Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa
File: 15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa (raw, json)
Hash identifier: jTe10xvvGrIhcpQRXwA77R3nLhIMffgJ3BPrb5lBZOI=
Subject key identifier: BC:F8:5A:E8:65:C9:59:F4:D6:7B:E8:D0:E3:CF:D9:D6:87:99:F9:AB
Certificate issuer: /CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Certificate serial: 1FBE57
Authority key identifier: 44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa
Signing time: Fri 24 Mar 2023 08:31:56 +0000
ROA not before: Thu 23 Mar 2023 08:31:56 +0000
ROA not after: Sat 22 Mar 2025 08:31:56 +0000
asID: 265657
IP address blocks: 170.246.85.0/24 maxlen: 24
170.246.86.0/24 maxlen: 24
170.246.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 23:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2080343 (0x1fbe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Validity
Not Before: Mar 23 08:31:56 2023 GMT
Not After : Mar 22 08:31:56 2025 GMT
Subject: CN=15c27d910e02db059b4aa5b8cf4d696650c7f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:65:87:8a:ad:f7:2c:ee:da:60:28:33:f9:
30:a9:e1:a8:be:70:9b:74:94:10:14:32:94:a7:3f:
b9:ac:6d:ba:63:ea:6d:33:43:30:6a:db:32:de:4c:
73:c2:5a:47:e5:9f:53:13:64:74:ad:0e:7a:bc:ae:
be:87:84:93:28:92:b5:02:c0:d8:c9:e4:6d:84:63:
45:e5:54:c4:44:2d:58:34:0d:38:28:dc:f5:b3:c9:
00:02:18:43:3c:0c:a6:33:0c:88:39:b1:32:bf:fa:
f8:b2:4c:51:c4:47:9a:8c:ef:d2:08:34:ce:a3:bf:
e3:5d:1e:c1:55:45:06:ac:18:c2:11:21:75:e8:c4:
7e:60:a4:d8:80:ce:d5:b7:e1:dc:a8:87:72:4e:a4:
22:91:79:65:ef:4b:cf:bb:9a:c3:7b:5d:ae:df:1e:
fa:24:0c:a1:4f:76:e2:47:76:a1:f0:f8:dc:60:58:
b6:ce:12:89:e3:85:f4:cd:42:57:70:e9:07:c7:9d:
1b:a8:32:4d:50:66:4e:59:92:a5:72:c5:4e:49:8b:
88:ba:28:59:e0:6f:c6:62:99:1f:f1:27:d1:17:c6:
b9:53:67:99:bf:0a:5f:a8:5d:31:f2:b9:37:85:3b:
89:85:11:f4:ee:2a:33:fc:3e:bc:7e:fa:1d:bf:06:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:5A:E8:65:C9:59:F4:D6:7B:E8:D0:E3:CF:D9:D6:87:99:F9:AB
X509v3 Authority Key Identifier:
keyid:44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.85.0-170.246.87.255
Signature Algorithm: sha256WithRSAEncryption
83:5f:63:fd:33:29:21:03:c9:38:4f:c0:2c:60:aa:b8:28:51:
94:08:b7:b2:13:95:87:d8:91:fc:32:97:b8:97:04:fe:a5:3c:
9a:24:bd:1d:05:c0:bd:47:b3:97:81:e4:e3:a3:03:ac:1a:bb:
e2:66:60:26:2d:e5:b0:dc:5e:13:a2:1c:4f:e2:14:9e:45:6f:
32:4c:27:4c:02:a0:35:1d:7e:ea:eb:2a:5b:be:b2:e0:29:68:
8c:ad:8c:de:27:dc:78:24:ed:56:e4:03:c1:5f:30:12:70:10:
4b:91:c4:51:1a:32:d6:9f:6a:b9:4e:22:ae:bd:1b:d2:9d:ff:
46:89:a8:63:6c:d2:0c:08:c2:1c:d8:b1:df:51:14:c0:a4:b9:
e9:e7:24:6f:56:b3:58:e8:45:d3:9a:ca:0c:6e:3a:e3:43:47:
36:2b:94:40:93:c4:bf:c4:57:54:f2:ec:56:62:7b:62:4c:15:
41:77:36:2f:d1:59:de:61:bc:3f:25:1d:06:fc:5f:87:20:c0:
a9:2e:88:d6:a0:76:26:ab:12:b6:ef:8b:80:35:aa:1b:24:3f:
31:34:cc:5f:cd:5b:67:2c:8c:d6:e2:12:d1:4a:fe:31:43:57:
6f:54:d4:17:94:83:28:78:8c:0e:38:e8:39:dd:e1:b4:25:ba:
a1:7e:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 00:46:56 2024 by rpki-client on console-ams.rpki-client.org