Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d16df8fb9e4c837a7c54d2ffdb671ea0d5f8f42a.roa
File: d16df8fb9e4c837a7c54d2ffdb671ea0d5f8f42a.roa (raw, json)
Hash identifier: /50kWs762rxu1AvLm0EjE/RzGdnRxXvbUdOM5sevYQk=
Subject key identifier: 01:A6:96:71:96:2F:00:D6:12:20:2B:68:74:A0:11:37:C3:7E:31:FB
Certificate issuer: /CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
Certificate serial: 0D89CE
Authority key identifier: BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d16df8fb9e4c837a7c54d2ffdb671ea0d5f8f42a.roa
Signing time: Wed 24 Mar 2021 22:51:26 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 265774
IP address blocks: 164.163.216.0/24 maxlen: 24
164.163.217.0/24 maxlen: 24
164.163.218.0/24 maxlen: 24
164.163.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887246 (0xd89ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=d16df8fb9e4c837a7c54d2ffdb671ea0d5f8f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:94:20:55:97:0f:7f:5d:a9:2f:48:26:43:bc:
2f:56:aa:16:b9:ec:9d:70:8e:c8:03:d2:75:18:35:
06:29:c3:be:f6:54:e6:bb:79:ea:8d:3e:9a:f3:b9:
7c:16:55:1f:e5:ab:24:6c:e4:4d:b6:52:1f:d4:1e:
6a:dc:4c:ea:0b:65:3f:86:f2:5f:99:d1:a0:64:fb:
23:79:46:0f:10:5e:d6:d6:8e:40:a4:15:46:c8:23:
66:7d:ad:3c:72:da:b6:2f:f2:4c:44:e0:4d:a7:e7:
cc:93:ec:c6:47:00:2a:b5:ad:9c:55:f5:25:1c:a5:
c8:9c:c8:9e:d5:2d:d1:68:d3:6e:27:b3:6b:7b:14:
0c:ef:e7:e2:68:79:ac:fd:3c:1a:d8:14:03:e6:ff:
48:fc:cc:06:57:bd:2f:39:60:f9:8f:1d:a3:64:04:
22:19:77:12:fd:ac:29:55:29:fe:18:c2:f9:44:fe:
c2:f5:14:f0:42:5f:07:af:70:55:80:31:e4:ef:95:
eb:83:2b:bc:10:ec:0b:ca:64:45:ed:c9:0b:f6:4c:
ea:6e:c6:d6:22:c0:a7:51:67:b5:38:e9:3a:80:e7:
1f:16:02:23:48:9c:59:1a:e6:cc:2b:03:a8:8a:a1:
98:a0:d1:8e:40:21:18:05:f6:14:64:85:06:ab:74:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A6:96:71:96:2F:00:D6:12:20:2B:68:74:A0:11:37:C3:7E:31:FB
X509v3 Authority Key Identifier:
keyid:BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d16df8fb9e4c837a7c54d2ffdb671ea0d5f8f42a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.216.0/22
Signature Algorithm: sha256WithRSAEncryption
68:eb:87:2a:e6:7b:db:7e:63:e0:ea:d7:26:80:0c:f6:e0:d6:
66:cc:f1:99:c9:a8:a6:a5:dd:0c:74:71:82:6b:88:78:2c:34:
d7:4c:7c:d0:59:14:59:f7:ac:bc:a3:63:e4:95:ac:42:e1:1e:
1e:d3:a6:3c:ca:b6:1f:b7:1a:e1:6d:cd:db:50:55:02:1d:3c:
38:16:87:0b:b5:18:cd:df:23:b8:cb:0c:38:db:d9:fb:8c:61:
86:f0:1b:5c:9c:3b:fc:18:f4:74:f4:08:d3:80:28:08:26:55:
e9:a0:5d:3a:79:99:b9:92:56:92:9a:39:04:69:da:fb:43:d6:
9e:27:fa:d5:fe:fe:f4:ce:3d:29:52:f8:70:5f:6c:3a:e7:0e:
7f:3d:c3:d1:a5:be:86:eb:28:88:4a:64:8d:11:ce:d0:96:96:
e6:51:78:3e:4e:e2:5d:90:9a:1e:88:4b:c7:6a:2a:8d:65:ed:
c3:99:a7:0e:30:ae:ba:d5:31:59:67:d5:eb:22:9b:d1:25:92:
02:72:ba:ac:2b:ca:fa:87:f0:77:87:e4:60:f4:9b:ce:da:2b:
48:b7:01:ae:a5:c8:89:44:2f:1a:e9:ab:cc:f7:0c:70:6d:6e:
3f:c5:e6:94:aa:0b:74:9b:76:bb:09:5c:2f:3b:ad:01:1b:b2:
23:a6:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org