Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/0f9df2c0b67a599ef9bf26fda69029c16ca61fac.roa
File: 0f9df2c0b67a599ef9bf26fda69029c16ca61fac.roa (raw, json)
Hash identifier: TQysB5U8yr3Q6gMgp55FBAgfmSrR+76saQ1zXas8Atg=
Subject key identifier: 0D:BA:54:C3:2E:81:0F:D4:7E:7F:64:99:40:6D:6C:9B:A8:28:ED:FD
Certificate issuer: /CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Certificate serial: 214FA9
Authority key identifier: 8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/0f9df2c0b67a599ef9bf26fda69029c16ca61fac.roa
Signing time: Wed 05 Jul 2023 01:51:44 +0000
ROA not before: Tue 04 Jul 2023 01:51:43 +0000
ROA not after: Sat 05 Jul 2025 01:51:43 +0000
asID: 52468
IP address blocks: 160.20.164.0/23 maxlen: 23
160.20.166.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183081 (0x214fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Validity
Not Before: Jul 4 01:51:43 2023 GMT
Not After : Jul 5 01:51:43 2025 GMT
Subject: CN=0f9df2c0b67a599ef9bf26fda69029c16ca61fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:94:8a:80:dd:ca:e9:90:05:5b:21:64:04:
8e:db:28:58:7d:b8:cf:99:64:35:9e:6f:e0:57:f7:
3f:4a:47:99:d2:2b:54:13:af:8c:30:b6:29:ae:09:
50:71:2e:77:bc:be:f2:0f:95:53:09:ae:74:b4:e5:
6e:5f:04:fa:d7:81:7a:6d:4d:0a:f5:a5:a1:16:c4:
8f:20:96:c8:24:9b:5c:3a:09:81:2c:de:a6:ed:1a:
93:e6:a4:42:fc:c9:ac:2b:8a:a3:0a:2e:5d:88:dd:
a8:8e:3a:62:b5:fb:34:1c:8a:68:c5:87:a9:68:47:
05:8c:89:70:ff:ae:fe:84:93:fa:b8:8d:19:69:8d:
e2:25:23:a8:3b:8f:f8:e0:67:44:dc:87:af:f8:d7:
06:ce:ba:2e:3f:54:92:f6:fe:bf:75:0a:50:2a:57:
57:3a:b6:6d:b5:75:da:8c:3b:46:73:06:70:4e:f3:
d1:ea:30:9a:3b:40:e2:12:48:56:b2:13:ad:0c:a0:
8a:96:47:82:8c:ec:c1:ae:b4:8d:1b:48:70:ff:16:
5e:64:77:2e:60:86:ce:45:c6:77:9c:34:87:a0:40:
4b:11:1d:b7:d5:11:06:47:e4:1b:f8:e7:40:a7:0e:
11:4f:35:2d:9b:f4:f6:20:09:56:d6:41:f5:81:26:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BA:54:C3:2E:81:0F:D4:7E:7F:64:99:40:6D:6C:9B:A8:28:ED:FD
X509v3 Authority Key Identifier:
keyid:8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/0f9df2c0b67a599ef9bf26fda69029c16ca61fac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.164.0/22
Signature Algorithm: sha256WithRSAEncryption
70:41:6f:99:68:d4:9d:48:b9:e3:6c:a9:ad:d8:cf:fd:83:07:
2c:0d:4a:a8:8e:92:6c:27:22:f6:5f:05:0b:0c:0d:f3:60:87:
cc:4f:cd:26:67:ad:5e:db:81:6d:8d:dd:fc:5f:3b:14:e2:4b:
50:1e:f0:cb:70:c8:4f:cd:8f:ba:ec:92:26:3e:c4:e3:66:ab:
7d:e8:74:fc:a7:fa:ca:b0:21:d1:ff:86:82:bd:e7:40:01:00:
95:b8:fd:48:bd:86:9d:d5:35:bb:44:91:8b:66:3e:f0:e3:94:
a1:50:bc:3f:02:51:00:1c:96:9c:34:cb:97:3d:e4:d0:1b:82:
3b:aa:09:09:2a:a9:3a:36:ec:45:da:5a:1b:7d:0f:2d:9d:26:
95:69:3a:24:29:68:ef:ad:82:b8:d6:c0:f5:f7:c1:fb:ec:5d:
9a:13:e4:9d:68:be:5b:6e:cb:ae:43:9c:8f:57:48:9c:65:2d:
17:92:95:09:47:bc:4e:dd:f8:37:9c:e6:b4:11:cc:18:78:34:
0b:e4:da:15:1f:5d:ca:16:c0:df:f6:36:b4:b3:42:a2:60:a4:
88:52:b1:1f:93:f0:9f:42:d8:c6:4f:03:c0:41:93:bd:45:21:
df:5c:3f:9f:23:69:4d:2b:f8:6f:04:9e:0b:01:5a:ec:8c:db:
fd:86:e6:4b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIU+pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
ZDYzNDgyZjZmN2NkYTNmZDBjNGIyNDI3Y2NjNmNkNzAyNTRhZGIwHhcNMjMwNzA0
MDE1MTQzWhcNMjUwNzA1MDE1MTQzWjAzMTEwLwYDVQQDEygwZjlkZjJjMGI2N2E1
OTllZjliZjI2ZmRhNjkwMjljMTZjYTYxZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtp6UioDdyumQBVshZASO2yhYfbjPmWQ1nm/gV/c/SkeZ0itU
E6+MMLYprglQcS53vL7yD5VTCa50tOVuXwT614F6bU0K9aWhFsSPIJbIJJtcOgmB
LN6m7RqT5qRC/MmsK4qjCi5diN2ojjpitfs0HIpoxYepaEcFjIlw/67+hJP6uI0Z
aY3iJSOoO4/44GdE3Iev+NcGzrouP1SS9v6/dQpQKldXOrZttXXajDtGcwZwTvPR
6jCaO0DiEkhWshOtDKCKlkeCjOzBrrSNG0hw/xZeZHcuYIbORcZ3nDSHoEBLER23
1REGR+Qb+OdApw4RTzUtm/T2IAlW1kH1gSYNWwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA26VMMugQ/Ufn9kmUBtbJuoKO39MB8GA1UdIwQYMBaAFIw/L8VgqwGD2C+O
+ZQiueCFZ0XdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2NkNjM0
ODJmNmY3Y2RhM2ZkMGM0YjI0MjdjY2M2Y2Q3MDI1NGFkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIxZGQ4NzQtZjI5ZC00YjA2LWEyMzItZGM5ZTVi
NmJlNGI3LzBmOWRmMmMwYjY3YTU5OWVmOWJmMjZmZGE2OTAyOWMxNmNhNjFmYWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjFkZDg3NC1mMjlkLTRiMDYtYTIzMi1kYzll
NWI2YmU0YjcvN2NkNjM0ODJmNmY3Y2RhM2ZkMGM0YjI0MjdjY2M2Y2Q3MDI1NGFk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqAUpDANBgkqhkiG9w0BAQsFAAOCAQEAcEFvmWjUnUi542yp
rdjP/YMHLA1KqI6SbCci9l8FCwwN82CHzE/NJmetXtuBbY3d/F87FOJLUB7wy3DI
T82PuuySJj7E42arfeh0/Kf6yrAh0f+Ggr3nQAEAlbj9SL2GndU1u0SRi2Y+8OOU
oVC8PwJRAByWnDTLlz3k0BuCO6oJCSqpOjbsRdpaG30PLZ0mlWk6JClo762CuNbA
9ffB++xdmhPknWi+W27LrkOcj1dInGUtF5KVCUe8Tt34N5zmtBHMGHg0C+TaFR9d
yhbA3/Y2tLNComCkiFKxH5Pwn0LYxk8DwEGTvUUh31w/nyNpTSv4bwSeCwFa7Izb
/YbmSw==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org