Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/b6b60170f925101945694ba8f8ac314ebf678fc5.roa
File: b6b60170f925101945694ba8f8ac314ebf678fc5.roa (raw, json)
Hash identifier: Qhlv6u4VzDNFp4PLoYV1IRuYXNmdQFBFn3J+U6RAQDc=
Subject key identifier: F5:B0:89:D6:E5:3B:A3:84:A7:5C:12:D7:6F:3D:FD:8B:8A:96:2D:0D
Certificate issuer: /CN=185ca6bb80f033ceba341dcaab97097fc3891bcd
Certificate serial: 0191
Authority key identifier: BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/b6b60170f925101945694ba8f8ac314ebf678fc5.roa
Signing time: Tue 04 Oct 2022 03:05:04 +0000
ROA not before: Tue 04 Oct 2022 02:59:15 +0000
ROA not after: Fri 04 Oct 2024 03:59:15 +0000
asID: 28458
IP address blocks: 200.23.53.0/24 maxlen: 24
200.23.168.0/23 maxlen: 24
200.23.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185ca6bb80f033ceba341dcaab97097fc3891bcd
Validity
Not Before: Oct 4 02:59:15 2022 GMT
Not After : Oct 4 03:59:15 2024 GMT
Subject: CN=b6b60170f925101945694ba8f8ac314ebf678fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:29:47:ad:91:b4:9e:e6:59:4a:a8:88:78:
e0:47:9a:be:6a:4d:6d:79:10:83:00:2e:c6:7b:ec:
c7:a4:2c:2e:80:fa:19:29:b1:27:c3:e1:c9:98:45:
cd:4a:05:34:42:6a:9f:f6:02:15:ab:6b:57:ca:16:
52:0e:c8:0f:e3:49:c8:a0:3b:da:e2:1c:2f:27:16:
d6:ae:4e:39:d0:06:9c:19:3f:6c:82:a8:f8:35:26:
e0:7b:bb:5f:ca:a1:9b:2e:64:4d:6c:ac:93:c3:50:
16:97:e0:bf:0a:1a:a5:c3:85:dc:14:a2:0b:b7:d1:
1c:6b:e5:3a:37:b8:b1:ce:fb:15:60:18:7f:65:0d:
ec:ab:2d:c8:19:f8:ea:53:e4:1e:ed:b6:3d:ce:b9:
1c:c2:2c:a3:b0:79:4a:df:c6:21:60:5d:bd:93:ef:
e2:ca:ac:7e:17:d1:a2:98:d3:eb:93:9d:fc:2e:84:
6e:1c:57:82:d3:8d:97:de:34:65:e8:7e:51:41:84:
48:63:8c:e4:50:f6:d8:fe:a1:cf:fa:9a:a6:2b:7b:
80:7b:a1:dc:bf:2d:d2:65:24:17:fe:e0:bd:85:c2:
44:a0:62:03:f9:28:cf:ff:80:8e:71:a0:d9:17:cc:
4a:64:44:43:49:9a:5f:70:5f:6f:f6:4b:e5:26:cb:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B0:89:D6:E5:3B:A3:84:A7:5C:12:D7:6F:3D:FD:8B:8A:96:2D:0D
X509v3 Authority Key Identifier:
keyid:BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/b6b60170f925101945694ba8f8ac314ebf678fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.53.0/24
200.23.168.0-200.23.170.255
Signature Algorithm: sha256WithRSAEncryption
78:7d:5f:19:1f:40:6f:f5:b9:d4:39:56:91:4a:92:21:45:89:
4f:7a:96:4b:d2:51:48:c5:c2:74:2e:f5:f7:d7:fb:9c:c0:28:
29:d5:c3:c5:c8:51:56:f0:ef:3d:cf:0d:67:4e:a0:51:e5:57:
3e:60:a7:39:a6:d5:68:27:0d:67:cf:ad:b6:50:85:4d:0f:0a:
cb:47:44:33:71:68:38:d6:12:17:9e:40:c6:11:63:56:6f:72:
5d:88:7e:12:c8:bf:ed:c1:82:83:d9:a5:a2:0d:c5:b1:ed:5b:
57:1d:59:fb:cd:ce:79:08:14:2a:31:8f:d0:2d:01:70:d5:7d:
37:29:92:3e:97:a3:3b:9d:28:02:73:37:ff:b6:17:30:5f:76:
08:f9:2f:b9:71:52:b3:3e:9b:41:58:4d:18:ec:d3:72:97:14:
b9:38:e8:4b:ee:d2:9d:31:e5:28:fb:f2:3c:20:7d:d4:73:d0:
ec:d6:5b:78:65:b5:13:06:c4:e9:1c:eb:c8:73:fc:ad:43:a0:
fc:da:3c:ab:26:5b:ad:c8:56:4c:a4:ae:39:ba:f5:dc:8b:5c:
fd:b4:b6:11:9e:9b:ad:20:34:e9:6e:e6:f5:dc:41:79:ea:57:
7c:90:14:0f:af:f0:ad:da:b7:82:97:8a:13:75:4e:43:6b:0f:
55:d5:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org