Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/0b36e28b7928e16c3045b3a8dd8303ad15204e8f.roa
File: 0b36e28b7928e16c3045b3a8dd8303ad15204e8f.roa (raw, json)
Hash identifier: fbXiTTJIEx3BJMUCwz2YVRse+7kVm9lxil1dJK7ugxE=
Subject key identifier: 67:51:03:73:70:7F:D2:DE:C3:6B:97:50:E0:DB:C8:D5:F1:30:08:31
Certificate issuer: /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial: 1F9120
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/0b36e28b7928e16c3045b3a8dd8303ad15204e8f.roa
Signing time: Fri 24 Mar 2023 08:32:31 +0000
ROA not before: Thu 23 Mar 2023 08:32:31 +0000
ROA not after: Sat 22 Mar 2025 08:32:31 +0000
asID: 264660
IP address blocks: 170.247.212.0/22 maxlen: 22
170.247.212.0/23 maxlen: 23
170.247.212.0/24 maxlen: 24
170.247.213.0/24 maxlen: 24
170.247.214.0/23 maxlen: 23
170.247.214.0/24 maxlen: 24
170.247.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068768 (0x1f9120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Validity
Not Before: Mar 23 08:32:31 2023 GMT
Not After : Mar 22 08:32:31 2025 GMT
Subject: CN=0b36e28b7928e16c3045b3a8dd8303ad15204e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:eb:c5:61:1d:c2:3b:09:18:12:7c:13:36:
16:95:98:3c:74:ac:f1:a1:f6:e4:14:39:ff:67:f9:
92:d0:6c:5f:cc:5c:b7:6c:e7:aa:b3:9e:2a:27:36:
68:f8:20:9f:53:30:f6:dd:84:a6:b2:78:50:80:b6:
62:21:83:0e:e2:14:7e:96:f2:93:9d:c6:fc:db:c3:
36:f5:75:65:3c:77:07:1b:c1:d2:5d:8e:36:47:58:
2f:79:2f:26:4e:6c:9e:18:29:c3:ea:ed:36:85:79:
fd:e4:e3:f9:3b:9c:5b:e5:bd:b3:c7:1e:1d:6c:26:
7c:6b:97:08:a0:37:14:4e:00:18:75:4c:66:66:d3:
a9:3e:cc:49:ee:4d:58:30:42:22:46:3d:32:6b:ba:
24:bf:0b:7f:3b:86:5e:cb:2e:15:4d:83:42:19:19:
29:63:25:33:cf:38:ed:71:cf:b2:e5:e4:27:97:17:
2b:54:66:75:d7:f3:92:03:03:c8:dc:54:49:27:5d:
45:1b:57:4a:7b:0a:04:1d:8f:2a:9e:77:97:3f:14:
30:89:01:aa:a4:56:de:17:58:b5:f2:e2:0b:df:66:
6c:d0:4f:89:da:66:aa:5f:bd:01:72:27:b4:c2:ac:
9d:1d:1a:e7:37:9a:af:f9:74:a5:ac:61:48:18:95:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:51:03:73:70:7F:D2:DE:C3:6B:97:50:E0:DB:C8:D5:F1:30:08:31
X509v3 Authority Key Identifier:
keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/0b36e28b7928e16c3045b3a8dd8303ad15204e8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.212.0/22
Signature Algorithm: sha256WithRSAEncryption
49:4b:06:50:f1:4b:0f:04:af:6d:e7:44:be:4d:4e:34:f6:52:
34:3d:fc:f6:6d:d6:e5:9e:e9:8f:7d:39:d0:3b:3e:84:9a:d8:
8b:6d:a3:15:7c:c5:98:13:1b:d8:c8:2c:b8:40:77:1e:4c:13:
6c:08:51:3a:37:4e:a0:03:13:ad:23:76:bc:1e:4f:09:f4:62:
f1:b5:9a:fc:61:34:0a:ef:f2:cc:78:22:72:07:54:20:1b:96:
a9:9a:33:e9:78:7e:ee:12:9c:41:04:42:25:1b:c8:38:66:01:
ed:db:d9:17:36:92:b9:8b:e8:a9:47:de:f3:10:f6:15:76:4a:
d6:29:5a:ea:ee:51:0a:52:c2:d8:02:fa:01:0f:39:7d:d2:38:
55:04:fd:58:46:05:68:a5:c9:2d:e4:55:ec:58:9f:a6:48:c8:
c3:89:14:98:42:11:7a:16:5b:79:a9:46:01:08:fe:5a:8d:44:
18:43:31:3f:c9:44:e4:a9:80:f4:4a:50:e6:49:4e:23:5e:1f:
70:59:2c:9f:85:4c:ec:4e:46:84:38:a0:da:cb:8d:3a:05:f2:
33:a2:df:97:d9:a0:65:4e:c7:bc:30:17:d6:cf:74:94:57:14:
75:80:9a:fd:70:e0:60:93:7b:ee:a8:90:8f:b1:96:a4:f1:39:
fd:e7:f5:3c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH5EgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZTRjYWRhZmNmN2UwM2FmZTI4OTI1YWRmMzUwZjEyODZkYjdiMjUwHhcNMjMwMzIz
MDgzMjMxWhcNMjUwMzIyMDgzMjMxWjAzMTEwLwYDVQQDEygwYjM2ZTI4Yjc5Mjhl
MTZjMzA0NWIzYThkZDgzMDNhZDE1MjA0ZThmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlsPrxWEdwjsJGBJ8EzYWlZg8dKzxofbkFDn/Z/mS0GxfzFy3
bOeqs54qJzZo+CCfUzD23YSmsnhQgLZiIYMO4hR+lvKTncb828M29XVlPHcHG8HS
XY42R1gveS8mTmyeGCnD6u02hXn95OP5O5xb5b2zxx4dbCZ8a5cIoDcUTgAYdUxm
ZtOpPsxJ7k1YMEIiRj0ya7okvwt/O4Zeyy4VTYNCGRkpYyUzzzjtcc+y5eQnlxcr
VGZ11/OSAwPI3FRJJ11FG1dKewoEHY8qnneXPxQwiQGqpFbeF1i18uIL32Zs0E+J
2maqX70Bcie0wqydHRrnN5qv+XSlrGFIGJWG+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGdRA3Nwf9Lew2uXUODbyNXxMAgxMB8GA1UdIwQYMBaAFNaRNNTUo5m3dxWU
ae+IZyBfwVVzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBlNGNh
ZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2IyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ4YjhmYWEtYmJlMy00MzcxLWE5NWEtZGIxOTdk
ZmQzYmJmLzBiMzZlMjhiNzkyOGUxNmMzMDQ1YjNhOGRkODMwM2FkMTUyMDRlOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDhiOGZhYS1iYmUzLTQzNzEtYTk1YS1kYjE5
N2RmZDNiYmYvYjBlNGNhZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2Iy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqr31DANBgkqhkiG9w0BAQsFAAOCAQEASUsGUPFLDwSvbedE
vk1ONPZSND389m3W5Z7pj3050Ds+hJrYi22jFXzFmBMb2MgsuEB3HkwTbAhROjdO
oAMTrSN2vB5PCfRi8bWa/GE0Cu/yzHgicgdUIBuWqZoz6Xh+7hKcQQRCJRvIOGYB
7dvZFzaSuYvoqUfe8xD2FXZK1ila6u5RClLC2AL6AQ85fdI4VQT9WEYFaKXJLeRV
7FifpkjIw4kUmEIRehZbealGAQj+Wo1EGEMxP8lE5KmA9EpQ5klOI14fcFksn4VM
7E5GhDig2suNOgXyM6Lfl9mgZU7HvDAX1s90lFcUdYCa/XDgYJN77qiQj7GWpPE5
/ef1PA==
-----END CERTIFICATE-----
Generated at Sat Jul 29 03:39:18 2023 by rpki-client on console-fra.rpki-client.org