Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/30618ce55aa3e018395871ef9408c7739bb12177.roa
File: 30618ce55aa3e018395871ef9408c7739bb12177.roa (raw, json)
Hash identifier: m17vAnmkafKW45fF9GqF5Wh7oFrd5LR7L1jAqpLehyE=
Subject key identifier: 9A:16:9F:C9:05:54:60:2A:5F:A8:8B:9C:A5:1B:2D:F7:7F:E3:50:CD
Certificate issuer: /CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Certificate serial: 0DBEE3
Authority key identifier: 1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/30618ce55aa3e018395871ef9408c7739bb12177.roa
Signing time: Wed 24 Mar 2021 14:29:57 +0000
ROA not before: Wed 24 Mar 2021 14:29:57 +0000
ROA not after: Tue 24 Mar 2026 14:29:57 +0000
asID: 12150
IP address blocks: 143.0.244.0/22 maxlen: 22
170.84.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900835 (0xdbee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Validity
Not Before: Mar 24 14:29:57 2021 GMT
Not After : Mar 24 14:29:57 2026 GMT
Subject: CN=30618ce55aa3e018395871ef9408c7739bb12177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:2e:2a:99:f2:f4:15:4d:2d:8a:ee:c1:fc:
01:02:84:49:f9:bb:92:a9:e3:80:d9:2b:c4:8b:24:
f2:5e:d6:90:56:62:e2:09:18:ea:b2:2f:5a:c0:8d:
d8:c4:1b:48:02:9b:87:8a:63:c9:3e:d9:5e:13:f0:
95:2a:12:17:6f:c0:29:f9:fb:17:ad:fb:a2:c5:65:
64:27:d5:eb:9a:d3:ca:a5:eb:08:ba:6a:ac:bd:58:
7f:fb:b4:a9:59:47:9c:27:db:3c:0b:fd:21:d1:f0:
f8:be:b4:dd:40:aa:5e:43:26:e3:f8:66:d3:71:f5:
c2:d3:bc:25:36:a8:d5:3d:5f:8e:28:4d:dc:5f:90:
3d:d3:51:f1:2d:86:2e:44:e1:d0:19:d1:7d:de:c8:
09:50:38:66:2a:ec:61:04:cf:1a:a1:d8:e3:bd:65:
0d:39:27:4b:3c:2e:97:e7:49:3e:7e:13:89:a5:61:
d1:9c:0b:e0:1f:46:9a:f5:ba:d8:63:4e:22:11:0a:
c0:8b:e2:74:45:d9:3a:01:4b:4e:c2:d4:9e:23:ad:
8b:ee:c4:88:e4:7c:c9:85:f4:38:32:5b:c6:65:a3:
a6:7c:61:38:d1:a4:3e:c9:9a:48:34:c0:77:32:41:
d2:9e:41:8b:f3:3b:fc:f6:98:a4:5e:8a:b3:f1:dc:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:9F:C9:05:54:60:2A:5F:A8:8B:9C:A5:1B:2D:F7:7F:E3:50:CD
X509v3 Authority Key Identifier:
keyid:1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/30618ce55aa3e018395871ef9408c7739bb12177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/8c35dfff317cf25b1f43e239ba268307c208d4c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.244.0/22
170.84.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:77:20:71:a1:dd:d6:32:aa:02:a3:43:60:06:68:26:6b:aa:
9b:ed:5a:b8:e0:b2:a5:4c:7c:d9:e7:5c:0b:c0:73:04:ba:c5:
0f:30:4d:4f:fa:a1:fb:83:1b:e9:97:a2:4d:4a:3c:9c:f5:6b:
7b:53:ee:06:61:34:19:4d:71:7c:9f:95:c8:24:38:6f:40:05:
d8:2f:c1:5e:ec:fa:c8:4c:30:f5:2f:c4:e4:15:1b:b6:1a:b4:
a9:5f:3a:f8:bd:28:29:dd:74:be:6f:c8:3a:7c:40:81:96:54:
0d:83:03:7d:00:11:de:fb:23:5e:f3:d0:aa:76:6c:ec:8b:20:
4a:84:d0:60:26:f5:e0:87:59:2e:4a:da:49:c9:7b:2a:34:3d:
ca:f2:bb:d4:dc:c8:29:93:f6:7a:e7:00:a9:93:fd:09:43:2f:
14:fb:dc:06:e9:06:4b:c8:11:ab:48:4c:4b:be:a8:4e:75:66:
e5:6b:a6:a1:f1:3e:b6:ee:c4:c7:60:c9:c9:4d:21:66:fa:33:
2c:91:3b:01:bd:52:d4:91:15:f2:7b:ce:3b:01:81:35:d4:5f:
14:49:39:e0:93:1c:8f:bc:d0:6f:78:7d:33:8d:44:1c:17:22:
e1:75:e2:01:df:a2:de:16:80:e0:d0:38:0f:e5:12:0f:4a:1c:
85:75:e6:1e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDb7jMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhj
MzVkZmZmMzE3Y2YyNWIxZjQzZTIzOWJhMjY4MzA3YzIwOGQ0YzQwHhcNMjEwMzI0
MTQyOTU3WhcNMjYwMzI0MTQyOTU3WjAzMTEwLwYDVQQDEygzMDYxOGNlNTVhYTNl
MDE4Mzk1ODcxZWY5NDA4Yzc3MzliYjEyMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiVsuKpny9BVNLYruwfwBAoRJ+buSqeOA2SvEiyTyXtaQVmLi
CRjqsi9awI3YxBtIApuHimPJPtleE/CVKhIXb8Ap+fsXrfuixWVkJ9XrmtPKpesI
umqsvVh/+7SpWUecJ9s8C/0h0fD4vrTdQKpeQybj+GbTcfXC07wlNqjVPV+OKE3c
X5A901HxLYYuROHQGdF93sgJUDhmKuxhBM8aodjjvWUNOSdLPC6X50k+fhOJpWHR
nAvgH0aa9brYY04iEQrAi+J0Rdk6AUtOwtSeI62L7sSI5HzJhfQ4MlvGZaOmfGE4
0aQ+yZpINMB3MkHSnkGL8zv89pikXoqz8dw/MQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFJoWn8kFVGAqX6iLnKUbLfd/41DNMB8GA1UdIwQYMBaAFB+dRSVASt8rtB8c
9gtIfpfHgRBaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGMzNWRm
ZmYzMTdjZjI1YjFmNDNlMjM5YmEyNjgzMDdjMjA4ZDRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGZmOTcyOGEtMTAxMS00MWQ2LWI4NzctODM4ZTZl
NGEyZjdkLzMwNjE4Y2U1NWFhM2UwMTgzOTU4NzFlZjk0MDhjNzczOWJiMTIxNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZmY5NzI4YS0xMDExLTQxZDYtYjg3Ny04Mzhl
NmU0YTJmN2QvOGMzNWRmZmYzMTdjZjI1YjFmNDNlMjM5YmEyNjgzMDdjMjA4ZDRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAo8A9AMEAqpULDANBgkqhkiG9w0BAQsFAAOCAQEAjHcgcaHd
1jKqAqNDYAZoJmuqm+1auOCypUx82edcC8BzBLrFDzBNT/qh+4Mb6ZeiTUo8nPVr
e1PuBmE0GU1xfJ+VyCQ4b0AF2C/BXuz6yEww9S/E5BUbthq0qV86+L0oKd10vm/I
OnxAgZZUDYMDfQAR3vsjXvPQqnZs7IsgSoTQYCb14IdZLkraScl7KjQ9yvK71NzI
KZP2eucAqZP9CUMvFPvcBukGS8gRq0hMS76oTnVm5WumofE+tu7Ex2DJyU0hZvoz
LJE7Ab1S1JEV8nvOOwGBNdRfFEk54JMcj7zQb3h9M41EHBci4XXiAd+i3haA4NA4
D+USD0ochXXmHg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org