Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70b21622f41b5ab5af564e09f0c8a5a7d22221a8.roa
File: 70b21622f41b5ab5af564e09f0c8a5a7d22221a8.roa (raw, json)
Hash identifier: DMTBeZ6BVTnezO2jn2He4f0fXI+a1HB3mzskiCnPNzg=
Subject key identifier: 6F:CB:73:5F:0C:16:71:47:81:44:C0:97:0A:FE:FA:AF:64:03:B5:81
Certificate issuer: /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial: 0D6880
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70b21622f41b5ab5af564e09f0c8a5a7d22221a8.roa
Signing time: Wed 24 Mar 2021 14:46:38 +0000
ROA not before: Wed 24 Mar 2021 14:46:37 +0000
ROA not after: Tue 24 Mar 2026 14:46:37 +0000
asID: 14754
IP address blocks: 201.247.0.0/17 maxlen: 18
201.247.192.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878720 (0xd6880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Validity
Not Before: Mar 24 14:46:37 2021 GMT
Not After : Mar 24 14:46:37 2026 GMT
Subject: CN=70b21622f41b5ab5af564e09f0c8a5a7d22221a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:03:c1:b3:55:1b:56:6f:49:45:b3:99:29:
d1:c9:a2:08:02:39:65:67:b3:55:f2:44:be:34:4d:
53:da:85:53:ad:cb:e3:be:28:0a:ad:2f:e7:42:06:
f1:b0:0d:36:54:4b:82:ff:27:56:53:5a:9c:c0:49:
bc:a7:49:e0:9e:54:ae:e5:c8:0e:c3:43:7c:df:60:
ac:5a:df:77:03:5e:6c:d9:87:0b:ca:2a:f1:5e:85:
c8:78:8b:34:4f:a2:67:a6:2c:a3:41:d5:b2:87:f1:
28:10:4f:71:2f:3b:6e:f4:6f:1c:42:0e:9b:48:12:
e3:42:3b:18:ae:0c:b1:47:56:31:7c:7d:0b:d7:f8:
a1:4f:b1:e2:11:dc:33:e4:9a:b6:c7:b5:e9:54:5d:
95:bf:c3:c9:5d:29:74:c9:f1:93:ab:f7:62:15:8e:
80:64:27:e6:f3:66:2b:7a:bf:71:36:01:6d:43:1a:
87:eb:6e:0a:a9:eb:8e:83:43:70:53:c6:a0:ed:a3:
85:28:78:1f:d3:d2:19:3d:d0:c5:f7:32:04:2f:72:
89:b5:9c:48:59:90:37:e3:fb:44:a0:60:b7:30:bf:
43:78:c4:7e:2b:df:81:6a:12:c5:44:78:80:cb:1c:
a0:75:db:6e:93:14:0f:31:74:4a:9d:ea:1a:be:fb:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:73:5F:0C:16:71:47:81:44:C0:97:0A:FE:FA:AF:64:03:B5:81
X509v3 Authority Key Identifier:
keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70b21622f41b5ab5af564e09f0c8a5a7d22221a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.247.0.0/17
201.247.192.0/18
Signature Algorithm: sha256WithRSAEncryption
55:23:fc:0b:47:47:9c:5a:46:c6:c7:b1:30:91:e3:64:ff:9a:
12:a4:36:e5:0f:88:ce:00:32:db:f8:a1:41:01:55:f4:0e:c1:
e9:cb:36:e6:a3:01:59:9c:aa:29:ed:04:96:97:ce:0e:34:ee:
b8:cf:9f:96:7d:03:77:3c:c8:30:d5:66:0e:5e:69:53:72:76:
60:01:31:24:c8:22:c7:24:1e:5f:c9:34:dd:36:f3:96:23:11:
2f:09:04:33:87:41:ca:5f:4e:f6:5c:b3:ff:ff:3b:a9:e3:c8:
6b:e4:82:0b:ee:bf:10:bb:63:01:68:4a:64:9b:2b:87:72:24:
53:dc:91:be:33:89:a9:e9:ae:3f:0d:6f:e7:17:2f:7d:96:e2:
f1:be:02:e7:dc:f6:63:d0:a7:58:7e:c1:1b:24:3c:5a:8b:04:
dc:05:a7:df:03:91:ef:7d:45:f3:c9:03:97:17:c2:29:56:2d:
52:f2:bc:00:95:71:b6:1d:a5:b9:cf:5c:74:f6:70:1d:05:b1:
c8:a9:72:bb:68:b9:f2:66:43:eb:b4:b9:10:fd:1b:a6:0b:68:
6d:81:75:44:8e:6b:d3:b6:dc:84:f7:d4:09:4f:7f:7a:8a:63:
b3:1c:4b:d5:aa:a1:4c:eb:e3:42:7f:3e:5f:fa:c6:37:0d:2d:
8f:e5:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 23:25:28 2023 by rpki-client on console-fra.rpki-client.org