Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/125b2deba6b6ca485738ecd89eb5a3fb7dfa2317.roa
File: 125b2deba6b6ca485738ecd89eb5a3fb7dfa2317.roa (raw, json)
Hash identifier: zKyb65TzmVbhuGicpkhUAQGRHT3USC7xBXiSkG7V3CI=
Subject key identifier: 0C:06:AA:15:5E:FC:00:54:54:CA:82:53:59:7B:0E:30:E5:22:AA:EF
Certificate issuer: /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial: 1540E9
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/125b2deba6b6ca485738ecd89eb5a3fb7dfa2317.roa
Signing time: Mon 04 Apr 2022 08:30:00 +0000
ROA not before: Mon 04 Apr 2022 08:30:00 +0000
ROA not after: Wed 03 Apr 2024 08:30:00 +0000
asID: 269862
IP address blocks: 168.194.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392873 (0x1540e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Validity
Not Before: Apr 4 08:30:00 2022 GMT
Not After : Apr 3 08:30:00 2024 GMT
Subject: CN=125b2deba6b6ca485738ecd89eb5a3fb7dfa2317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:00:58:19:20:29:37:91:fe:44:a8:8a:df:
e4:39:4a:80:eb:cf:5f:6b:a6:b5:f6:88:8a:47:41:
17:41:09:dc:1e:eb:f9:b4:fe:8f:5c:36:85:d2:05:
6e:81:ef:7b:79:bb:92:7c:4d:cf:6f:bf:b4:d9:e0:
dc:ad:d2:05:ef:da:08:e5:21:b6:b0:fc:c0:b9:83:
a8:1d:b9:cc:ce:2d:aa:ee:a0:cc:ef:98:96:7f:c6:
ad:0b:25:ec:5b:7b:e8:fa:3a:0e:6d:3d:57:74:ed:
a0:21:e7:ed:76:78:6a:2f:8a:3c:5e:be:3c:00:d2:
36:d4:6c:12:ed:ef:da:f0:ec:60:d5:32:e0:96:43:
2a:12:b7:75:e0:56:ce:31:9b:81:15:39:43:bc:07:
56:6a:b2:a1:89:38:1a:6a:ee:48:d3:48:a1:86:68:
e0:af:45:a3:d4:2b:ec:60:4d:88:fd:d4:9e:57:35:
44:5b:ad:3e:df:35:79:05:4e:1c:e7:b5:f6:a6:14:
b5:f4:db:0c:5d:36:e6:7e:51:1f:3c:57:3d:f1:42:
c6:4e:2e:b5:86:94:52:77:b3:d2:49:ab:4d:a9:9e:
01:ac:1c:d7:49:79:c9:86:88:c2:b9:a7:84:0c:94:
c6:b4:41:71:7a:6d:c5:99:fb:2d:ef:77:3a:26:3b:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:06:AA:15:5E:FC:00:54:54:CA:82:53:59:7B:0E:30:E5:22:AA:EF
X509v3 Authority Key Identifier:
keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/125b2deba6b6ca485738ecd89eb5a3fb7dfa2317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:68:33:52:3d:de:97:d5:09:7d:0f:89:8c:0e:1f:ed:ab:a0:
c6:64:fe:92:fd:60:ab:c3:83:bc:41:2e:e3:70:51:f2:96:63:
92:20:b0:42:b2:52:81:df:09:87:eb:0b:e2:33:fa:cf:de:74:
60:94:43:8d:cc:21:92:b1:10:76:f0:1c:3a:f8:31:f0:e1:df:
83:57:bc:f1:55:57:d9:6d:10:5b:aa:26:e5:92:c6:43:b4:5d:
0f:f8:82:18:6d:3b:49:a4:8d:44:17:d3:76:78:d5:74:7c:60:
65:9b:bf:fa:b4:46:94:d1:a9:0b:39:65:18:8e:16:44:ce:2e:
02:8d:bd:59:ae:a0:38:4e:fb:a0:db:b8:d3:33:1e:79:73:1f:
e0:b3:77:3d:b1:2b:c0:0a:c0:45:36:e8:02:44:51:8b:2a:b3:
05:ed:31:92:f7:bf:14:92:d5:78:ce:5e:0c:78:a0:6a:12:93:
88:07:4f:39:32:09:3c:56:2f:ab:c8:4f:0a:90:fa:f8:86:ed:
0e:10:95:1c:01:16:cb:f5:64:a9:91:ea:53:1d:4c:64:c4:60:
d0:0b:17:d8:5c:e9:41:16:37:8e:5e:0c:31:8f:c1:4d:55:e5:
ed:be:7e:52:b9:de:24:69:91:5f:53:3b:72:d2:88:ce:c2:5a:
63:88:68:2c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFUDpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
Y2M4ZGVkNDBiYzI0OTM3YTJhZTRmYjdhNTIxYmQzODhlZTAyNGIwHhcNMjIwNDA0
MDgzMDAwWhcNMjQwNDAzMDgzMDAwWjAzMTEwLwYDVQQDEygxMjViMmRlYmE2YjZj
YTQ4NTczOGVjZDg5ZWI1YTNmYjdkZmEyMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkKYAWBkgKTeR/kSoit/kOUqA689fa6a19oiKR0EXQQncHuv5
tP6PXDaF0gVuge97ebuSfE3Pb7+02eDcrdIF79oI5SG2sPzAuYOoHbnMzi2q7qDM
75iWf8atCyXsW3vo+joObT1XdO2gIeftdnhqL4o8Xr48ANI21GwS7e/a8Oxg1TLg
lkMqErd14FbOMZuBFTlDvAdWarKhiTgaau5I00ihhmjgr0Wj1CvsYE2I/dSeVzVE
W60+3zV5BU4c57X2phS19NsMXTbmflEfPFc98ULGTi61hpRSd7PSSatNqZ4BrBzX
SXnJhojCuaeEDJTGtEFxem3Fmfst73c6Jju2qwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAwGqhVe/ABUVMqCU1l7DjDlIqrvMB8GA1UdIwQYMBaAFIFE0O4gQeqqO3rX
w05lAvlvq/hcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJjYzhk
ZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjNjM3YzYtYWE3OS00MTQxLTg5MWUtNjhkYzBh
OTA2YTE0LzEyNWIyZGViYTZiNmNhNDg1NzM4ZWNkODllYjVhM2ZiN2RmYTIzMTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGM2MzdjNi1hYTc5LTQxNDEtODkxZS02OGRj
MGE5MDZhMTQvZmJjYzhkZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjCqjANBgkqhkiG9w0BAQsFAAOCAQEApWgzUj3el9UJfQ+J
jA4f7augxmT+kv1gq8ODvEEu43BR8pZjkiCwQrJSgd8Jh+sL4jP6z950YJRDjcwh
krEQdvAcOvgx8OHfg1e88VVX2W0QW6om5ZLGQ7RdD/iCGG07SaSNRBfTdnjVdHxg
ZZu/+rRGlNGpCzllGI4WRM4uAo29Wa6gOE77oNu40zMeeXMf4LN3PbErwArARTbo
AkRRiyqzBe0xkve/FJLVeM5eDHigahKTiAdPOTIJPFYvq8hPCpD6+IbtDhCVHAEW
y/VkqZHqUx1MZMRg0AsX2FzpQRY3jl4MMY/BTVXl7b5+UrneJGmRX1M7ctKIzsJa
Y4hoLA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org