Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/b9309afb84aa17cdcd555581b1314f159bdc3bce.roa
File: b9309afb84aa17cdcd555581b1314f159bdc3bce.roa (raw, json)
Hash identifier: Texr2j5/skFy2jLGff2YLZ60HCjY0hJ1zhJvXQrVMjw=
Subject key identifier: 1B:0F:8A:92:AC:10:BD:B9:BD:46:6A:18:AF:75:73:04:84:DF:49:39
Certificate issuer: /CN=14544d678d65a7bfc793373410f1c5964d13b336
Certificate serial: 1DFBFC
Authority key identifier: 4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/b9309afb84aa17cdcd555581b1314f159bdc3bce.roa
Signing time: Sat 04 Feb 2023 05:24:01 +0000
ROA not before: Wed 01 Feb 2023 00:14:42 +0000
ROA not after: Mon 03 Feb 2025 00:14:42 +0000
asID: 262196
IP address blocks: 168.121.208.0/22 maxlen: 22
181.118.208.0/20 maxlen: 22
190.4.112.0/20 maxlen: 22
190.184.240.0/20 maxlen: 25
2800:ab0::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965052 (0x1dfbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14544d678d65a7bfc793373410f1c5964d13b336
Validity
Not Before: Feb 1 00:14:42 2023 GMT
Not After : Feb 3 00:14:42 2025 GMT
Subject: CN=b9309afb84aa17cdcd555581b1314f159bdc3bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:15:4b:b1:85:ae:b1:55:b6:57:5c:c6:5a:
de:10:47:66:f5:54:00:d3:cf:f5:9f:36:73:87:54:
7c:23:02:3f:4e:8b:98:ac:fe:da:2c:61:f8:12:26:
0e:69:b3:14:bc:72:d0:a1:63:9b:22:b3:4a:c9:a0:
c2:d8:38:4d:5c:fa:ab:01:51:f8:4d:b2:e1:dd:c5:
f7:62:22:60:be:d8:f6:8c:34:d3:e3:95:f0:8e:df:
71:d0:59:13:74:79:70:ea:a8:54:35:b5:24:a1:8f:
da:0c:f4:42:9e:a0:b2:7b:c2:5f:83:3d:59:b6:bb:
55:2b:6d:84:1c:e2:f3:e4:42:ce:ed:21:b2:fa:2a:
a1:21:b0:94:0f:e6:91:31:72:47:b9:5a:20:34:e6:
ec:66:83:92:e6:15:fa:7a:d7:9b:ca:5a:4d:bb:88:
d7:76:4c:75:ba:3e:8a:ee:38:33:87:82:02:74:de:
eb:ad:a9:82:d3:c6:46:e5:07:35:2f:3a:ce:86:7a:
95:74:dd:86:d4:93:45:b1:cc:1d:e5:6f:e2:d8:76:
87:42:88:ed:85:b5:26:12:d6:eb:cb:bd:18:ac:22:
14:20:5f:a4:4c:e5:69:60:bf:47:34:0d:ce:17:4f:
33:03:5c:24:2d:d8:61:a9:94:d9:83:36:4e:51:4d:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:8A:92:AC:10:BD:B9:BD:46:6A:18:AF:75:73:04:84:DF:49:39
X509v3 Authority Key Identifier:
keyid:4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/b9309afb84aa17cdcd555581b1314f159bdc3bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/14544d678d65a7bfc793373410f1c5964d13b336.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.208.0/22
181.118.208.0/20
190.4.112.0/20
190.184.240.0/20
IPv6:
2800:ab0::/32
Signature Algorithm: sha256WithRSAEncryption
42:2e:68:31:28:8e:e0:ad:44:56:27:81:83:fc:95:fd:a8:b3:
11:3c:ff:35:11:46:e8:2b:3c:a6:4b:b9:6d:64:cb:17:bf:c3:
65:5c:28:bc:70:70:31:2e:7c:2e:1f:02:c3:36:a7:b3:27:4b:
95:de:b4:b2:92:cd:1d:de:9f:eb:54:24:3a:88:cd:b3:4d:03:
a8:82:5b:6e:ee:6f:c7:93:ed:68:0e:ca:5b:d3:c1:19:8e:48:
11:c9:e1:98:2b:0a:6e:d5:5b:eb:96:ce:ee:77:ea:47:ba:8f:
a9:29:46:df:55:44:b6:5f:e3:84:82:9c:5b:24:0a:2d:c2:71:
72:a2:22:93:2e:a0:64:16:e6:2b:e0:4e:5d:8c:8f:8e:70:84:
ef:8c:66:86:ce:dc:ce:b0:8b:6c:f3:b1:45:0f:a8:20:80:46:
52:f6:e5:38:5e:1d:79:37:26:f6:39:ba:92:42:31:4c:7f:e0:
87:08:39:55:5d:b5:a0:cb:26:88:df:32:37:ec:c7:9d:67:9e:
3d:7b:42:65:70:16:bc:3b:10:87:ad:d2:09:c2:df:ba:10:ab:
5e:e0:d2:6a:1a:c8:e0:f4:d3:24:86:95:7b:29:e4:5c:4a:38:
c7:7f:b8:da:22:a6:8a:ce:29:07:14:79:d0:88:f1:d5:d0:1f:
3e:6e:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org