Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/a716538db5e65a67ce8d7ae8f3d5b2126591cec7.roa
File: a716538db5e65a67ce8d7ae8f3d5b2126591cec7.roa (raw, json)
Hash identifier: zAK/6Qj0gnb7fwvpMPNhyXRpGm/CFQakd/w2gBz1tIQ=
Subject key identifier: 56:24:73:86:61:31:7B:5D:B8:74:15:B5:3C:86:F1:7F:F9:6E:7D:DA
Certificate issuer: /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial: 158D23
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/a716538db5e65a67ce8d7ae8f3d5b2126591cec7.roa
Signing time: Wed 05 Apr 2023 21:53:30 +0000
ROA not before: Tue 04 Apr 2023 21:52:55 +0000
ROA not after: Sat 05 Apr 2025 21:52:55 +0000
asID: 265639
IP address blocks: 170.246.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412387 (0x158d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Validity
Not Before: Apr 4 21:52:55 2023 GMT
Not After : Apr 5 21:52:55 2025 GMT
Subject: CN=a716538db5e65a67ce8d7ae8f3d5b2126591cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:61:83:82:41:ad:1d:47:57:a5:65:1f:46:
1f:b8:8d:e4:13:79:e3:af:6d:12:3c:15:49:71:bc:
26:08:a9:3a:50:08:24:52:f7:7d:cd:81:f4:a1:4b:
3c:cf:4d:db:ea:6a:41:88:ed:48:5a:d6:8e:13:72:
00:1a:1c:de:b0:75:48:4f:e1:98:ec:67:c3:d0:99:
1d:41:48:a9:ee:1b:54:24:3f:a8:24:30:5f:39:4c:
24:15:6d:e5:a3:ec:83:f6:ad:cf:a8:9d:80:4d:9d:
26:4a:3e:a7:45:69:88:fe:80:a0:1f:fc:0f:31:a2:
ea:33:98:a2:ad:fa:84:08:66:db:74:6e:06:47:b5:
00:3a:24:71:e9:78:a1:93:09:13:91:a5:32:00:94:
bf:fa:cf:cf:92:9c:50:1f:6b:35:5e:30:73:ad:6f:
00:10:99:3e:40:fe:f5:85:e4:7c:4a:88:9d:8c:61:
0b:fb:24:a0:4a:a4:68:f6:c9:ee:33:fd:2e:00:97:
c3:4f:e8:9d:53:6b:84:33:ee:81:a2:2f:7f:b7:53:
7f:d6:92:5a:70:51:37:ed:b0:e5:57:0d:ef:13:d9:
12:2c:76:7d:9e:5f:74:b2:7e:a6:b6:9b:38:1a:16:
28:24:aa:33:28:59:ed:f1:70:a9:ba:d2:40:e4:a6:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:73:86:61:31:7B:5D:B8:74:15:B5:3C:86:F1:7F:F9:6E:7D:DA
X509v3 Authority Key Identifier:
keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/a716538db5e65a67ce8d7ae8f3d5b2126591cec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f6:f3:a7:a0:f4:2b:7b:2f:69:ed:c4:df:e0:82:a0:8f:88:
cd:ab:8e:e7:55:96:9a:de:fd:d8:3c:57:22:4f:49:fe:df:d6:
08:6d:c6:c8:05:d2:1d:66:f3:de:83:b8:84:a7:0b:8d:89:87:
b3:ab:d6:c9:7e:93:60:33:c0:c0:70:31:e6:a1:d0:7d:5f:1a:
13:99:07:b8:78:14:71:3d:15:6c:29:1c:d0:76:cd:46:f2:02:
8f:c3:5c:6b:5f:1f:f5:34:04:f4:e4:9f:a9:87:09:ec:40:22:
81:b7:84:90:85:70:9c:6a:9a:ef:d7:f6:e7:ee:6b:3d:ee:95:
49:72:e0:72:e9:34:d9:b8:b2:25:22:d5:d5:c7:7c:a0:82:2b:
dc:63:3c:04:8b:aa:8c:50:72:14:53:a2:3a:a2:73:6f:36:fe:
40:b0:43:0d:bf:d9:5e:1f:5e:08:b8:f3:03:11:c9:50:60:93:
e0:2d:5e:38:72:85:eb:3e:e4:ed:a8:80:57:bc:58:72:f0:f6:
3a:c6:4b:41:f9:36:3b:18:5a:d7:e4:ae:4d:c7:d3:e6:df:11:
a7:cb:9d:60:2a:85:bb:81:5c:55:39:08:6f:49:16:17:86:78:
4e:3c:7d:76:30:56:85:8e:f4:8e:6a:c7:57:ec:4b:fb:66:23:
eb:54:c2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-fra.rpki-client.org