Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/5b17caac98059c373553f43a9e7298c4e59fc829.roa
File: 5b17caac98059c373553f43a9e7298c4e59fc829.roa (raw, json)
Hash identifier: YtFAp9u7GSp4t9EUFufFD3EHlQj/o+AN7QWwaY4eA1o=
Subject key identifier: 2B:D6:D1:7C:0A:F5:A7:60:A2:41:F1:E5:75:F8:DC:EC:F4:5A:64:3E
Certificate issuer: /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial: 074F
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/5b17caac98059c373553f43a9e7298c4e59fc829.roa
Signing time: Thu 10 Feb 2022 20:57:03 +0000
ROA not before: Thu 10 Feb 2022 03:00:00 +0000
ROA not after: Sat 10 Feb 2024 03:00:00 +0000
asID: 270047
IP address blocks: 179.0.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 07:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871 (0x74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
Validity
Not Before: Feb 10 03:00:00 2022 GMT
Not After : Feb 10 03:00:00 2024 GMT
Subject: CN=5b17caac98059c373553f43a9e7298c4e59fc829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:49:f5:ee:94:a6:93:c7:d0:69:18:74:11:
de:5e:b2:41:b2:af:39:2a:7d:81:13:ea:78:95:f1:
db:c2:d6:e4:f8:af:e6:ad:f4:6f:3b:44:e6:ca:eb:
04:77:44:9a:a4:c2:13:3c:59:8d:29:4d:21:25:c5:
9d:9b:2f:63:c0:87:f2:9c:02:c0:5f:66:6e:5d:b1:
61:12:79:93:5a:07:bb:2a:23:b9:05:df:64:f9:68:
57:3c:b5:91:65:ac:a7:b7:92:4f:00:b3:6e:d3:8c:
69:b0:85:15:2e:e8:c6:f4:bf:30:cc:10:05:54:7e:
fd:46:6f:86:4b:c5:8c:36:03:76:eb:d3:10:77:07:
5a:de:4f:e8:ad:0e:a7:a5:9c:e8:29:9a:98:da:da:
9c:37:92:32:e8:41:e9:72:79:ea:ed:4d:8a:87:34:
43:fb:31:ea:14:5f:ce:25:82:89:7e:9d:07:75:43:
4d:a2:b9:31:16:8e:44:14:64:af:55:42:1f:7f:a8:
d5:1c:d9:5e:6c:16:4a:b3:39:1c:ca:9a:7d:03:c6:
66:a9:92:fe:75:ac:4d:8b:0e:e0:89:a0:be:26:a2:
8d:63:99:0a:5c:d2:68:7e:c2:03:8d:54:c5:96:f2:
69:73:ec:0b:93:03:cc:1c:f0:9f:14:31:04:8f:d0:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D6:D1:7C:0A:F5:A7:60:A2:41:F1:E5:75:F8:DC:EC:F4:5A:64:3E
X509v3 Authority Key Identifier:
keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/5b17caac98059c373553f43a9e7298c4e59fc829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.185.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1f:81:c9:5d:78:18:ed:d7:c6:58:d9:e6:24:e2:b4:5a:da:
be:2a:79:ba:b9:6f:62:17:e4:d7:6b:cd:ec:5c:87:3f:45:f7:
39:0f:ee:84:b0:9c:f4:62:91:62:8e:c0:5b:a3:98:a2:bb:f3:
a4:38:0a:62:8f:ac:c3:3d:84:0f:6b:72:b4:32:39:a0:62:ad:
d2:c1:5b:e9:c7:57:0e:c1:c4:f6:38:86:c9:8f:5b:25:fd:16:
de:5c:b8:d6:68:e1:da:65:fd:70:02:ee:bd:b9:4f:f8:1c:f6:
7d:51:02:f9:db:24:3e:fd:06:bc:55:fe:04:c3:77:d1:65:bb:
e2:9d:69:88:c6:da:02:2c:9c:a1:02:e7:19:7d:3e:15:26:b0:
ad:a3:01:9c:59:74:d5:07:6d:99:cd:d0:38:f9:82:7b:2e:83:
ab:1d:0a:7d:f5:ff:51:33:b3:46:c4:b1:2e:59:4e:4f:03:cd:
9a:2f:00:a4:fb:14:dd:e1:95:49:1e:69:41:20:66:a6:40:70:
0d:d8:9b:b3:91:0f:3c:6b:42:65:6d:7e:21:3d:cf:76:fb:a6:
79:b0:c1:4a:fc:f1:45:ef:fb:fa:5f:fe:76:94:4c:25:21:e7:
17:3a:fe:15:ff:8d:cc:20:32:83:a0:c1:db:9c:72:fc:da:75:
dd:cd:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:20:37 2024 by rpki-client on console-ams.rpki-client.org