Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa
File: 1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa (raw, json)
Hash identifier: mVYuLjCVR8Ko/Gtm+U2R2NodFJIzIUSAD7/mvt21EI0=
Subject key identifier: DB:7A:5C:0B:29:2A:96:EA:D9:2A:B1:FD:DE:5D:EC:BC:8A:35:7C:84
Certificate issuer: /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial: 16AA99
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa
Signing time: Tue 26 Apr 2022 06:27:07 +0000
ROA not before: Tue 26 Apr 2022 03:00:00 +0000
ROA not after: Fri 26 Apr 2024 03:00:00 +0000
asID: 269960
IP address blocks: 170.82.36.0/23 maxlen: 24
170.82.38.0/24 maxlen: 24
170.82.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485465 (0x16aa99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
Validity
Not Before: Apr 26 03:00:00 2022 GMT
Not After : Apr 26 03:00:00 2024 GMT
Subject: CN=1a902b2731767cc1cf61cb2c8b38da8442d1b0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:85:b8:b9:51:bf:69:8a:ac:51:3e:31:4b:
9a:2f:40:53:4a:d8:a8:8e:cd:2a:86:32:f6:72:0b:
29:42:bc:ca:70:92:5d:da:de:4e:b7:52:7f:7b:bf:
11:c2:6e:c9:41:cd:0c:d2:4b:8e:a6:ea:00:40:4b:
7b:44:91:17:cd:f0:88:93:4f:b4:ce:87:f0:25:87:
96:e1:6d:ab:b8:1f:1d:04:bd:38:d6:af:c4:19:4d:
8b:2e:70:04:b1:95:22:2c:77:e0:87:8d:d6:8c:c2:
ba:72:e7:7d:23:ff:5f:77:30:22:2d:34:f9:e3:90:
ba:91:2a:e4:b7:99:6a:8a:c4:6b:f8:07:73:06:67:
90:07:e0:41:9d:44:38:e1:c3:75:d8:ed:d3:20:a9:
4a:f6:cb:c2:3a:b0:c1:0c:e8:53:4a:51:f0:78:a4:
11:d3:74:f3:2f:b5:5d:68:39:6c:00:a8:48:1c:c8:
70:80:1e:62:fe:07:32:f7:29:ce:b6:20:9d:1f:d1:
4f:f6:db:b8:9f:1e:32:fd:9a:2f:41:c6:d9:1d:08:
49:f2:cf:60:df:2f:6d:6b:3b:b5:46:29:88:6f:7c:
5f:c6:c0:5b:a4:3e:16:19:27:d2:f4:e9:35:1b:1b:
20:9e:d6:9f:7b:76:7d:d6:95:ff:f3:36:fc:33:ca:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7A:5C:0B:29:2A:96:EA:D9:2A:B1:FD:DE:5D:EC:BC:8A:35:7C:84
X509v3 Authority Key Identifier:
keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/1a902b2731767cc1cf61cb2c8b38da8442d1b0a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.36.0-170.82.38.255
Signature Algorithm: sha256WithRSAEncryption
32:a6:a6:dc:f3:31:30:8d:f6:59:d9:7b:d1:07:b3:0f:5c:da:
58:58:92:8b:d1:80:19:dc:c2:46:92:3a:fd:4d:2e:fe:ac:0c:
bb:09:ff:56:e7:3e:7c:3e:f6:0c:f6:e4:3f:db:4e:f5:e7:1a:
70:0b:5e:c8:86:17:85:8a:81:90:c7:24:d1:26:9c:77:eb:9d:
80:fc:cc:f9:55:68:89:60:71:6c:83:44:86:d6:43:ff:7c:81:
69:f0:e6:5f:8a:91:60:11:76:e2:43:db:b2:05:92:a4:a3:d6:
e7:64:11:fa:09:eb:5e:fe:b1:37:4c:23:3d:5e:53:6b:a4:58:
17:11:bf:cb:ee:44:aa:33:f8:94:e9:0b:f5:5b:9e:8c:f9:2d:
cc:92:cd:f6:f3:72:52:69:bd:92:f9:86:04:17:3b:be:a4:39:
4c:e9:f9:cb:75:17:40:c7:1f:4b:57:2e:c4:5f:7b:48:21:9f:
cc:01:80:8a:56:5d:12:54:d6:c2:e0:cf:07:85:62:c3:d7:89:
bf:dd:af:f3:1f:f2:b1:e0:47:18:98:55:97:ec:a0:a1:fb:01:
0b:17:1b:ec:72:08:14:57:aa:b7:b9:06:8d:6e:60:97:d4:89:
b5:94:d6:f5:77:70:fe:ff:20:19:d2:9f:33:1e:92:8e:f0:4c:
85:76:d1:ad
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDFqqZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
MjM0YTdiNTNkMjRiNjI3MjYyMzU0NGJmMDJmOGQ2Mzg5OTc3ODEwHhcNMjIwNDI2
MDMwMDAwWhcNMjQwNDI2MDMwMDAwWjAzMTEwLwYDVQQDEygxYTkwMmIyNzMxNzY3
Y2MxY2Y2MWNiMmM4YjM4ZGE4NDQyZDFiMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqP2FuLlRv2mKrFE+MUuaL0BTStiojs0qhjL2cgspQrzKcJJd
2t5Ot1J/e78Rwm7JQc0M0kuOpuoAQEt7RJEXzfCIk0+0zofwJYeW4W2ruB8dBL04
1q/EGU2LLnAEsZUiLHfgh43WjMK6cud9I/9fdzAiLTT545C6kSrkt5lqisRr+Adz
BmeQB+BBnUQ44cN12O3TIKlK9svCOrDBDOhTSlHweKQR03TzL7VdaDlsAKhIHMhw
gB5i/gcy9ynOtiCdH9FP9tu4nx4y/ZovQcbZHQhJ8s9g3y9tazu1RimIb3xfxsBb
pD4WGSfS9Ok1Gxsgntafe3Z91pX/8zb8M8qSVwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFNt6XAspKpbq2Sqx/d5d7LyKNXyEMB8GA1UdIwQYMBaAFIDlv7LW5pqmja5W
mwZEWZwi/dEAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmEyMzRh
N2I1M2QyNGI2MjcyNjIzNTQ0YmYwMmY4ZDYzODk5Nzc4MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjZDJlYjQtNjQ4Ny00YjBlLWE0ODktZTFkNjM1
NjRiZWU2LzFhOTAyYjI3MzE3NjdjYzFjZjYxY2IyYzhiMzhkYTg0NDJkMWIwYTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNkMmViNC02NDg3LTRiMGUtYTQ4OS1lMWQ2
MzU2NGJlZTYvMmEyMzRhN2I1M2QyNGI2MjcyNjIzNTQ0YmYwMmY4ZDYzODk5Nzc4
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCqlIkAwQAqlImMA0GCSqGSIb3DQEBCwUAA4IBAQAypqbc
8zEwjfZZ2XvRB7MPXNpYWJKL0YAZ3MJGkjr9TS7+rAy7Cf9W5z58PvYM9uQ/2071
5xpwC17IhheFioGQxyTRJpx3652A/Mz5VWiJYHFsg0SG1kP/fIFp8OZfipFgEXbi
Q9uyBZKko9bnZBH6Cete/rE3TCM9XlNrpFgXEb/L7kSqM/iU6Qv1W56M+S3Mks32
83JSab2S+YYEFzu+pDlM6fnLdRdAxx9LVy7EX3tIIZ/MAYCKVl0SVNbC4M8HhWLD
14m/3a/zH/Kx4EcYmFWX7KCh+wELFxvscggUV6q3uQaNbmCX1Im1lNb1d3D+/yAZ
0p8zHpKO8EyFdtGt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org