Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/798707d102cfa383166780359a784e8519463cc6.roa
File: 798707d102cfa383166780359a784e8519463cc6.roa (raw, json)
Hash identifier: I7OjiahDnPo9p0qFkannPkS7a19tHdcsXh3/XgZ+HN0=
Subject key identifier: 23:A4:EA:27:6A:B3:74:F5:CB:91:F3:0E:ED:C0:23:C7:64:34:6A:3F
Certificate issuer: /CN=14544d678d65a7bfc793373410f1c5964d13b336
Certificate serial: 1E0744
Authority key identifier: 4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/798707d102cfa383166780359a784e8519463cc6.roa
Signing time: Sat 04 Feb 2023 18:32:01 +0000
ROA not before: Tue 31 Jan 2023 00:14:42 +0000
ROA not after: Mon 03 Feb 2025 00:14:42 +0000
asID: 262196
IP address blocks: 168.121.208.0/22 maxlen: 22
181.118.208.0/20 maxlen: 22
190.4.112.0/20 maxlen: 22
190.184.240.0/20 maxlen: 27
2800:ab0::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967940 (0x1e0744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14544d678d65a7bfc793373410f1c5964d13b336
Validity
Not Before: Jan 31 00:14:42 2023 GMT
Not After : Feb 3 00:14:42 2025 GMT
Subject: CN=798707d102cfa383166780359a784e8519463cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:6d:6a:20:66:81:58:91:59:3c:53:61:d9:
e4:81:32:7d:c9:91:c7:d9:6c:58:69:7e:d7:30:ea:
b8:e5:33:71:b4:1a:3f:98:2e:95:a1:83:62:47:33:
89:d1:c6:02:e8:04:55:84:38:5d:d9:e9:b2:2c:c4:
8a:fd:40:0b:7f:20:3b:b0:f4:7d:1f:b9:35:bb:bd:
cf:61:42:31:f2:b7:8c:8f:9b:b7:c3:d0:83:f9:8b:
5b:83:67:d1:73:ae:37:b9:69:7d:1d:31:a3:b9:e2:
7c:df:bb:41:7b:f2:fb:6a:f9:3f:8c:4f:84:29:77:
d5:9b:55:d8:d2:a7:95:d9:e5:7a:15:f2:62:f0:f8:
59:84:e1:6b:7a:00:f6:17:e0:c1:1b:a9:3c:d9:30:
cd:47:e3:f3:16:bf:8c:c2:af:88:b2:e3:b9:2d:16:
06:47:40:ba:ad:70:31:51:a7:bd:a8:8e:8a:cc:92:
1f:36:67:7b:e2:10:3c:7d:56:17:fc:1b:61:63:9b:
5c:03:21:ed:5c:f3:d1:d8:d7:96:49:cc:c3:8f:7a:
af:10:72:29:88:b8:fa:18:43:c3:56:15:e6:9e:08:
7f:d3:6f:9b:13:b2:4b:32:1f:45:1c:2f:e0:61:f1:
24:02:38:f3:f0:65:63:b0:19:c1:75:52:94:66:d6:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A4:EA:27:6A:B3:74:F5:CB:91:F3:0E:ED:C0:23:C7:64:34:6A:3F
X509v3 Authority Key Identifier:
keyid:4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/798707d102cfa383166780359a784e8519463cc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/14544d678d65a7bfc793373410f1c5964d13b336.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.208.0/22
181.118.208.0/20
190.4.112.0/20
190.184.240.0/20
IPv6:
2800:ab0::/32
Signature Algorithm: sha256WithRSAEncryption
97:22:f0:cd:01:43:db:ab:f9:5b:81:90:fa:df:c8:7c:c3:87:
e9:a8:c7:40:ee:95:c9:2a:de:93:9f:8b:0b:f8:c7:dc:d3:38:
8b:10:b1:15:35:1b:66:8f:27:36:61:1d:3c:a1:1c:28:12:86:
09:0e:0a:e2:45:fd:74:fc:d0:44:f6:ab:c8:86:4a:6d:c8:00:
64:8d:4c:09:cd:43:64:16:5f:f7:ea:5c:c9:8f:70:ab:54:06:
d8:7e:bb:69:f9:c4:69:bc:61:2f:71:c2:4b:62:ab:69:15:e2:
f8:67:9b:fa:21:bd:66:29:8b:c7:10:d4:d5:09:09:8c:79:bb:
b0:c4:77:5c:67:31:cd:61:c0:22:3d:f8:9f:1e:d5:83:59:a0:
ae:a5:d1:ac:00:37:ec:79:4f:a7:a3:be:91:2f:8a:62:13:b5:
16:45:15:56:ca:e9:9d:6b:b8:2b:64:db:cc:fe:bb:bc:d0:2e:
fa:63:d4:9f:d7:2a:e7:2c:10:7e:de:17:5f:eb:3d:06:4d:6f:
be:90:73:a9:81:c7:5e:03:e5:42:5d:36:3f:91:9e:75:c0:a5:
2c:ca:48:85:c1:32:ee:bf:5c:bb:08:78:be:40:08:78:f7:24:
06:ae:d6:9b:9d:cc:0c:4d:ad:fe:4f:97:0d:0b:76:da:c8:45:
4f:b9:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org