Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/9bde1ffcccb2a0144e9ce0fa3ba9b11c4d0eaf5a.roa
File: 9bde1ffcccb2a0144e9ce0fa3ba9b11c4d0eaf5a.roa (raw, json)
Hash identifier: 9WwjmAepxshDe9bl9N1Mf9eNndXEsLuFGb5KJDNeLfs=
Subject key identifier: 10:3A:60:2C:B8:5E:B2:12:F2:C1:BA:4D:73:B8:8E:07:9E:23:12:99
Certificate issuer: /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial: 16AE98
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/9bde1ffcccb2a0144e9ce0fa3ba9b11c4d0eaf5a.roa
Signing time: Tue 26 Apr 2022 06:52:18 +0000
ROA not before: Tue 26 Apr 2022 03:00:00 +0000
ROA not after: Fri 26 Apr 2024 03:00:00 +0000
asID: 27696
IP address blocks: 170.82.36.0/23 maxlen: 24
170.82.38.0/24 maxlen: 24
170.82.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486488 (0x16ae98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
Validity
Not Before: Apr 26 03:00:00 2022 GMT
Not After : Apr 26 03:00:00 2024 GMT
Subject: CN=9bde1ffcccb2a0144e9ce0fa3ba9b11c4d0eaf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:71:74:c4:43:2c:36:d9:62:d1:55:b0:e0:
aa:ee:85:52:2c:8f:a4:88:20:c0:7f:f5:7b:b0:6b:
75:84:15:00:9c:d4:f4:2c:08:6b:2e:99:5c:87:9d:
a9:de:74:68:ad:22:92:84:0c:03:b8:47:b2:9d:5a:
24:f3:71:52:4c:84:5c:f2:f4:84:81:78:54:36:75:
fd:78:cc:c1:16:c6:09:7e:6b:74:ab:04:04:06:6f:
17:03:8a:74:a2:1d:5a:86:8f:d8:a6:99:2d:13:d3:
2a:8f:65:bf:7b:d3:e3:e7:cb:d6:07:6b:c5:c7:c5:
0d:ba:a4:c9:03:fd:c7:cd:6d:19:ba:ce:dc:0c:d5:
5f:5d:6e:e3:3a:9d:d3:58:5f:47:ba:cd:e1:12:49:
76:8d:dc:62:ca:da:b6:df:27:2d:cf:07:86:65:90:
6d:6a:21:a4:bc:67:5c:40:3c:16:a0:dd:3c:60:53:
c8:6e:63:ba:51:dc:bd:dd:ac:d9:70:29:12:31:53:
54:53:f1:eb:ef:2b:65:a9:e3:95:c0:df:8d:17:3e:
49:90:f8:b5:9f:1c:46:52:9f:9d:c4:e2:c0:df:4a:
1b:f9:fc:52:da:12:06:aa:c1:cd:ed:85:55:56:d7:
a2:13:8b:b7:03:35:4d:20:e9:6e:23:05:5d:87:37:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:60:2C:B8:5E:B2:12:F2:C1:BA:4D:73:B8:8E:07:9E:23:12:99
X509v3 Authority Key Identifier:
keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/9bde1ffcccb2a0144e9ce0fa3ba9b11c4d0eaf5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.36.0-170.82.38.255
Signature Algorithm: sha256WithRSAEncryption
70:80:74:51:3e:8a:2e:01:96:40:cb:ed:14:2f:70:4f:38:e1:
4c:b6:c0:e5:7e:98:0a:eb:59:22:ef:4e:8c:a8:33:92:ba:39:
a5:d4:75:a5:e8:0c:af:ec:de:b0:b0:27:86:6f:19:59:f5:b0:
9b:92:07:1a:01:1a:76:a0:c2:4e:bf:1c:2f:df:89:e5:34:9a:
c3:56:ba:bf:ba:3a:c4:f8:d9:41:41:8e:03:00:cf:23:b0:c6:
50:cf:a3:92:54:8a:b7:bf:04:eb:26:c5:53:d8:7e:77:d6:34:
2a:00:6a:4f:97:0d:7d:a9:5d:98:03:75:ca:94:3f:56:71:e8:
b1:ef:8e:6d:b5:8d:d9:0b:1c:85:1c:3e:c6:12:81:04:83:97:
32:77:19:f1:b0:26:8f:98:6b:54:41:39:ff:d0:b9:94:6c:06:
fd:0c:1c:42:c0:cc:eb:48:71:61:10:18:f3:21:ba:b3:8a:a1:
30:ac:d8:3e:94:1d:0d:fe:be:b7:3b:7f:88:67:19:21:f3:be:
54:e3:17:1f:1c:d9:e9:c4:5f:3c:d1:7c:b5:11:16:56:53:00:
4b:53:f9:e8:41:21:3c:09:cb:f7:04:b7:cb:a4:1b:9c:ce:53:
a6:f3:fa:d0:ac:df:e8:ad:c2:b1:d9:9b:3f:5f:85:86:3e:a1:
eb:19:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org