Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/5d2dd3f50ddb565f07a795426c432e885395d0de.roa
File: 5d2dd3f50ddb565f07a795426c432e885395d0de.roa (raw, json)
Hash identifier: kma31Tg9USDnRoNeSLqFoVjC15lAv3v6V2BEbBgfGmU=
Subject key identifier: 4A:CC:3A:90:96:F2:7E:AF:5D:40:3F:0F:16:D0:69:20:72:9B:F9:3A
Certificate issuer: /CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Certificate serial: 0DBB43
Authority key identifier: 1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/5d2dd3f50ddb565f07a795426c432e885395d0de.roa
Signing time: Wed 24 Mar 2021 14:29:57 +0000
ROA not before: Wed 24 Mar 2021 14:29:57 +0000
ROA not after: Tue 24 Mar 2026 14:29:57 +0000
asID: 12150
IP address blocks: 143.0.244.0/22 maxlen: 22
170.84.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899907 (0xdbb43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Validity
Not Before: Mar 24 14:29:57 2021 GMT
Not After : Mar 24 14:29:57 2026 GMT
Subject: CN=5d2dd3f50ddb565f07a795426c432e885395d0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:4d:69:1a:b4:5b:34:56:fa:50:cd:32:4d:
7b:75:d6:49:94:63:7c:f1:c5:51:30:1e:7a:ab:e5:
4b:f0:4f:a2:da:4e:62:2f:d9:54:61:a6:0f:92:5c:
60:31:1d:2c:e7:87:64:f4:d8:5b:54:4c:4e:64:ee:
eb:a5:a9:7b:07:3a:30:71:2a:ad:d6:d2:c2:88:86:
c3:b5:a7:63:39:d7:45:1c:02:a7:9a:52:fa:df:ae:
89:d0:52:89:55:ff:ef:a9:76:9e:cf:0c:dd:c1:45:
c3:e8:3a:eb:18:12:ae:1b:dd:1c:2a:c8:6f:78:40:
f3:55:0d:8c:6c:f0:3b:a3:11:a1:61:37:0b:94:1e:
fb:b1:12:cc:a1:c4:41:79:cf:c6:af:a2:6d:df:15:
82:ae:10:c6:22:65:5c:68:00:d4:f8:26:f0:1b:09:
a7:df:31:68:88:c3:2e:04:e3:cb:ac:cd:42:d6:31:
5e:9a:b7:92:07:43:57:77:74:0c:ca:15:28:e3:c1:
43:ee:5a:14:f9:62:db:aa:0b:bb:55:68:15:7e:73:
64:b9:a3:9a:78:c9:6e:9e:33:69:75:89:56:77:ae:
33:33:81:cd:ca:36:03:df:ee:21:e1:2b:fc:29:64:
1a:bb:79:c9:f2:9b:93:90:16:96:70:73:76:28:49:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:3A:90:96:F2:7E:AF:5D:40:3F:0F:16:D0:69:20:72:9B:F9:3A
X509v3 Authority Key Identifier:
keyid:1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/5d2dd3f50ddb565f07a795426c432e885395d0de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/8c35dfff317cf25b1f43e239ba268307c208d4c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.244.0/22
170.84.44.0/22
Signature Algorithm: sha256WithRSAEncryption
76:6c:4e:03:81:81:47:ef:7c:3a:8e:2b:90:c2:7d:69:3a:52:
06:d7:e8:e1:c3:e9:43:89:44:c7:ee:b5:e4:f8:09:25:aa:7e:
77:ad:06:62:8f:00:ad:36:34:88:cf:d4:22:82:65:9c:34:20:
17:78:1a:40:27:9d:b8:e7:ef:36:07:e1:5e:33:60:2c:27:77:
58:e0:f4:da:71:6f:ab:2d:a4:86:23:9b:60:b9:44:6f:40:70:
c3:24:aa:aa:38:00:30:f8:a5:5d:6a:36:1c:70:67:d4:d4:43:
2c:df:08:89:60:d3:51:1e:e9:c9:42:8b:f7:cc:ab:4a:3f:64:
e4:fb:15:21:c4:06:68:51:0a:0c:31:81:4e:8e:03:a3:96:cc:
91:e7:91:da:0f:7d:58:c3:1e:35:c5:42:2d:f0:12:fb:2c:ae:
46:17:8a:b1:92:d4:00:43:f2:7f:40:9c:59:5d:38:54:40:8b:
77:91:79:48:ea:b7:1f:71:c7:ee:30:64:9d:9c:f4:ac:23:ed:
7e:4d:32:e7:10:16:69:3a:8d:53:15:96:d8:8d:ea:23:54:0b:
1e:f9:fa:3d:ad:3c:9c:6b:84:44:9e:93:c1:7c:19:7c:1f:9d:
a8:94:52:c8:c4:19:97:bd:8f:07:ec:f1:9c:a6:ef:d3:dc:d4:
6e:b7:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-fra.rpki-client.org