Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/689d535c5fe576c9c660f16b3185f69dee0702c6.roa
File: 689d535c5fe576c9c660f16b3185f69dee0702c6.roa (raw, json)
Hash identifier: RFuRC8mXvQI6m1WGk8ZXV8GgNeC3F0aYVgpSDLmPtsw=
Subject key identifier: 3F:02:72:E9:9E:C9:76:0B:C3:03:54:18:E0:E2:92:64:DE:DD:D0:C0
Certificate issuer: /CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
Certificate serial: 0E6983
Authority key identifier: 3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/689d535c5fe576c9c660f16b3185f69dee0702c6.roa
Signing time: Wed 14 Sep 2022 15:15:44 +0000
ROA not before: Wed 24 Mar 2021 14:31:58 +0000
ROA not after: Tue 24 Mar 2026 14:31:58 +0000
asID: 264685
IP address blocks: 168.227.96.0/22 maxlen: 22
168.227.96.0/23 maxlen: 23
168.227.96.0/24 maxlen: 24
168.227.97.0/24 maxlen: 24
168.227.98.0/24 maxlen: 24
168.227.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944515 (0xe6983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee39d7b40ca91de2bb1bda2380af977ef9565ef
Validity
Not Before: Mar 24 14:31:58 2021 GMT
Not After : Mar 24 14:31:58 2026 GMT
Subject: CN=689d535c5fe576c9c660f16b3185f69dee0702c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:63:06:ab:89:d1:de:16:9f:f6:21:00:66:
d1:ab:7d:cd:76:9a:e8:fd:fa:29:a6:73:93:e4:b6:
78:e4:ad:d0:fe:6f:ef:3c:39:7d:1f:21:5b:2b:1e:
f4:b2:d7:a2:90:bb:84:49:6d:c9:22:28:d0:f3:11:
5c:2d:4f:e7:03:d1:20:34:d3:13:08:31:ff:b8:fa:
3e:ca:9e:14:e2:de:a5:13:45:84:aa:06:e6:ac:57:
27:5a:30:64:bb:e8:be:9e:e6:9e:be:c5:6f:f0:eb:
eb:e2:a1:5f:6e:b1:e3:00:51:76:0d:cf:7c:bb:47:
cc:f8:62:bc:33:43:1f:55:41:ff:db:ee:16:2e:16:
9a:35:67:87:8b:44:bb:5a:7c:96:06:04:bd:8e:38:
12:50:b8:d3:46:34:07:2b:15:79:eb:f0:8a:29:17:
39:ee:f3:18:f5:09:41:3f:76:76:47:5f:82:c3:33:
2c:af:f5:b8:59:43:15:28:a2:a7:98:2e:ab:d3:57:
fb:c9:6d:fc:78:1b:7a:a9:78:ea:c8:97:ed:7a:47:
50:6f:e2:d1:0f:41:9e:db:73:79:73:e1:e2:c6:f3:
ec:d8:db:7e:e7:44:b1:2e:26:25:7d:ff:fe:87:1a:
6b:dc:7d:cf:c6:d3:c7:cc:da:21:06:10:3b:81:f9:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:72:E9:9E:C9:76:0B:C3:03:54:18:E0:E2:92:64:DE:DD:D0:C0
X509v3 Authority Key Identifier:
keyid:3C:BD:28:88:B3:BB:65:D5:5D:95:7F:11:88:FC:FC:BA:9D:3E:3E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/689d535c5fe576c9c660f16b3185f69dee0702c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e6a2bab0-342e-4e23-b634-7af7d3cad384/2ee39d7b40ca91de2bb1bda2380af977ef9565ef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.96.0/22
Signature Algorithm: sha256WithRSAEncryption
32:7d:75:24:d2:24:d1:31:e1:85:57:d4:57:34:e5:42:43:d4:
ce:81:54:34:6d:c1:77:83:35:74:a9:ea:d8:06:85:7d:ec:12:
72:35:35:e6:94:b4:17:15:95:c6:37:21:b9:7d:d9:f3:52:da:
0e:ce:b3:b4:9f:9f:d9:8b:e2:fa:db:1f:d6:1a:28:7e:b8:85:
99:22:82:a8:66:be:c0:ad:30:b9:1d:e9:c9:72:53:52:9c:40:
b0:e6:14:79:e9:3e:a5:a6:d7:b2:07:ec:64:9b:77:0f:31:5d:
ff:48:9a:35:30:f3:ba:fc:72:c5:d5:7b:95:6c:43:8f:7b:eb:
2f:01:78:1d:80:94:cf:62:88:e2:56:e2:ec:97:03:fe:64:92:
ef:5f:94:a0:16:f2:98:8a:b3:14:47:68:87:2a:f9:56:4c:8b:
f0:ac:0e:78:84:95:fc:bb:00:7f:db:21:2c:05:80:11:37:fe:
ab:0f:51:a9:0c:59:73:72:3a:2d:9f:25:56:10:59:73:74:9f:
c8:3f:3f:53:f6:0c:dc:70:ae:8a:46:24:86:29:d3:f2:18:43:
86:79:10:90:44:a6:7a:de:b4:bc:fb:a7:fd:90:2b:bb:08:63:
76:c1:c2:2b:f7:60:cb:fe:68:ca:78:9b:12:93:84:f0:47:09:
5b:ce:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 14:51:01 2023 by rpki-client on console-ams.rpki-client.org