:fe:
7d:d0:6f:36:9c:c9:07:2e:b1:c9:6c:f5:7f:3c:c2:
0b:27:7d:61:b6:41:69:b8:30:bc:85:e1:bf:44:39:
e9:ee:8e:7c:fd:ae:49:8d:a7:b3:6a:23:7f:b5:71:
c1:9b:e8:ea:00:98:df:73:ff:23:80:2a:83:43:14:
7d:f6:57:92:3b:bb:17:49:17:84:ec:01:df:fd:12:
62:e0:d9:08:20:72:42:34:90:73:31:86:10:ee:46:
7b:76:84:ba:b8:a6:9f:c2:ef:99:19:ea:5c:d5:7f:
04:b0:0d:61:60:b4:59:c3:45:8c:26:a4:92:d6:8e:
26:68:3b:99:7d:dc:2d:db:a8:84:03:63:20:4f:14:
5c:ca:b4:00:b4:23:3c:78:4c:b5:1c:a1:09:f9:d5:
94:d7:fe:4c:a2:e4:30:57:9c:25:e6:10:e1:d0:55:
c3:7f:05:d7:87:7e:3c:ae:a9:5f:52:19:92:ac:b0:
03:24:c7:8c:bd:cc:bd:f9:ae:32:bf:63:90:09:ca:
df:0a:a3:50:83:6d:91:03:d7:28:77:26:5e:39:89:
2f:b2:16:96:0e:eb:07:84:02:fa:80:a6:fa:62:d2:
7e:5c:79:3a:5a:38:5d:5a:a2:74:ba:1e:45:c4:2b:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:B7:71:8F:47:52:8F:F4:C7:4C:35:C0:21:00:B5:F5:F0:5E:7B
X509v3 Authority Key Identifier:
keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/a2813b506892005a3b8f08ed364990403116f4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.22.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a6:de:8d:6d:8e:96:c4:27:0e:df:ac:2e:1d:69:7c:ff:e9:
76:c2:cb:6c:67:21:96:30:d5:b7:d8:33:78:63:06:fd:a2:5c:
19:04:29:6f:c7:69:88:5b:83:02:43:8a:47:7e:6a:76:00:a4:
d5:ee:33:b3:86:8e:63:c4:4d:04:53:04:79:01:8d:20:83:a4:
df:d3:ea:6d:b5:cd:96:42:50:97:f5:d4:43:5a:ef:47:94:60:
39:38:c6:82:90:a4:ed:71:49:22:7a:6f:42:45:a8:fa:ef:a3:
96:c0:f3:14:48:b2:17:f5:17:45:fe:d0:f6:d7:bf:4f:19:e4:
e3:28:32:ee:7a:d8:56:01:cd:ac:2e:05:60:77:af:6a:00:be:
a7:1b:83:6d:7d:93:83:ae:03:75:39:a6:c4:2b:88:7d:46:e1:
db:63:b3:bc:43:33:cb:af:b5:54:e3:7e:fe:87:27:3a:95:b5:
81:57:b6:05:ec:4f:62:99:ce:ae:c3:65:d9:53:49:71:cf:fd:
8f:aa:36:d8:6a:0b:21:39:98:bc:3c:fb:a2:41:78:a3:b1:19:
97:4a:f8:ab:55:c5:ab:68:87:e5:69:9e:95:be:84:26:3f:58:
de:88:bb:41:f3:2c:db:1c:6f:95:f8:2b:dc:f0:60:1d:fd:6c:
4a:39:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 10:39:05 2023 by rpki-client on console-fra.rpki-client.org