Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/4572ce968e4e5e9e5f7d3cafeee9822b61f841c0.roa
File: 4572ce968e4e5e9e5f7d3cafeee9822b61f841c0.roa (raw, json)
Hash identifier: PdMs20bwfxf2El2Ob0aVyJmv2PTgBVbtQOQwu1gg2V4=
Subject key identifier: 3A:21:FD:F0:0D:10:1D:68:0B:9F:2B:C4:BC:F5:BD:9E:60:08:1B:AB
Certificate issuer: /CN=d3e258591b81b726517d993ac9db01b629da36e1
Certificate serial: 181B
Authority key identifier: DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/4572ce968e4e5e9e5f7d3cafeee9822b61f841c0.roa
Signing time: Fri 10 Dec 2021 11:34:52 +0000
ROA not before: Fri 10 Dec 2021 03:00:00 +0000
ROA not after: Sun 10 Dec 2023 03:00:00 +0000
asID: 265707
IP address blocks: 192.140.60.0/24 maxlen: 24
192.140.61.0/24 maxlen: 24
192.140.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6171 (0x181b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e258591b81b726517d993ac9db01b629da36e1
Validity
Not Before: Dec 10 03:00:00 2021 GMT
Not After : Dec 10 03:00:00 2023 GMT
Subject: CN=4572ce968e4e5e9e5f7d3cafeee9822b61f841c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:b8:86:45:34:60:18:95:94:97:e2:c6:e8:
7e:18:ee:f1:db:ea:06:72:01:52:d4:d0:82:2a:a2:
02:65:90:0e:0d:08:f9:80:04:64:38:a6:ab:69:5e:
a4:3f:70:a4:f2:24:4b:45:35:c4:42:35:15:10:99:
c3:57:f3:69:e3:c6:71:18:67:e6:a4:92:28:ad:3b:
25:79:ff:4d:8e:e7:ea:fe:cb:b1:da:64:bc:9b:1e:
08:22:af:0e:80:e0:43:23:7a:64:d4:36:3d:b2:e5:
d1:ac:e4:9a:5d:7f:cd:78:3b:f7:46:66:71:54:3b:
b1:c5:bd:67:25:9f:25:5b:22:cf:f6:9f:bf:69:55:
7f:27:81:47:5f:48:a4:d9:f4:0b:98:06:66:8f:27:
65:53:c4:ce:2c:6b:c8:20:2e:54:be:54:1d:62:3a:
3b:cf:6d:51:b6:66:5f:49:ea:d0:7a:af:2c:4b:55:
eb:49:ea:71:a8:7f:12:67:0f:fa:26:f8:01:22:06:
9c:91:04:12:c4:c6:35:40:9d:26:a9:97:ea:3b:61:
5d:d2:fd:da:43:0f:ef:a6:18:0d:a2:bc:59:96:8f:
14:77:52:37:49:16:c7:d9:47:d1:df:9f:57:2d:b3:
46:f9:0d:82:4b:5e:5d:ff:7d:dd:82:75:ff:21:61:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:FD:F0:0D:10:1D:68:0B:9F:2B:C4:BC:F5:BD:9E:60:08:1B:AB
X509v3 Authority Key Identifier:
keyid:DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/4572ce968e4e5e9e5f7d3cafeee9822b61f841c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/d3e258591b81b726517d993ac9db01b629da36e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.60.0-192.140.62.255
Signature Algorithm: sha256WithRSAEncryption
73:b8:e8:79:ad:b9:0c:bc:a4:b0:80:7b:fe:b5:58:72:7a:b1:
0a:33:2f:7a:f9:7c:6f:94:5c:6c:84:0c:86:b5:55:61:c1:4b:
bf:b4:28:35:c5:08:fe:cc:dc:6f:1e:2f:ab:1a:66:33:03:8f:
88:59:2f:95:74:05:a5:86:41:8d:33:ca:b0:7e:61:d9:ed:4a:
71:85:46:dc:8f:65:41:9d:d1:60:f9:d4:52:38:49:da:5d:82:
e2:f1:20:9f:bb:e8:18:e3:21:15:8e:6c:af:e4:a5:0a:3f:da:
74:ce:fa:f8:72:46:6c:b3:41:04:61:10:f2:a4:8d:a4:90:f3:
8e:0e:a6:29:37:f8:9b:40:05:4d:f0:cf:09:7d:e8:01:22:8c:
27:48:e9:5d:f1:8b:d8:1e:90:aa:02:43:f3:94:98:a2:39:2e:
c2:f2:44:bd:a2:4a:06:a3:a4:77:c5:43:76:42:6a:d1:6a:d3:
5c:f4:05:5e:4d:ab:8d:71:26:e3:1a:67:5d:6c:c0:3f:69:1e:
2d:51:a9:00:6b:37:b3:94:79:e6:ea:ef:a8:9f:dd:96:84:ed:
66:f7:f7:52:54:71:4b:fd:5b:51:eb:37:7c:9f:2e:12:42:70:
f3:13:41:1b:68:24:1e:0f:a6:25:12:99:38:71:23:aa:7a:b7:
cb:38:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org