Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/bf8d21d0a32a454a03febfa086e5305d7d1f2c74.roa
File: bf8d21d0a32a454a03febfa086e5305d7d1f2c74.roa (raw, json)
Hash identifier: +cEqFoCddQza5tvDmVfXlE5Jw3J25YUdfgtscJuCHAo=
Subject key identifier: C7:89:24:25:F0:22:66:4D:66:8A:8C:C8:F5:D7:E2:47:E4:C0:C9:93
Certificate issuer: /CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Certificate serial: 0DA0E3
Authority key identifier: E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/bf8d21d0a32a454a03febfa086e5305d7d1f2c74.roa
Signing time: Wed 24 Mar 2021 14:31:19 +0000
ROA not before: Wed 24 Mar 2021 14:31:19 +0000
ROA not after: Tue 24 Mar 2026 14:31:19 +0000
asID: 265750
IP address blocks: 170.150.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893155 (0xda0e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Validity
Not Before: Mar 24 14:31:19 2021 GMT
Not After : Mar 24 14:31:19 2026 GMT
Subject: CN=bf8d21d0a32a454a03febfa086e5305d7d1f2c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:a5:5d:50:cf:b7:fe:9c:16:56:ad:6d:a6:
16:ed:8f:46:43:04:f1:4c:d8:a8:b9:8b:43:40:c9:
6e:54:9c:a8:63:d5:51:76:37:05:f5:66:f3:ca:00:
f9:60:ae:14:ab:47:27:0d:40:2d:19:14:8b:6c:43:
e4:13:03:99:b5:55:3b:8f:78:90:b6:9c:10:a0:ad:
d3:2b:d5:89:92:87:10:05:74:90:86:9f:47:f4:b5:
c3:4b:27:4e:ec:3d:41:4e:68:df:8a:8f:c3:63:ce:
88:58:f5:03:73:ad:64:89:7f:24:67:8e:80:5b:75:
e5:d2:5e:64:eb:6b:eb:47:8b:c3:84:42:8a:f9:48:
46:1d:17:7d:6f:41:26:48:5e:47:44:be:a9:2c:e9:
be:d1:4f:d6:40:bc:56:61:7d:1c:4a:8d:4d:a8:dc:
2b:60:7c:7f:95:eb:2d:a3:9e:9f:56:77:de:2b:56:
59:2b:82:d4:2d:e2:fe:8f:7a:75:91:f9:76:47:b1:
1f:60:3f:53:f1:09:f5:c8:57:31:68:e8:cc:d0:4d:
be:65:c2:58:c5:81:ae:af:04:b1:10:73:81:b9:e6:
b9:c9:34:78:8f:5a:9a:98:10:1d:92:f7:0e:6b:64:
52:17:20:d8:76:1b:da:77:f6:3e:06:de:c4:cc:eb:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:24:25:F0:22:66:4D:66:8A:8C:C8:F5:D7:E2:47:E4:C0:C9:93
X509v3 Authority Key Identifier:
keyid:E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/bf8d21d0a32a454a03febfa086e5305d7d1f2c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:44:83:11:e2:dc:f6:a1:33:ce:82:1b:13:68:16:9b:d9:51:
54:f9:7d:29:4f:46:bc:38:36:ca:29:c9:72:a2:a5:f0:ca:b8:
8d:65:19:0c:b6:1a:d0:29:63:d9:60:78:59:3a:73:d2:40:0e:
3a:04:bb:46:ab:56:b8:88:00:66:e6:0d:9a:ed:3e:1c:32:3b:
d6:ed:12:02:13:97:e5:4b:f7:12:ba:4a:f7:0c:37:f0:15:9f:
ea:47:4e:82:f8:15:51:00:b0:c1:01:41:61:55:e7:1f:8d:22:
de:8d:3f:ad:67:d5:c4:aa:4b:f1:6b:50:1f:0e:4f:b5:ab:ba:
46:f6:4a:45:a4:c3:0d:9a:70:f6:e0:ff:bd:1b:44:48:4e:7c:
f7:ad:80:8f:34:e8:8b:fd:f0:06:75:98:e2:2e:9f:65:c7:7a:
45:b4:6d:00:5e:0c:24:b1:1f:3c:85:39:14:e7:1d:1c:96:2a:
d7:1f:4d:04:36:16:be:79:21:6b:67:7f:42:9b:e4:13:3e:d9:
bb:af:d0:cd:10:68:4c:b7:31:44:76:a2:1e:97:cd:be:49:48:
5b:91:a7:11:37:d6:68:78:e8:30:66:a9:21:02:f0:ec:f0:b6:
cc:1a:ca:20:74:de:e5:9e:6b:d4:fe:50:4d:6f:1d:43:04:f8:
0d:34:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org