Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/a66f30c7b1f08be1f76d8072cffd769ba73dbb1d.roa
File: a66f30c7b1f08be1f76d8072cffd769ba73dbb1d.roa (raw, json)
Hash identifier: y6AsxXC57bMTi2VxZrmdKAONn+px5xwHtQTchEKs8So=
Subject key identifier: 01:1B:FB:54:6B:9B:70:71:B3:03:CF:7B:4C:F7:73:03:3F:1A:DE:19
Certificate issuer: /CN=652b18729db050982b6f745b4c791475c88ba009
Certificate serial: 231C4C
Authority key identifier: 0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/a66f30c7b1f08be1f76d8072cffd769ba73dbb1d.roa
Signing time: Tue 26 Sep 2023 22:49:31 +0000
ROA not before: Mon 25 Sep 2023 22:49:31 +0000
ROA not after: Fri 26 Sep 2025 22:49:31 +0000
asID: 267857
IP address blocks: 170.79.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301004 (0x231c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652b18729db050982b6f745b4c791475c88ba009
Validity
Not Before: Sep 25 22:49:31 2023 GMT
Not After : Sep 26 22:49:31 2025 GMT
Subject: CN=a66f30c7b1f08be1f76d8072cffd769ba73dbb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:7a:f2:03:c3:39:9e:bf:d9:91:c7:46:a0:
68:44:75:df:53:79:f7:4f:88:e9:37:b4:b0:13:fb:
61:99:37:a4:f0:7d:fb:8f:61:8f:15:cb:68:62:e1:
89:fd:d1:1f:88:78:84:05:35:2b:31:ff:c5:2a:ab:
b9:c5:3e:e1:10:30:7c:f0:c3:6e:6d:e0:e5:f1:fc:
1b:bc:7b:0c:82:13:8b:47:5d:bc:f0:da:99:92:ab:
2d:60:cd:a5:28:6c:25:1e:16:d8:c1:73:82:84:e3:
14:0b:db:56:17:84:8e:9e:e7:5a:14:b5:0a:6b:5c:
1f:b7:b7:2a:eb:d6:b1:34:7a:ff:20:b1:b0:e4:67:
1a:0a:3f:9f:ed:e3:14:e8:44:2c:43:07:29:be:c0:
41:fc:dc:43:8d:ac:03:ab:e8:93:8b:84:b1:92:19:
c2:1b:cc:91:d6:6d:ad:df:3b:d5:bf:df:d2:c7:b8:
c5:3f:5a:42:82:63:f9:1f:1f:1c:58:bd:42:98:5b:
0a:18:48:f8:6b:2c:05:57:68:2d:c8:9d:27:60:b9:
d9:fc:74:a1:2b:d6:32:19:f1:a6:ed:0e:9c:d8:65:
da:03:69:94:5a:5a:bd:c8:e0:e8:cb:21:4a:96:f3:
04:7e:7e:74:9b:28:36:23:bb:fd:12:68:30:af:09:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:FB:54:6B:9B:70:71:B3:03:CF:7B:4C:F7:73:03:3F:1A:DE:19
X509v3 Authority Key Identifier:
keyid:0F:25:6D:C0:C7:C2:F9:8A:51:04:56:A1:13:39:88:01:BA:4E:9D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652b18729db050982b6f745b4c791475c88ba009.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/a66f30c7b1f08be1f76d8072cffd769ba73dbb1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4c898eff-7883-4b23-9243-c2d72e63b4ee/652b18729db050982b6f745b4c791475c88ba009.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:2f:82:6a:1a:98:84:cb:9d:83:4e:b8:85:20:18:76:0b:a5:
43:3e:b6:4a:fc:d2:f6:65:f1:a2:f9:f6:40:cc:9e:0f:58:a2:
76:15:c0:fb:47:c8:73:b8:02:1a:23:d8:08:0f:44:bf:41:3a:
20:c7:b3:7d:2f:08:5c:7e:e2:4b:6f:1c:05:be:e0:2e:6d:d9:
ed:eb:ec:b2:64:e3:e1:11:26:00:2d:47:74:5e:ea:7b:26:77:
98:38:20:4a:76:14:c2:b7:9e:de:6e:90:31:db:16:40:27:73:
de:2c:b1:f8:77:27:c1:dc:2b:3f:e3:ed:6e:c1:1b:04:6a:bd:
bd:63:01:1c:b6:b3:27:8b:ca:73:3d:f2:ca:69:b0:9e:1d:d5:
65:ed:90:96:61:de:93:81:b8:fe:0f:49:a5:47:60:65:81:d1:
8f:ad:6b:38:2b:aa:cc:41:cd:43:16:3d:a2:85:87:c4:0f:d8:
b5:3b:64:cf:9d:87:cf:b1:a5:13:95:3d:c5:38:ba:ae:2c:ba:
59:52:af:bf:ca:3b:5a:bf:70:6a:79:e1:86:61:9d:c3:86:5a:
1b:ee:5b:64:47:42:88:5f:21:e8:61:7c:04:b7:af:15:77:0e:
61:09:f3:7f:3c:8b:0d:ea:78:24:d5:e5:0b:f8:97:0a:03:c9:
f1:19:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 23:59:56 2023 by rpki-client on console-fra.rpki-client.org