Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa
File: a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa (raw, json)
Hash identifier: GdvSS7/sftriYTzznEx39x9JCtvxh4athILDwXzMV6Q=
Subject key identifier: 34:45:EE:44:BA:01:A2:B8:4A:34:8D:32:FC:6B:F4:8F:C4:AF:1A:3A
Certificate issuer: /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial: 22261C
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa
Signing time: Wed 05 Jul 2023 01:51:31 +0000
ROA not before: Tue 04 Jul 2023 01:51:31 +0000
ROA not after: Sat 05 Jul 2025 01:51:31 +0000
asID: 52468
IP address blocks: 170.244.209.0/24 maxlen: 24
170.244.210.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237980 (0x22261c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Validity
Not Before: Jul 4 01:51:31 2023 GMT
Not After : Jul 5 01:51:31 2025 GMT
Subject: CN=a17e9a17af6aed9ad99ae0eb88ea0f40917757ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:bf:46:f2:35:82:d6:96:30:f2:ac:97:7f:
13:ea:ee:b4:53:4e:ac:d4:c9:73:be:d3:23:79:77:
f4:4c:21:9c:79:a8:92:b2:0c:69:da:0a:48:85:b8:
36:ab:85:68:27:7d:f8:a7:31:31:8d:21:7c:b8:82:
20:4d:4f:2d:50:44:93:46:4c:0e:2f:0c:36:eb:fb:
6e:05:92:c0:75:c9:17:a2:b9:ee:16:7b:65:bd:95:
e3:5b:e1:d6:8d:54:41:3a:2a:b8:b2:ea:7b:d2:63:
b0:e9:df:8d:bb:52:a7:0b:b2:43:95:25:f8:4b:cf:
55:78:fb:b8:7f:d1:33:00:25:1b:d8:ea:79:73:21:
14:fd:a1:21:34:99:7e:4f:cf:0b:20:63:a1:3d:55:
c2:cb:75:83:f7:27:e8:08:4c:14:4a:02:fe:01:47:
8a:f2:f4:bb:6c:46:f5:73:58:da:6e:7d:23:82:06:
7e:5e:45:11:88:31:02:6e:a7:f0:8e:d8:b4:08:ba:
77:90:46:70:4e:46:14:e0:32:4d:65:93:50:63:40:
05:e3:cf:4c:5b:f6:8c:9f:4b:ff:35:e1:f4:4f:30:
c5:dc:a4:de:5e:88:fc:5c:e1:73:0a:a1:e5:d8:cf:
6f:b5:b8:0d:16:9b:b4:24:e4:15:7d:3d:cf:96:c2:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:EE:44:BA:01:A2:B8:4A:34:8D:32:FC:6B:F4:8F:C4:AF:1A:3A
X509v3 Authority Key Identifier:
keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/a17e9a17af6aed9ad99ae0eb88ea0f40917757ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.209.0-170.244.211.255
Signature Algorithm: sha256WithRSAEncryption
4f:86:ba:16:2b:2b:4b:49:68:93:9f:65:d0:c6:c1:b4:e0:d4:
cb:c5:b6:c4:11:bc:1e:49:f2:9f:c2:c6:63:f0:9c:93:77:ed:
bc:fb:6b:95:d7:aa:9f:1e:d2:ae:bd:55:11:b7:9a:9c:03:3c:
b1:cc:b4:54:de:2f:ab:58:ed:b0:ea:48:70:e1:5a:da:7a:dc:
c9:63:ed:46:5d:83:45:de:3c:06:17:72:f2:3e:28:b1:39:ac:
83:8b:f4:2d:43:c7:d6:9b:01:fe:d8:e3:b3:74:7b:8c:2c:57:
96:a5:61:c0:3b:da:c1:c7:02:2b:e7:d0:0c:8c:32:9e:03:05:
95:66:69:88:39:d9:83:00:e4:7d:f6:1d:d1:47:73:e1:de:bf:
f2:12:24:f0:42:16:09:d0:d3:bf:e6:e0:1d:e2:03:04:d7:10:
19:ec:16:16:d0:50:2c:88:07:75:ef:59:86:4e:dd:b6:e7:80:
58:4f:fe:70:55:2c:c0:14:d1:34:da:75:d6:30:0e:56:e1:e5:
00:6c:b0:b5:91:5d:a3:5d:76:a2:5e:04:7b:a3:40:80:73:cc:
a3:78:b5:ec:f5:2a:2e:ca:1f:27:e3:9b:04:dd:fd:60:5e:6d:
f3:97:fd:0a:f0:16:12:83:18:fb:a8:08:83:90:c1:6e:14:47:
87:55:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 19:46:06 2023 by rpki-client on console-ams.rpki-client.org