Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/827d4d42151ab0ca202211bf55c600385a3ca19a.roa
File: 827d4d42151ab0ca202211bf55c600385a3ca19a.roa (raw, json)
Hash identifier: GGjL5X1s5BG9tqabpjPtaMlc+hMWdjKXWZ4hza/OUeo=
Subject key identifier: 7F:F3:67:5C:06:41:3E:7A:04:5A:F7:16:E8:21:18:26:F3:6F:9A:18
Certificate issuer: /CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
Certificate serial: 187A
Authority key identifier: 27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/827d4d42151ab0ca202211bf55c600385a3ca19a.roa
Signing time: Thu 12 May 2022 20:33:24 +0000
ROA not before: Thu 12 May 2022 03:00:00 +0000
ROA not after: Sun 12 May 2024 03:00:00 +0000
asID: 267858
IP address blocks: 170.244.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6266 (0x187a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
Validity
Not Before: May 12 03:00:00 2022 GMT
Not After : May 12 03:00:00 2024 GMT
Subject: CN=827d4d42151ab0ca202211bf55c600385a3ca19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:9a:c6:4d:14:6c:03:bd:7d:83:c7:5e:0a:
27:4c:41:cd:64:fc:5f:bc:2d:64:30:76:5a:3b:e8:
19:15:b7:e2:52:35:8f:64:a0:d5:c4:34:b3:de:d7:
e4:ca:8e:89:69:15:7b:fe:2e:97:3e:b4:4c:ac:b1:
d2:62:c0:c5:da:cc:43:c3:f9:72:02:d7:70:d2:0f:
b2:16:35:f4:43:8c:3c:3c:4f:1f:1b:9e:f5:73:57:
7c:bc:fd:32:ea:09:0d:69:27:53:a4:8b:5a:df:01:
cb:9e:c6:b0:f7:12:10:a0:7c:1f:ea:67:5c:db:8e:
0b:b5:61:e7:4c:3a:1d:cf:7b:53:e5:87:ea:dd:31:
52:8c:a4:ec:92:a5:a5:83:47:ea:74:c4:db:5d:96:
c6:85:15:a1:a7:95:ee:f9:7c:3c:35:c0:91:a9:42:
59:9f:0f:a4:96:f7:56:cd:10:27:67:cc:bd:21:bc:
95:a5:3d:76:08:41:80:83:e9:a1:05:b8:b9:69:75:
4c:ff:68:67:e2:84:6d:c1:b7:a5:20:7e:d1:5f:f4:
c4:3a:6a:d0:c9:c0:5b:38:ac:1f:b7:32:a9:01:cd:
ec:6b:37:7c:5b:9c:71:ba:9a:f5:bb:4e:74:ca:af:
09:bb:12:74:f2:01:99:86:fb:1f:7c:7e:05:57:cb:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:67:5C:06:41:3E:7A:04:5A:F7:16:E8:21:18:26:F3:6F:9A:18
X509v3 Authority Key Identifier:
keyid:27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/827d4d42151ab0ca202211bf55c600385a3ca19a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.168.0/22
Signature Algorithm: sha256WithRSAEncryption
52:1f:ae:a2:fb:73:87:44:2c:98:73:fc:d3:15:3e:8f:b4:6b:
c3:07:90:a0:79:c0:48:de:50:9f:a9:af:32:1f:6f:78:bc:7c:
af:9c:a1:a4:e1:61:74:29:98:1e:f4:11:ea:3d:1b:54:da:5c:
81:47:38:f3:3b:83:e8:99:0c:e8:4a:48:f0:ef:01:88:a3:8e:
39:ff:37:07:53:d0:4c:0b:cc:b7:f4:55:cb:32:a5:98:f9:bf:
aa:cc:e1:55:2c:de:c6:89:83:ea:08:f3:b0:ed:d4:ac:d2:e5:
92:7e:d0:6c:31:65:b6:c3:7e:c9:81:d7:49:b6:61:74:65:e6:
4b:38:4e:6f:f6:ed:b7:09:0c:53:22:53:e1:19:ee:3e:df:3f:
c8:c7:72:15:de:17:2f:c1:70:0a:06:dd:8b:8c:8e:98:d5:fc:
a1:85:1f:52:25:8c:44:b7:88:03:7e:33:3f:37:f4:80:30:73:
d0:10:35:dc:1b:3b:57:9f:f8:e1:c8:48:40:10:2b:8f:2a:69:
c1:a0:2a:d6:04:c2:34:ca:f6:1f:de:f3:26:b8:e1:fa:78:db:
3a:24:e6:dc:59:4b:44:b2:22:af:3d:37:0a:83:ea:7e:7d:53:
16:96:33:ce:a2:4c:3e:aa:68:87:45:3f:49:79:a3:2e:31:5c:
f3:69:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 17:57:34 2023 by rpki-client on console-ams.rpki-client.org