Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/d5aa714457258ddf47e5de230215d7c5f6732aff.roa
File: d5aa714457258ddf47e5de230215d7c5f6732aff.roa (raw, json)
Hash identifier: COEac933ktBq4TE7/P/+IEvmHqb4v6So544GTQxgz40=
Subject key identifier: AD:BC:53:E7:21:97:76:57:AC:DA:01:D3:A2:4B:E2:7F:C2:49:76:AC
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 160A84
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/d5aa714457258ddf47e5de230215d7c5f6732aff.roa
Signing time: Fri 28 Jan 2022 20:50:29 +0000
ROA not before: Tue 25 Jan 2022 03:00:00 +0000
ROA not after: Thu 25 Jan 2024 03:00:00 +0000
asID: 28075
IP address blocks: 198.12.40.0/22 maxlen: 24
198.12.58.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1444484 (0x160a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Jan 25 03:00:00 2022 GMT
Not After : Jan 25 03:00:00 2024 GMT
Subject: CN=d5aa714457258ddf47e5de230215d7c5f6732aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:c0:af:67:17:4a:e8:8c:3e:0d:4c:39:ba:
1f:82:31:e0:91:58:36:c5:93:7d:6d:2b:e7:b6:81:
0b:b4:d6:12:d3:23:42:81:6c:77:77:91:51:7e:e3:
12:d8:ae:71:c9:3c:d9:a5:31:95:71:3c:58:ac:7e:
17:e7:3b:76:7f:27:d2:bb:b0:b9:ec:ec:2c:d7:8f:
2c:93:31:ff:9a:4f:a5:dc:0f:c2:8e:ac:c2:d5:46:
de:68:9f:c7:5f:70:0b:a1:7d:4b:12:b4:eb:b2:ee:
64:11:10:e4:04:67:fe:29:20:2c:50:32:61:42:08:
86:d1:aa:71:69:63:3e:47:53:98:ca:55:14:4f:e6:
a2:93:57:44:e2:ff:e6:7e:eb:79:10:ed:3c:fb:02:
26:8e:03:95:0b:0a:7b:b9:2e:f6:66:d0:26:e4:dd:
81:aa:ac:0d:e0:81:a3:4a:e3:03:a9:8d:11:02:2c:
35:18:5b:e4:9a:8d:c2:80:14:7f:a6:b3:67:a6:4c:
a2:52:ee:54:a7:78:70:dd:2d:d2:fa:b1:5d:ee:4b:
bd:1f:30:a1:35:bd:16:88:78:e2:e7:51:5d:ea:0c:
7c:ee:8e:18:99:d3:8b:6f:f8:0b:43:0d:2c:fc:6a:
48:9a:09:dd:d9:6e:4d:a1:ef:2e:a4:90:f0:e3:5e:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:53:E7:21:97:76:57:AC:DA:01:D3:A2:4B:E2:7F:C2:49:76:AC
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/d5aa714457258ddf47e5de230215d7c5f6732aff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.40.0/22
198.12.58.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f5:ef:9d:dc:23:b4:3c:7b:7a:e6:a6:01:17:85:f0:ca:1f:
19:4a:a3:7c:7c:41:0d:d3:79:41:dd:96:0c:b1:d1:5a:4b:34:
96:d9:86:e6:7c:73:a1:6b:cd:1d:a5:64:4f:03:c1:05:ea:01:
1f:b2:70:fd:83:76:c9:53:f1:8a:53:83:f7:39:e7:fe:a0:11:
f2:fe:92:34:d3:5c:27:90:86:86:99:fd:65:a9:18:e8:b2:9e:
1d:89:ff:08:a8:ac:05:39:a4:81:b6:6f:57:36:20:cc:20:a0:
5a:0a:b0:57:33:b7:7e:8d:63:a2:75:a7:34:59:83:80:fb:59:
84:3c:2a:be:6f:59:ba:f2:86:37:57:62:e1:37:da:d1:1a:32:
38:51:fa:95:0d:c9:09:89:13:7f:d0:d1:51:66:59:39:e8:93:
f4:ce:48:06:9f:a8:4a:e1:18:07:12:29:db:2a:5b:b7:3a:ae:
82:d8:bb:fa:30:fc:2f:9d:f1:db:e3:48:d7:f8:01:82:e4:7f:
6c:69:05:e9:34:b8:ab:31:e9:c9:96:0b:ca:0d:92:80:be:bd:
cc:eb:50:3f:71:71:99:ac:f6:c8:88:9b:4c:93:13:88:ec:e7:
3a:98:ac:12:eb:62:3d:ee:b9:f9:a7:83:44:fe:0d:2a:7a:fb:
70:c5:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org