Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa
File: 8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa (raw, json)
Hash identifier: T1bxm6TS3049U9mkLVqBg1raOvAw9e5GB3Jcse3BxLk=
Subject key identifier: 3E:1F:DE:6A:C8:2A:68:C3:FA:C8:B7:77:B7:F8:63:1D:B8:F5:37:24
Certificate issuer: /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial: 16B347
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa
Signing time: Tue 26 Apr 2022 06:54:36 +0000
ROA not before: Tue 26 Apr 2022 03:00:00 +0000
ROA not after: Fri 26 Apr 2024 03:00:00 +0000
asID: 27696
IP address blocks: 170.82.36.0/23 maxlen: 24
170.82.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1487687 (0x16b347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
Validity
Not Before: Apr 26 03:00:00 2022 GMT
Not After : Apr 26 03:00:00 2024 GMT
Subject: CN=8da71b181aaf9ab85d57c184d9019e15fbb16b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:71:38:bb:d6:5a:78:2c:bc:a0:3e:82:a5:
93:69:e7:63:6c:39:3d:56:4a:73:bc:68:ad:e4:96:
d1:d7:fa:79:44:f2:c5:74:68:60:bb:01:f4:29:27:
00:9d:2f:de:24:18:81:6d:65:ba:4b:e9:88:46:da:
b1:c0:c7:3f:95:a6:2c:d5:bd:c6:31:82:2c:fc:43:
35:dd:6d:68:21:38:e7:5a:b0:60:4a:a5:a7:ff:80:
8e:c1:fc:88:54:d0:25:bb:d3:ad:01:67:18:47:97:
e2:ff:83:58:00:6a:2a:71:8d:3a:92:af:75:26:d5:
a0:b0:56:06:53:4e:43:b8:12:77:83:5a:7e:eb:84:
d8:1d:0c:77:29:8b:93:38:d0:ef:2b:5a:dc:95:94:
d2:1c:70:9f:d9:43:ea:86:ba:23:35:88:4a:da:34:
2d:58:17:2d:c2:93:59:90:f9:7d:49:00:8b:75:59:
82:42:cb:15:e4:08:1b:b0:42:ea:33:90:50:e9:58:
b4:c8:fa:55:b2:5f:65:59:7b:73:0f:a8:4c:83:28:
cb:ab:1b:4e:48:7a:f3:ea:a7:15:d7:41:4d:57:6d:
66:10:af:df:ca:c5:57:f1:f3:09:40:cb:8e:52:a6:
41:89:06:56:99:f6:db:85:b9:84:47:70:1b:97:ba:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:DE:6A:C8:2A:68:C3:FA:C8:B7:77:B7:F8:63:1D:B8:F5:37:24
X509v3 Authority Key Identifier:
keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/8da71b181aaf9ab85d57c184d9019e15fbb16b82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.36.0-170.82.38.255
Signature Algorithm: sha256WithRSAEncryption
04:c4:76:8b:fa:3d:1a:7a:a0:e2:d6:df:d1:92:0e:66:df:7d:
f6:96:ba:7d:f0:ca:a6:cd:7b:8b:58:b0:6c:d8:0e:d1:ab:4a:
eb:66:6d:54:94:c7:75:65:9c:70:29:32:a4:8e:e1:a6:ba:d0:
20:e1:01:ec:cb:6d:2d:8e:2d:00:1b:4a:35:8b:4b:2e:1f:25:
2e:44:ba:bb:90:2b:e4:e4:b9:42:a0:65:82:82:d6:43:e9:db:
a4:bb:aa:e1:e1:3c:47:74:38:d9:27:e7:35:de:e1:60:02:81:
dd:1c:ff:63:de:2b:6b:b8:cd:7d:f8:a0:69:8f:ef:41:16:d7:
55:c5:c0:7d:ba:ea:54:73:b4:94:e9:05:60:90:c6:b7:e9:3e:
08:01:e6:d6:9c:13:53:d7:5b:bc:e6:c5:da:b7:8f:c9:d7:62:
56:b0:7e:dc:bb:c0:62:4a:8c:96:9a:de:3f:9c:14:d3:9f:5b:
fe:be:0d:84:e8:6e:df:c9:61:9c:a7:0a:54:5b:1f:63:3f:5b:
99:ab:5d:27:09:de:9e:13:f2:30:50:6d:a4:05:e3:77:9e:5b:
0b:96:13:7f:d9:5a:30:de:0d:c5:54:f4:5d:09:12:cf:a6:a8:
39:3a:ce:3a:09:9b:76:ce:c0:3e:ad:fb:22:2f:94:cc:0d:4a:
e7:68:dd:73
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDFrNHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
MjM0YTdiNTNkMjRiNjI3MjYyMzU0NGJmMDJmOGQ2Mzg5OTc3ODEwHhcNMjIwNDI2
MDMwMDAwWhcNMjQwNDI2MDMwMDAwWjAzMTEwLwYDVQQDEyg4ZGE3MWIxODFhYWY5
YWI4NWQ1N2MxODRkOTAxOWUxNWZiYjE2YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoUhxOLvWWngsvKA+gqWTaedjbDk9VkpzvGit5JbR1/p5RPLF
dGhguwH0KScAnS/eJBiBbWW6S+mIRtqxwMc/laYs1b3GMYIs/EM13W1oITjnWrBg
SqWn/4COwfyIVNAlu9OtAWcYR5fi/4NYAGoqcY06kq91JtWgsFYGU05DuBJ3g1p+
64TYHQx3KYuTONDvK1rclZTSHHCf2UPqhrojNYhK2jQtWBctwpNZkPl9SQCLdVmC
QssV5AgbsELqM5BQ6Vi0yPpVsl9lWXtzD6hMgyjLqxtOSHrz6qcV10FNV21mEK/f
ysVX8fMJQMuOUqZBiQZWmfbbhbmER3Abl7qJxQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFD4f3mrIKmjD+si3d7f4Yx249TckMB8GA1UdIwQYMBaAFIDlv7LW5pqmja5W
mwZEWZwi/dEAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmEyMzRh
N2I1M2QyNGI2MjcyNjIzNTQ0YmYwMmY4ZDYzODk5Nzc4MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjZDJlYjQtNjQ4Ny00YjBlLWE0ODktZTFkNjM1
NjRiZWU2LzhkYTcxYjE4MWFhZjlhYjg1ZDU3YzE4NGQ5MDE5ZTE1ZmJiMTZiODIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNkMmViNC02NDg3LTRiMGUtYTQ4OS1lMWQ2
MzU2NGJlZTYvMmEyMzRhN2I1M2QyNGI2MjcyNjIzNTQ0YmYwMmY4ZDYzODk5Nzc4
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCqlIkAwQAqlImMA0GCSqGSIb3DQEBCwUAA4IBAQAExHaL
+j0aeqDi1t/Rkg5m3332lrp98MqmzXuLWLBs2A7Rq0rrZm1UlMd1ZZxwKTKkjuGm
utAg4QHsy20tji0AG0o1i0suHyUuRLq7kCvk5LlCoGWCgtZD6duku6rh4TxHdDjZ
J+c13uFgAoHdHP9j3itruM19+KBpj+9BFtdVxcB9uupUc7SU6QVgkMa36T4IAebW
nBNT11u85sXat4/J12JWsH7cu8BiSoyWmt4/nBTTn1v+vg2E6G7fyWGcpwpUWx9j
P1uZq10nCd6eE/IwUG2kBeN3nlsLlhN/2Vow3g3FVPRdCRLPpqg5Os46CZt2zsA+
rfsiL5TMDUrnaN1z
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org