Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/157b2c4b1574038791ffdd11452893ebd0373818.roa
File: 157b2c4b1574038791ffdd11452893ebd0373818.roa (raw, json)
Hash identifier: sziFxvIF6R74qCjO+hzs14MCC1VgULpJUTdBkdPSDkA=
Subject key identifier: DC:43:62:14:FA:42:C4:89:49:A2:D7:C8:7C:4C:53:43:24:34:DF:89
Certificate issuer: /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial: 16BC58
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/157b2c4b1574038791ffdd11452893ebd0373818.roa
Signing time: Mon 25 Apr 2022 22:36:38 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264819
IP address blocks: 170.80.140.0/24 maxlen: 24
170.80.141.0/24 maxlen: 24
170.80.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490008 (0x16bc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=157b2c4b1574038791ffdd11452893ebd0373818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:f7:d2:cb:63:8f:1a:fc:76:a6:f8:fb:56:
f6:ec:50:01:a0:cc:c7:ee:58:07:49:d5:01:45:28:
de:71:fc:e2:98:bf:df:8e:cd:14:26:98:cd:bc:26:
61:16:ca:de:15:6d:67:73:37:9e:30:5c:52:78:dc:
0e:c3:3b:23:7f:21:14:f4:54:59:ff:97:2b:4b:18:
46:57:54:d7:58:97:73:ec:6b:c3:53:33:c4:1b:6f:
df:d5:0c:f5:15:22:6b:5b:f3:b8:00:12:88:f1:a6:
8b:02:dc:0a:50:bf:3d:1c:e3:82:a3:f2:04:ee:00:
82:c1:88:54:62:31:82:f6:a8:9b:75:0c:32:d0:c6:
3c:f9:da:b0:8f:92:ce:80:04:c7:d0:df:00:01:89:
b2:65:19:01:3d:62:1e:7e:7b:9d:ff:75:31:72:19:
56:c2:f9:69:ce:13:35:e5:42:21:25:14:dd:46:58:
7c:b6:9e:9b:a4:1b:64:d3:ef:eb:9f:cb:f5:52:76:
01:58:e1:77:49:aa:14:bb:83:bf:23:22:6d:19:52:
6e:fd:46:2d:15:82:87:5e:6a:38:14:3f:fd:b2:ad:
b6:67:73:1c:1f:19:7d:5c:93:45:cc:e6:b8:43:70:
4f:5f:a8:1a:d9:f3:50:4f:fe:cf:da:76:36:69:12:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:62:14:FA:42:C4:89:49:A2:D7:C8:7C:4C:53:43:24:34:DF:89
X509v3 Authority Key Identifier:
keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/157b2c4b1574038791ffdd11452893ebd0373818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.140.0-170.80.142.255
Signature Algorithm: sha256WithRSAEncryption
1c:79:2e:12:73:d6:94:f0:f0:60:e0:88:3a:90:12:bb:92:cd:
c5:8b:7f:9d:1e:26:40:36:cd:c3:c5:a6:c8:ee:91:f1:ea:52:
28:5f:ad:70:87:2d:77:1d:49:d1:33:af:b0:10:33:24:73:86:
da:c0:60:c9:eb:7e:81:61:2f:79:00:80:6c:5c:a1:0b:9c:54:
74:a2:bd:a9:3c:15:d5:80:e3:9a:6b:5e:38:ca:f8:4f:84:27:
ba:fa:50:61:4c:ae:a6:40:45:07:df:cb:35:9d:7b:3d:ee:07:
74:c8:f0:26:55:a2:bc:77:7d:82:ab:a6:91:25:9d:51:75:5c:
d7:36:ef:b2:52:30:55:b2:50:58:17:0b:25:73:2a:6a:3c:8a:
8b:fd:1f:12:ff:5f:74:d7:fe:76:73:a5:01:3c:d1:16:37:c0:
d9:25:59:48:9b:40:fe:c5:65:3f:b1:dc:8c:91:3d:a1:b8:5c:
0b:01:76:f8:51:bb:75:a4:2f:34:fb:bf:6c:97:bf:c6:b4:b5:
1c:33:16:36:1e:97:7a:26:34:a0:27:2e:02:9d:58:d2:51:f1:
16:0b:52:32:97:65:66:5a:3f:ae:15:ca:fe:21:30:e0:48:2b:
61:5b:84:21:fe:c7:2f:dd:a9:81:88:92:06:c4:3e:b8:d0:4b:
03:3f:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org