Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/afd3e0ee278a1db210ac47e35e58515d74e2599d.roa
File: afd3e0ee278a1db210ac47e35e58515d74e2599d.roa (raw, json)
Hash identifier: dxHOLW3aeKWwKHHgWlukSFM8xA/f6mZErXeOUdFmccQ=
Subject key identifier: 42:34:94:CC:9B:59:6E:96:50:F9:46:CC:7B:5E:B8:3E:E9:7B:68:02
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 0B046F
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/afd3e0ee278a1db210ac47e35e58515d74e2599d.roa
Signing time: Fri 18 Nov 2022 18:59:46 +0000
ROA not before: Thu 17 Nov 2022 18:52:13 +0000
ROA not after: Mon 18 Nov 2024 18:52:13 +0000
asID: 27768
IP address blocks: 201.217.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722031 (0xb046f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Nov 17 18:52:13 2022 GMT
Not After : Nov 18 18:52:13 2024 GMT
Subject: CN=afd3e0ee278a1db210ac47e35e58515d74e2599d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:41:bb:33:17:6e:de:cc:48:52:ed:26:ec:
0e:f8:44:b3:47:2c:ec:69:27:5a:41:05:b2:6f:3d:
02:82:30:07:89:81:07:a9:f4:1a:8c:6d:03:b6:20:
bd:dc:8d:f6:78:2b:a3:b0:ab:7e:16:ab:4c:ed:5c:
8a:aa:fd:a8:81:eb:7c:f8:79:d5:6c:42:15:50:f3:
d8:c8:e8:09:34:b8:fe:18:54:2b:e9:ee:51:fd:44:
f6:35:5a:74:5e:7b:48:32:c1:4a:24:eb:fb:02:0c:
e6:ed:5e:67:f7:26:cc:76:44:44:27:92:0b:c3:5f:
3d:ae:8a:53:41:08:80:47:ac:fc:de:be:0a:17:cd:
bb:df:a5:a8:fa:0b:3e:9b:2e:69:da:7d:3a:c4:6c:
71:f5:23:41:7f:fd:dd:33:6e:67:5b:59:af:c1:8e:
96:62:a4:7c:41:c5:56:23:e6:bb:7a:70:c3:9b:00:
1b:2e:41:ee:47:d1:e8:b3:cd:66:61:a5:08:5b:35:
d7:30:dd:f5:26:29:4b:9c:8c:bd:9f:c6:59:59:3e:
a4:ae:d2:de:68:b4:1f:5e:54:8b:af:92:47:b3:3b:
d8:34:1e:1e:d5:da:63:20:ed:b2:3a:23:e3:ac:29:
e9:30:ba:b9:a3:01:19:85:ce:53:60:bf:31:8b:01:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:94:CC:9B:59:6E:96:50:F9:46:CC:7B:5E:B8:3E:E9:7B:68:02
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/afd3e0ee278a1db210ac47e35e58515d74e2599d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.17.0/24
Signature Algorithm: sha256WithRSAEncryption
96:32:29:b0:d5:81:9a:51:32:90:00:19:10:fb:c2:e4:6f:95:
a7:4a:db:d0:a7:ed:22:a3:a9:b2:85:2c:e2:28:9d:6a:c6:29:
2b:47:7d:96:fb:23:ce:a2:bd:b1:1a:e6:b5:8a:9c:c3:41:8e:
f2:97:e6:d0:c0:03:a6:ab:5a:85:01:a6:0f:bc:a8:79:d4:ab:
91:a4:7d:e0:f8:37:e9:71:9c:42:34:6e:c5:3e:87:23:97:db:
fc:ed:32:28:0f:d5:a7:12:f8:e3:d6:0e:1d:1f:71:9c:c4:0b:
bc:fd:4c:10:7d:f1:54:66:e1:71:f0:97:83:d9:6b:23:88:c6:
57:36:cd:a0:08:ee:69:8e:99:ac:4c:39:ca:b4:b6:17:d6:4a:
36:cb:60:a7:99:e2:7a:45:04:c3:1e:5e:5c:31:9c:9e:e6:bc:
3f:76:73:23:cf:6e:ee:4c:cb:1f:bc:87:08:38:97:7e:bf:b2:
4c:58:8d:49:86:cc:7e:df:3f:37:5f:3d:18:a0:25:39:4a:73:
35:71:aa:5c:fc:a6:0d:69:34:0a:38:90:13:f4:c5:8d:e5:4f:
c4:50:50:09:13:37:e0:29:ce:b2:e3:a7:c6:54:6d:f8:a3:34:
71:c9:4e:85:d5:fb:36:1e:cd:76:9a:67:d4:86:0f:34:b4:f6:
98:24:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org