Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/1ae2ef95d543bbdbd5b640564a3ae21412d0382e.roa
File: 1ae2ef95d543bbdbd5b640564a3ae21412d0382e.roa (raw, json)
Hash identifier: /urhooVXhCZ/6ayBY4OPoPgHDKUUNVFFr8xjrORN8GA=
Subject key identifier: 1E:09:BF:AE:88:D8:91:27:3F:AC:36:F5:29:BD:0B:F5:E1:BD:67:B1
Certificate issuer: /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial: 06DC3B
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/1ae2ef95d543bbdbd5b640564a3ae21412d0382e.roa
Signing time: Wed 24 Mar 2021 14:41:41 +0000
ROA not before: Wed 24 Mar 2021 14:41:38 +0000
ROA not after: Tue 24 Mar 2026 14:41:38 +0000
asID: 264637
IP address blocks: 170.80.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449595 (0x6dc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Validity
Not Before: Mar 24 14:41:38 2021 GMT
Not After : Mar 24 14:41:38 2026 GMT
Subject: CN=1ae2ef95d543bbdbd5b640564a3ae21412d0382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:b6:0b:bb:ff:1d:85:c1:f4:f1:43:65:0a:
c7:6f:26:66:a2:43:45:a1:dd:79:c1:e8:5a:3e:14:
c7:50:8e:80:bc:78:40:4e:89:3b:b5:6c:eb:d6:43:
9e:03:42:7b:0d:fd:0c:16:7a:c4:84:14:6e:d4:94:
9f:ae:42:a0:3b:39:a5:f2:a4:4c:25:cc:8c:50:38:
77:e7:7e:bf:88:76:00:ec:1b:8b:76:c0:9f:11:73:
47:8f:c3:36:46:ee:ea:eb:50:52:73:29:5c:07:af:
5e:b4:51:dc:d0:a1:a4:a7:65:54:3f:fe:2b:2b:88:
c5:8a:45:db:35:81:80:a8:eb:38:f5:49:d5:c0:18:
14:a8:62:10:0c:66:98:d3:eb:4e:1e:d1:99:7d:0f:
51:e0:ed:86:8a:6f:32:cb:e0:17:ed:8b:a0:4a:2c:
72:95:d3:2c:92:73:31:fc:aa:c3:ad:1e:e7:df:64:
d4:db:fe:50:95:0f:2c:c3:d2:f1:02:dc:6c:43:f6:
8c:be:f7:87:b5:fb:ae:52:22:47:9b:b3:e2:18:73:
66:8d:b7:88:8a:a2:d9:ce:6e:b7:90:5f:78:36:95:
8d:d3:d7:6f:5c:8a:46:14:3a:24:7c:4d:cc:ad:dd:
01:fd:16:cd:d4:c4:48:19:b9:e7:f8:c6:11:c1:93:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:09:BF:AE:88:D8:91:27:3F:AC:36:F5:29:BD:0B:F5:E1:BD:67:B1
X509v3 Authority Key Identifier:
keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/1ae2ef95d543bbdbd5b640564a3ae21412d0382e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.22.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c9:d3:f5:03:13:fd:cc:ee:65:45:2b:18:a4:a6:36:52:0b:
f8:df:ca:23:2e:0c:a8:e0:39:0a:61:a3:33:3f:52:20:66:3c:
06:d9:85:9c:3e:06:c5:3b:b1:25:4a:07:8e:ba:c6:6c:88:a3:
4d:30:e0:c8:95:dc:5d:40:08:d1:0b:d9:09:2a:71:d2:9b:49:
11:64:16:bf:cb:61:71:a9:4f:ea:ff:4f:8b:6f:80:bc:15:08:
0f:d7:db:2c:3d:0e:7b:60:db:b4:d5:99:2c:6a:f7:59:48:58:
49:f5:a6:ec:d9:e3:6e:68:39:97:a2:46:c5:76:2b:62:24:ff:
30:6c:b0:4d:48:f9:2a:79:ab:a0:5b:62:a9:db:08:cd:14:d5:
9d:c1:67:b2:97:e5:44:0a:48:fc:61:84:38:94:1c:73:73:91:
0b:7a:53:67:4b:e5:46:71:09:eb:c3:98:05:f3:ba:15:8a:8a:
4e:c6:84:5a:86:d5:2f:f3:98:e0:d5:15:3a:e4:0b:0e:fc:92:
00:dd:dc:f3:27:f9:a4:98:e6:2c:b6:6b:33:8e:17:4d:80:55:
97:ad:3f:b5:21:3f:04:9b:00:7e:79:9e:2a:be:a2:4b:3f:26:
8c:b2:ca:d5:a2:ec:5a:9f:8b:8c:be:b7:8a:24:e3:3b:86:9a:
d8:c9:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 01:22:25 2023 by rpki-client on console-fra.rpki-client.org