Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/2d27c3e941b1d56aef04776dd952d65006473939.roa
File: 2d27c3e941b1d56aef04776dd952d65006473939.roa (raw, json)
Hash identifier: v18YhuY8ZRtmiTkKbOsRRTy0Zc22SAkOvGSvQjVxqMQ=
Subject key identifier: 94:73:5F:E7:9F:4F:AA:7A:1B:EB:56:48:41:E3:33:39:A2:3B:33:3D
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 1AA1CC
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/2d27c3e941b1d56aef04776dd952d65006473939.roa
Signing time: Wed 12 Oct 2022 21:29:55 +0000
ROA not before: Tue 11 Oct 2022 21:26:32 +0000
ROA not after: Sat 12 Oct 2024 21:26:32 +0000
asID: 272883
IP address blocks: 157.100.37.0/24 maxlen: 24
157.100.42.0/24 maxlen: 24
157.100.46.0/24 maxlen: 24
157.100.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745356 (0x1aa1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Oct 11 21:26:32 2022 GMT
Not After : Oct 12 21:26:32 2024 GMT
Subject: CN=2d27c3e941b1d56aef04776dd952d65006473939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:67:35:d1:32:d5:e0:8f:0b:32:9d:7b:25:
d3:76:d4:26:53:2a:09:7e:c4:30:c9:7c:e8:c8:25:
fa:b2:e6:76:98:6c:d8:55:f0:5d:92:22:a2:da:91:
29:e6:0c:7a:1a:f1:f8:7b:b3:29:65:ce:9a:de:f6:
00:7e:f7:15:27:96:7c:ec:b9:dc:23:d4:4f:90:37:
f6:7a:9e:a1:45:a1:ee:b0:80:6c:c2:44:d9:cc:c2:
a7:0b:e3:c8:e5:9d:e9:e3:3d:7a:4a:86:4f:2a:e0:
6f:8c:43:aa:19:07:e0:4d:1a:d0:91:18:43:fa:a9:
c9:c5:b8:36:ad:3d:67:82:4b:37:07:18:83:ae:ce:
9c:2f:c1:ea:20:9d:bd:5e:d7:93:2d:00:db:6c:08:
78:89:78:97:53:61:67:2c:e3:e1:a7:30:28:fb:a9:
bd:be:96:4e:46:db:b5:30:b5:27:d0:34:f6:13:20:
69:89:cb:b5:c9:38:05:51:2f:3f:b7:7a:3a:de:9c:
1e:38:af:41:64:ef:46:29:ef:e0:59:b6:ac:1d:02:
42:24:fa:23:1d:12:b4:ec:12:ab:a4:b1:5d:37:a9:
df:9b:cf:86:3b:5a:53:eb:62:97:75:c8:67:10:bf:
bb:9f:90:57:03:5d:ef:98:8f:7d:27:e6:bb:fd:36:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:5F:E7:9F:4F:AA:7A:1B:EB:56:48:41:E3:33:39:A2:3B:33:3D
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/2d27c3e941b1d56aef04776dd952d65006473939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.37.0/24
157.100.42.0/24
157.100.46.0/23
Signature Algorithm: sha256WithRSAEncryption
96:8a:a9:3c:8d:c4:c9:2f:7a:a5:30:24:03:6c:ff:fe:36:8f:
82:55:e8:8f:5d:d7:a6:78:c6:17:58:e1:c8:ed:a2:1b:de:41:
97:39:08:71:0e:51:ef:9a:c5:ef:3e:b1:0d:d4:03:2b:b8:a6:
b0:ac:57:e7:1a:93:3b:81:ed:2f:66:4d:ba:9c:34:ce:9e:3e:
d3:c9:6b:42:ab:cb:05:3e:f9:78:5f:25:24:c1:91:d8:d2:48:
2e:8c:c7:5c:50:1b:99:d7:b3:e8:d3:80:9e:57:38:8d:ae:22:
7b:2b:b4:09:e1:07:3b:97:1d:a4:83:7d:2d:95:ac:34:00:23:
1f:9b:e0:1d:18:bc:d2:8a:b8:bd:55:5a:27:38:d8:7f:4f:bb:
f3:65:41:81:e9:d0:bf:71:dd:61:b4:b9:31:49:b9:31:8f:9f:
8b:75:be:e0:48:54:89:c7:b2:c0:fb:09:52:38:f4:ad:b9:43:
c2:d5:94:e3:b6:14:3a:0f:67:0a:6c:c1:e6:b3:bf:c8:05:51:
22:a5:5e:c6:3a:1c:85:3c:53:21:05:fd:0c:35:f2:dd:60:66:
21:7e:4d:5a:ec:82:1d:b3:17:c3:15:4c:f7:d7:f0:3d:69:5f:
22:0c:55:3d:28:5b:b9:b9:e0:b5:32:9d:01:95:0f:87:17:c3:
87:9b:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 18:14:11 2023 by rpki-client on console-ams.rpki-client.org