Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/f032ab2f87c65477ad9869cecc0ec5e1dbe582ba.roa
File: f032ab2f87c65477ad9869cecc0ec5e1dbe582ba.roa (raw, json)
Hash identifier: cV/cIqb7eNPD0rnriC2y94xDxUW9/S+AoX2sM6B7tX4=
Subject key identifier: 94:65:A4:BA:D0:ED:01:8A:56:50:4C:9B:BB:B3:85:8E:33:46:E8:C4
Certificate issuer: /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial: 15AEEF
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/f032ab2f87c65477ad9869cecc0ec5e1dbe582ba.roa
Signing time: Tue 03 Oct 2023 08:30:04 +0000
ROA not before: Mon 02 Oct 2023 08:30:04 +0000
ROA not after: Wed 01 Oct 2025 08:30:04 +0000
asID: 397044
IP address blocks: 170.231.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 11 Jan 2024 18:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421039 (0x15aeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Validity
Not Before: Oct 2 08:30:04 2023 GMT
Not After : Oct 1 08:30:04 2025 GMT
Subject: CN=f032ab2f87c65477ad9869cecc0ec5e1dbe582ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:55:b5:8d:60:fb:de:e2:5e:f1:2a:89:fa:
a2:a8:fa:83:74:75:8e:2c:a6:89:a7:f5:00:b8:bf:
45:b7:f3:e3:65:34:df:5f:02:e8:b3:ad:64:f8:99:
93:b0:43:ba:12:0d:f4:fe:aa:46:e6:30:cf:2e:a2:
d5:58:f0:f3:35:52:4f:ce:64:bb:8c:38:f2:59:8c:
59:32:f1:ee:d4:f1:34:e8:d8:f7:0a:37:5a:54:82:
12:88:73:c8:16:c9:8b:e4:7e:2f:38:e8:78:b0:86:
6d:ef:80:2b:ab:a1:cb:d8:03:bd:8b:76:14:c7:6a:
ce:7b:e4:25:dc:80:66:6b:9b:a8:9a:b6:15:31:56:
ed:e4:78:8f:7d:ad:6e:4d:d1:59:2b:7d:ea:68:ff:
eb:fe:e8:6b:d8:b2:77:e0:08:6a:57:76:9e:9a:a3:
0c:7b:b1:25:ee:80:9e:a8:54:50:f5:42:ba:56:39:
b7:43:ca:c3:4c:9d:d7:6c:e1:b7:11:db:a0:c1:89:
50:d7:76:2c:ba:6d:69:5f:16:78:59:10:df:29:35:
de:a5:67:3d:bb:c4:28:a7:9d:5d:4f:17:4c:7b:19:
76:6a:fa:7e:76:fe:5c:80:b3:1a:3e:63:a1:7f:15:
35:76:c4:e9:11:1f:04:0e:0d:80:f1:8b:5d:b6:66:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:A4:BA:D0:ED:01:8A:56:50:4C:9B:BB:B3:85:8E:33:46:E8:C4
X509v3 Authority Key Identifier:
keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/f032ab2f87c65477ad9869cecc0ec5e1dbe582ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6b:5c:e2:46:66:e3:13:e8:98:2c:39:3b:55:3a:da:77:4d:
24:e2:74:8d:46:98:3e:67:43:85:e2:91:ee:e5:40:09:08:6b:
5c:d3:31:bd:c0:0a:f7:36:0f:c1:c7:11:58:f7:7c:98:6f:fa:
fa:7d:e3:4e:eb:f3:9f:c3:a6:af:d0:a7:00:5b:90:78:8e:7a:
32:f1:84:74:10:60:c7:57:46:3a:ea:33:19:10:54:36:e8:37:
30:3f:b0:33:54:2f:a5:39:99:35:f9:e2:24:91:dc:c1:f0:6a:
0b:64:2c:62:83:62:72:35:fe:5d:0d:1c:91:97:7c:86:1d:4e:
0b:a7:eb:e2:bd:5b:ad:3d:4b:b9:b8:f7:a9:af:3f:f6:8c:f9:
c2:3c:b8:39:c3:2e:f2:1e:aa:82:fc:81:10:0a:8d:0a:aa:2c:
24:2a:d8:c6:de:08:52:87:ac:6e:b5:8b:76:11:2f:00:61:ca:
2a:42:10:48:31:b3:12:c0:b1:8e:ce:4f:f4:af:0b:71:b8:a6:
68:85:6c:3e:7a:34:94:86:60:f1:5a:cd:14:39:b5:60:4e:96:
ca:ef:10:0c:26:c8:a3:b3:e9:6f:c8:34:d5:0b:7d:79:b3:5f:
f5:93:3b:2c:d2:69:81:ab:89:d0:ef:c9:9f:8d:a3:9e:54:ca:
0c:a5:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:58:27 2024 by rpki-client on console-fra.rpki-client.org