Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/71be357f5bd45b7eaf992942cb3c5b3857a59364.roa
File: 71be357f5bd45b7eaf992942cb3c5b3857a59364.roa (raw, json)
Hash identifier: fVBNK/mBTDWkMG11a2bvOSarYYnnLfx3OnI9jo7gOOY=
Subject key identifier: 3C:BD:15:76:B6:1B:7B:06:DB:EA:DE:33:BF:38:8C:07:73:F3:E3:E8
Certificate issuer: /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial: 0D960C
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/71be357f5bd45b7eaf992942cb3c5b3857a59364.roa
Signing time: Thu 15 Apr 2021 15:21:21 +0000
ROA not before: Thu 15 Apr 2021 03:00:00 +0000
ROA not after: Sat 15 Apr 2023 03:00:00 +0000
asID: 262186
IP address blocks: 170.79.89.0/24 maxlen: 24
170.79.90.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890380 (0xd960c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
Validity
Not Before: Apr 15 03:00:00 2021 GMT
Not After : Apr 15 03:00:00 2023 GMT
Subject: CN=71be357f5bd45b7eaf992942cb3c5b3857a59364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:5b:a4:f9:18:64:ab:a6:c9:75:a5:70:dd:
b4:59:16:6c:94:7e:6b:05:99:8d:0a:ba:41:ab:11:
93:30:7d:5b:32:e7:fb:9f:34:ed:2e:b2:84:ee:3d:
9a:e4:09:93:c1:1c:8b:c9:5f:02:77:a8:db:7a:a3:
d7:58:a7:a0:29:22:0a:66:83:27:ba:bb:24:c5:c6:
ef:af:80:e2:3b:a1:e4:4b:a7:15:c4:72:c3:9c:ee:
7f:0c:14:fa:13:1f:cb:b1:d4:95:e7:10:03:cb:cd:
fb:bf:75:b6:e8:4a:83:72:33:b2:01:b0:98:4b:e3:
e7:36:5f:5c:61:5f:41:c3:c6:1f:a2:52:40:b8:12:
25:9f:2f:fe:f0:03:fe:37:e1:7f:f9:d3:30:0d:d4:
9c:73:db:7d:0c:0b:4e:d9:33:27:09:aa:61:ce:7a:
56:62:fe:91:17:d0:f0:80:d0:ae:0b:5b:f5:97:f0:
f0:27:e7:8e:e1:10:97:f3:4a:bd:e6:97:96:5e:d5:
cd:d2:08:da:b6:3d:42:42:13:f3:7b:61:57:aa:e0:
41:19:bc:52:1f:35:17:1f:e9:44:09:d3:66:79:33:
e3:85:4f:13:65:b1:50:39:bc:e8:65:6f:a4:a6:f9:
72:ec:d8:f7:64:f3:e3:f4:51:3f:f8:d6:8c:96:9d:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BD:15:76:B6:1B:7B:06:DB:EA:DE:33:BF:38:8C:07:73:F3:E3:E8
X509v3 Authority Key Identifier:
keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/71be357f5bd45b7eaf992942cb3c5b3857a59364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.89.0-170.79.91.255
Signature Algorithm: sha256WithRSAEncryption
35:42:f5:c5:5e:73:28:60:4f:af:b6:98:73:6b:08:4b:ea:09:
70:ec:15:a3:c3:7d:74:bb:68:b9:ff:2a:86:f0:eb:5e:a9:0c:
b3:6a:8a:b6:d5:25:d2:ae:56:67:c7:8c:4d:87:13:19:fd:58:
ce:b8:eb:7c:3a:1d:58:ae:31:53:b5:50:28:73:26:e8:ea:89:
79:15:73:8c:fa:f1:4d:63:c6:dd:bb:34:16:a7:d1:83:1d:69:
2f:fb:89:81:b8:ad:5d:a8:1c:94:35:9d:14:7f:5a:3f:32:52:
a6:11:12:dc:03:f3:51:9a:00:42:de:83:44:5d:f6:e3:d1:e1:
53:06:17:e2:4d:70:17:50:ca:6d:9e:0d:fa:a8:f0:5c:6d:47:
5d:9f:7b:28:92:d6:a7:48:fc:19:ea:e8:bd:0a:7e:56:71:f9:
b5:fc:70:17:4f:fb:17:96:e1:6d:50:93:c4:76:4b:34:fb:5e:
2f:08:db:83:1c:3b:8b:05:ac:f6:66:f6:13:4c:ac:68:aa:28:
e7:da:d1:72:59:91:90:d7:73:1c:02:4c:95:06:94:d2:19:ee:
60:1b:94:e7:2f:18:a8:75:73:96:e6:52:a4:55:8e:fa:df:c3:
f0:bc:20:95:13:03:00:2f:e5:a3:b7:33:9b:e5:2e:c2:5b:88:
d2:c1:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org