Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/02042e263a480f6a9a6812588e85ef2ff32b465f.roa
File: 02042e263a480f6a9a6812588e85ef2ff32b465f.roa (raw, json)
Hash identifier: ikxEP0T+bpbTQiTF336h+v7jKEZmvz7AwcvygsWFsD0=
Subject key identifier: 7D:05:A8:1A:C9:75:EE:4B:F3:0E:81:58:95:6E:7B:1D:AC:12:91:E5
Certificate issuer: /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial: 158AF0
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/02042e263a480f6a9a6812588e85ef2ff32b465f.roa
Signing time: Wed 05 Apr 2023 21:52:54 +0000
ROA not before: Tue 04 Apr 2023 21:52:03 +0000
ROA not after: Sat 05 Apr 2025 21:52:03 +0000
asID: 265639
IP address blocks: 170.246.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411824 (0x158af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Validity
Not Before: Apr 4 21:52:03 2023 GMT
Not After : Apr 5 21:52:03 2025 GMT
Subject: CN=02042e263a480f6a9a6812588e85ef2ff32b465f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:c3:f6:b4:1d:f8:9c:10:f8:d0:7c:00:7f:
4e:f4:92:0c:50:f0:73:7c:07:59:8f:17:0b:9e:c6:
2e:e1:75:b8:2e:76:a5:66:c3:5a:5e:b8:4c:2c:ee:
0f:ce:b5:55:9e:5a:60:56:f8:18:61:4f:f9:64:69:
cd:ce:8f:3c:89:5f:bc:e1:ab:df:1f:87:3f:ec:a6:
3a:d3:2f:b1:4b:b7:9e:f5:ea:dc:09:55:6a:18:e0:
77:36:1b:ad:5e:0f:f4:18:3d:7b:56:bb:ae:81:d4:
49:1b:15:c3:21:c1:22:a6:2e:0f:72:61:61:c7:f4:
4c:fd:ea:6c:eb:94:46:17:4e:33:90:25:4b:85:45:
90:43:97:38:86:ae:39:fd:35:52:ba:d3:65:e6:75:
56:7b:f5:c8:56:e2:11:2d:a7:9a:0a:95:34:0c:7b:
65:15:3d:c6:b4:ca:2c:d2:20:ab:00:0e:69:e4:71:
df:9d:40:d4:f5:12:d1:a8:1e:2d:cf:bb:84:4c:ff:
bf:f4:60:6a:4f:01:13:04:84:32:91:f4:40:36:f6:
fa:64:f6:09:cb:0b:63:76:af:57:68:a8:b7:bd:cf:
d7:5e:64:c0:21:cd:04:86:d7:1d:2e:cb:42:1b:96:
6d:e6:76:12:a4:c2:ae:36:40:84:a4:8e:c9:df:ae:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:A8:1A:C9:75:EE:4B:F3:0E:81:58:95:6E:7B:1D:AC:12:91:E5
X509v3 Authority Key Identifier:
keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/02042e263a480f6a9a6812588e85ef2ff32b465f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:94:70:ca:3a:91:d9:86:bc:22:f0:df:25:83:d2:f2:e8:77:
8d:74:a2:05:88:35:e9:20:3f:42:d8:66:0d:b6:eb:0f:4c:36:
c7:ad:9f:73:c7:9d:78:98:ec:0a:1b:89:ac:98:d0:ed:60:d7:
18:d4:2f:5e:0d:35:0e:f4:24:dc:a6:6b:ed:b9:1f:c6:8e:4d:
d7:d2:36:73:ef:53:c8:6b:3a:b9:1e:d0:86:79:18:6c:aa:4c:
0f:79:c0:e5:ec:1f:48:f1:b1:ec:21:c3:ef:0a:24:43:01:e1:
85:f6:e6:19:01:b2:8f:1d:f6:65:f6:a8:31:9c:5c:26:25:34:
e4:f9:61:f3:48:a1:a4:0d:1a:8b:3d:87:eb:2a:8f:d6:bc:3f:
db:03:ed:4b:06:b5:5e:e9:39:7f:ea:72:9b:6e:05:b4:e2:3f:
9d:1b:12:d4:34:de:28:98:b8:ea:49:b7:b3:2d:21:53:fc:b5:
d7:62:a0:a0:31:5a:12:09:ca:29:cf:de:50:c7:be:69:e2:9b:
80:08:d2:b1:6b:f5:d4:24:03:54:72:49:a9:ee:df:d7:13:b3:
52:92:45:43:91:b6:b3:29:a5:94:31:65:5d:09:9b:10:ec:c6:
12:ad:1e:cc:cc:1b:2a:a3:b7:43:bd:ad:bf:13:8d:5b:42:f8:
0a:8e:86:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFYrwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUw
MWYxZjBmM2EyYWNkZmQxMjExNDM2ODNkMGE5Y2ZjMTY1N2RhNjcwHhcNMjMwNDA0
MjE1MjAzWhcNMjUwNDA1MjE1MjAzWjAzMTEwLwYDVQQDEygwMjA0MmUyNjNhNDgw
ZjZhOWE2ODEyNTg4ZTg1ZWYyZmYzMmI0NjVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo1HD9rQd+JwQ+NB8AH9O9JIMUPBzfAdZjxcLnsYu4XW4Lnal
ZsNaXrhMLO4PzrVVnlpgVvgYYU/5ZGnNzo88iV+84avfH4c/7KY60y+xS7ee9erc
CVVqGOB3NhutXg/0GD17VruugdRJGxXDIcEipi4PcmFhx/RM/eps65RGF04zkCVL
hUWQQ5c4hq45/TVSutNl5nVWe/XIVuIRLaeaCpU0DHtlFT3GtMos0iCrAA5p5HHf
nUDU9RLRqB4tz7uETP+/9GBqTwETBIQykfRANvb6ZPYJywtjdq9XaKi3vc/XXmTA
Ic0EhtcdLstCG5Zt5nYSpMKuNkCEpI7J3666ZQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH0FqBrJde5L8w6BWJVuex2sEpHlMB8GA1UdIwQYMBaAFIS97Fj5htw9xVHc
zP20tc5Ov6edMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTAxZjFm
MGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODZkOGYxYzMtYTcyNy00MDY1LTkxZDMtMzUwYmMz
ZGI1YmE0LzAyMDQyZTI2M2E0ODBmNmE5YTY4MTI1ODhlODVlZjJmZjMyYjQ2NWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NmQ4ZjFjMy1hNzI3LTQwNjUtOTFkMy0zNTBi
YzNkYjViYTQvNTAxZjFmMGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKr2WDANBgkqhkiG9w0BAQsFAAOCAQEAapRwyjqR2Ya8IvDf
JYPS8uh3jXSiBYg16SA/QthmDbbrD0w2x62fc8edeJjsChuJrJjQ7WDXGNQvXg01
DvQk3KZr7bkfxo5N19I2c+9TyGs6uR7QhnkYbKpMD3nA5ewfSPGx7CHD7wokQwHh
hfbmGQGyjx32ZfaoMZxcJiU05Plh80ihpA0aiz2H6yqP1rw/2wPtSwa1Xuk5f+py
m24FtOI/nRsS1DTeKJi46km3sy0hU/y112KgoDFaEgnKKc/eUMe+aeKbgAjSsWv1
1CQDVHJJqe7f1xOzUpJFQ5G2symllDFlXQmbEOzGEq0ezMwbKqO3Q72tvxONW0L4
Co6GcA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-fra.rpki-client.org