Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa
File: 88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa (raw, json)
Hash identifier: qIPutkKGh2FSBecyt81dbV/yGL5cKjsDPz1HQ0wXqyQ=
Subject key identifier: 04:AC:D0:F6:39:BA:2C:9A:61:B1:4F:B8:23:D1:18:69:54:A0:C4:AD
Certificate issuer: /CN=d136d4512330eb81fb319acf25ade2d4a9466d72
Certificate serial: 014A
Authority key identifier: BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa
Signing time: Fri 01 Apr 2022 14:38:21 +0000
ROA not before: Fri 01 Apr 2022 03:00:00 +0000
ROA not after: Mon 01 Apr 2024 03:00:00 +0000
asID: 272026
IP address blocks: 167.250.236.0/23 maxlen: 23
177.11.254.0/23 maxlen: 23
2803:6510::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d136d4512330eb81fb319acf25ade2d4a9466d72
Validity
Not Before: Apr 1 03:00:00 2022 GMT
Not After : Apr 1 03:00:00 2024 GMT
Subject: CN=88cef9555b5b2b089e20bdd9a0e136e1bd0eba67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:dc:d4:1e:92:fe:0a:62:ad:89:8c:b7:0f:
60:41:d6:f7:ce:b7:94:fe:3d:de:3c:87:c9:a3:bd:
c7:d0:26:3e:69:30:6b:08:56:b8:d4:d7:bc:3e:fc:
33:35:2f:57:92:0e:64:5a:3a:d5:36:8e:d2:35:1a:
45:06:3d:ac:c0:73:78:07:3d:31:c7:cd:da:39:e4:
19:f6:11:96:81:62:60:38:e7:87:84:e7:05:9b:46:
b9:da:e5:9f:10:ba:bb:8f:75:cf:16:09:ae:88:85:
69:06:b0:4a:c8:eb:c2:57:c5:ef:c0:bd:5a:aa:f4:
af:1d:86:52:8e:3a:f9:4c:05:b4:6a:55:bd:52:48:
c1:da:13:ec:ff:db:56:9c:9a:2e:17:02:e5:03:29:
14:a0:84:51:3e:3f:36:54:e9:f7:94:89:f4:fd:86:
b6:72:eb:93:11:64:49:cd:1c:54:ab:1c:b6:cd:03:
70:2b:d9:14:fd:aa:9b:c1:64:8b:75:a1:29:6f:2c:
8e:7c:ed:86:8e:a9:61:16:1f:47:a9:72:f3:af:47:
64:68:dc:dc:8e:ad:1d:b0:1f:3d:e7:6b:ce:f7:33:
d4:8b:97:95:e1:0b:fb:81:85:27:8a:e9:48:12:ca:
e1:23:76:61:69:16:ad:88:75:7c:43:d1:e9:bd:5d:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:D0:F6:39:BA:2C:9A:61:B1:4F:B8:23:D1:18:69:54:A0:C4:AD
X509v3 Authority Key Identifier:
keyid:BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/d136d4512330eb81fb319acf25ade2d4a9466d72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.236.0/23
177.11.254.0/23
IPv6:
2803:6510::/32
Signature Algorithm: sha256WithRSAEncryption
62:38:79:71:98:e8:78:49:14:12:bd:c5:ba:3e:07:23:24:a8:
e4:0b:6d:b3:5c:03:72:c4:bf:a3:41:fb:71:73:2a:06:51:f1:
12:9c:31:b2:e1:f5:83:3e:21:09:dc:10:17:15:a5:82:44:3a:
a5:cb:39:91:f7:20:d3:a5:7c:7d:6a:19:e1:71:a6:19:66:e6:
17:66:61:43:be:7b:88:2a:fd:22:36:4c:81:7e:34:50:7e:14:
30:85:aa:b8:e3:17:c7:e4:3c:40:53:c1:c2:83:51:62:2a:11:
e5:35:35:eb:13:27:1c:91:60:39:63:2c:21:f0:bd:d7:44:44:
75:9b:cc:bb:10:ff:ba:fc:52:d2:c2:25:e2:36:71:a7:e4:c5:
8b:a8:c4:c0:14:4d:bc:ec:3b:4f:b7:55:1d:cc:44:54:10:0f:
61:36:c9:69:bb:7f:bd:f8:ba:15:de:9e:d1:95:ed:f3:24:56:
fe:59:b0:4d:82:59:4b:ba:31:d2:99:78:47:b4:ff:b4:1d:88:
de:32:f4:ca:a2:34:74:0f:c6:21:ec:28:aa:1f:eb:69:09:61:
d5:f4:10:82:a3:e6:96:08:6a:5e:e7:e7:8f:71:6b:31:e0:49:
ae:5f:a0:40:03:9e:32:7d:dc:1b:2b:72:98:c8:21:85:ed:5c:
c0:bf:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 15:17:57 2023 by rpki-client on console-ams.rpki-client.org