Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/cf134a86876d300a5279f26d5ae814b100e7c5f2.roa
File: cf134a86876d300a5279f26d5ae814b100e7c5f2.roa (raw, json)
Hash identifier: zXZgEkz2ivEbl4cxX83w85R46QfbNd5V8IZ71LKMmu8=
Subject key identifier: C4:D7:49:D1:78:60:6F:14:41:63:E6:9C:06:A6:5D:8F:56:40:6A:D4
Certificate issuer: /CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
Certificate serial: 0D0BEC
Authority key identifier: 7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/cf134a86876d300a5279f26d5ae814b100e7c5f2.roa
Signing time: Wed 24 Mar 2021 14:32:30 +0000
ROA not before: Wed 24 Mar 2021 14:32:30 +0000
ROA not after: Tue 24 Mar 2026 14:32:30 +0000
asID: 264815
IP address blocks: 170.239.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855020 (0xd0bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
Validity
Not Before: Mar 24 14:32:30 2021 GMT
Not After : Mar 24 14:32:30 2026 GMT
Subject: CN=cf134a86876d300a5279f26d5ae814b100e7c5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:70:4b:16:af:9d:b9:d3:bd:03:93:a7:f3:d6:
b7:ef:0a:95:44:44:44:ce:c2:2f:14:de:2c:25:ff:
08:9d:7d:e1:cc:a0:a7:27:6f:6d:50:10:af:31:70:
ed:1e:4c:dc:3c:19:9d:ed:79:9a:29:ad:d0:48:11:
a3:ea:4e:b6:49:0f:d5:c7:3c:fa:e2:15:c4:ca:e7:
98:16:2b:79:d1:96:8b:ed:9e:7c:4d:a3:a3:74:90:
ba:c0:7b:f2:34:53:4d:76:5c:18:1d:48:6c:8b:9f:
b3:88:77:dc:c0:60:1f:f0:67:a0:5b:1f:f3:32:c3:
0f:b0:da:32:e5:97:7d:a5:9d:a0:cd:a5:e5:19:7a:
2f:1f:cb:1c:81:65:a8:ba:73:a3:85:02:87:7e:79:
9a:49:2e:8e:13:50:88:61:dd:75:df:e9:ba:ce:3a:
3f:a1:95:22:f1:24:7d:ae:ce:f0:fe:89:72:84:60:
8f:74:09:e0:70:0d:ba:8c:d8:5b:5f:e2:65:09:0b:
db:05:02:32:bc:1b:31:9f:cd:af:d7:53:36:d1:55:
db:24:ab:2d:ef:4a:5a:f4:4a:8b:6f:75:b7:66:e3:
71:b0:6b:bf:d2:a3:eb:d1:96:33:16:48:da:8c:a5:
1b:d8:91:cc:fc:b6:02:b3:28:20:dd:46:71:d8:34:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:49:D1:78:60:6F:14:41:63:E6:9C:06:A6:5D:8F:56:40:6A:D4
X509v3 Authority Key Identifier:
keyid:7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/cf134a86876d300a5279f26d5ae814b100e7c5f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:85:20:fa:61:f6:2f:2a:ea:d1:8a:af:64:bc:81:18:b8:b5:
01:16:a0:d7:f2:f3:c0:29:aa:24:c3:48:84:7f:c3:e3:ef:9c:
a5:b4:ab:71:f6:a1:de:7a:a1:e1:d7:73:59:45:ac:3e:a4:bd:
9b:a4:de:26:cf:fa:ce:c7:39:c0:3f:b7:66:08:b7:db:db:31:
04:f8:ff:e4:df:7e:b4:1f:cd:55:48:0d:30:00:97:df:46:42:
f0:4c:51:c1:02:f8:71:a9:05:2c:1e:f2:7b:be:30:a9:1b:a0:
3e:2b:ba:4e:3d:a4:90:a0:7b:36:10:4a:9f:7a:26:4c:40:da:
5d:05:d5:2c:cc:4e:5b:e9:43:e3:4a:a8:53:83:e6:d4:f8:dc:
cd:2d:d1:4d:82:d5:c0:42:6f:02:b6:cb:3b:2a:47:0f:6c:0a:
19:a6:1c:7a:a3:69:3f:7e:3b:0e:65:b6:f6:2f:46:c6:57:f3:
11:dc:c1:d3:9b:1c:25:f9:20:17:e1:6a:e4:28:45:dd:28:ac:
8c:0b:2a:62:0c:a7:47:27:47:5e:7a:d8:66:32:1d:65:54:25:
9e:fa:69:46:67:5b:52:90:cc:b6:19:ab:d2:55:c4:9c:1f:93:
74:4c:1d:84:23:db:73:36:d9:0b:20:71:d6:c4:10:b4:de:d2:
1a:3e:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org