Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/cf545d91c7c7886484cb5ed847096efbefad830a.roa
File: cf545d91c7c7886484cb5ed847096efbefad830a.roa (raw, json)
Hash identifier: D3YiMUzor7uSUBiO2OFIE0Di2A+LLcxAQH29gNrmKos=
Subject key identifier: F1:8F:BA:D4:62:63:03:F8:52:A4:FB:C3:3C:A3:39:1F:2F:F8:28:72
Certificate issuer: /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial: 212CD9
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/cf545d91c7c7886484cb5ed847096efbefad830a.roa
Signing time: Mon 10 Apr 2023 13:11:32 +0000
ROA not before: Sun 09 Apr 2023 13:11:32 +0000
ROA not after: Thu 10 Apr 2025 13:11:32 +0000
asID: 264669
IP address blocks: 168.90.252.0/23 maxlen: 23
168.90.254.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174169 (0x212cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
Validity
Not Before: Apr 9 13:11:32 2023 GMT
Not After : Apr 10 13:11:32 2025 GMT
Subject: CN=cf545d91c7c7886484cb5ed847096efbefad830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:74:1d:7a:2b:0c:55:cf:a5:bf:ac:22:f7:
d4:f9:fc:3e:4e:13:ca:57:f9:18:14:c4:fd:26:44:
b7:d1:dc:93:50:04:23:7d:4a:cc:c8:a0:65:3e:a0:
3a:bc:b7:20:15:53:e5:12:58:1f:04:36:21:e9:6d:
96:2a:f2:30:69:ee:3d:38:f4:f1:ba:73:6f:dd:36:
56:ee:01:51:c7:9b:d5:68:9b:d1:a6:4b:97:2a:d7:
b4:2d:a4:e6:73:7b:5f:aa:fc:38:34:0c:0f:e4:95:
cf:4c:eb:41:fb:fc:6f:81:a6:72:83:cc:bb:02:81:
8c:e4:fc:3e:fa:75:ec:a1:83:43:d0:94:71:98:33:
ce:ab:4c:8d:93:b9:0c:93:3d:38:f7:62:d8:5e:57:
30:61:39:f0:b1:77:2c:01:48:83:18:60:27:0d:43:
85:18:6d:ce:6b:8f:b5:a9:89:89:0b:3e:62:95:1c:
12:fc:c2:6e:fa:81:bd:4b:a0:fb:2e:9b:c4:bf:0b:
f0:17:f9:68:1b:48:08:ca:d9:fc:60:4e:b8:3b:d1:
5b:56:96:d1:07:02:bf:82:c0:81:e0:8e:d8:73:a8:
a2:22:47:4f:5c:e8:c4:a2:22:de:4f:73:21:2a:2e:
fd:0c:3d:b3:b1:93:84:e9:11:4f:b8:79:26:f7:fa:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:BA:D4:62:63:03:F8:52:A4:FB:C3:3C:A3:39:1F:2F:F8:28:72
X509v3 Authority Key Identifier:
keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/cf545d91c7c7886484cb5ed847096efbefad830a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.252.0/22
Signature Algorithm: sha256WithRSAEncryption
55:d9:e5:39:56:d9:fb:2f:db:0e:54:14:82:4b:79:f5:69:68:
5f:8f:b6:cb:f5:df:1f:11:2c:68:eb:fa:3d:a5:ff:d0:8e:51:
01:96:96:f0:5a:7c:74:66:b4:5c:81:38:73:6d:2b:46:b4:6e:
66:0e:30:02:9b:c1:c6:bf:c9:d9:67:ef:cd:87:f8:c9:2f:a5:
11:c9:1e:1c:07:0f:0a:e1:3f:e6:bd:b4:78:5b:a5:cc:27:c0:
11:eb:3f:e3:9f:1e:16:0c:d0:fe:9e:06:88:eb:45:48:49:13:
a5:ba:83:cb:ff:45:48:9f:ef:8f:d0:78:6d:8c:07:c4:12:8a:
95:31:e6:fd:63:a4:f7:7d:be:91:38:6e:1f:9c:4b:d2:99:f7:
40:95:c8:6e:74:67:39:cf:fc:f4:e1:8d:49:d5:ee:28:97:d6:
40:96:ab:25:52:f0:d4:fb:a3:7a:e3:b2:be:68:da:18:df:2c:
92:ed:83:d6:ed:02:72:bc:9d:6e:d0:4b:d9:b0:fe:ed:99:b6:
64:3d:e7:5d:c5:31:24:bf:29:30:74:0d:77:9e:73:8f:77:f4:
29:5f:30:53:d2:ca:e6:f6:55:87:ee:a6:52:0e:bb:59:d9:91:
cd:5e:01:6b:9c:0b:d4:16:1f:b9:00:6a:31:34:ba:d8:da:35:
88:64:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org