Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/2f2b277d84032f53958a07710ede48c0d42ff86d.roa
File: 2f2b277d84032f53958a07710ede48c0d42ff86d.roa (raw, json)
Hash identifier: KP56i3Zz5WmraS5NRPijM4xXNgdxbdT8OWAyYdA37XM=
Subject key identifier: E7:70:BC:6D:EF:E0:A5:CE:78:F1:9D:AA:D7:B4:7A:27:0D:44:82:32
Certificate issuer: /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial: 0DB66E
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/2f2b277d84032f53958a07710ede48c0d42ff86d.roa
Signing time: Wed 24 Mar 2021 22:51:34 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 264660
IP address blocks: 170.247.212.0/23 maxlen: 23
170.247.212.0/24 maxlen: 24
170.247.213.0/24 maxlen: 24
170.247.214.0/23 maxlen: 23
170.247.214.0/24 maxlen: 24
170.247.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898670 (0xdb66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=2f2b277d84032f53958a07710ede48c0d42ff86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:4d:ea:62:74:d0:ad:59:a1:87:a5:93:fe:
23:26:39:b0:2e:e3:10:f7:c7:6f:2d:75:be:e5:26:
3e:a0:e4:6a:c5:97:28:5f:50:2b:93:6b:90:ed:61:
40:8a:2f:87:af:50:a6:9f:99:66:6a:88:62:8c:3c:
60:1c:9d:16:5d:d1:28:cf:d5:08:6d:ad:48:7b:68:
04:a3:a8:5c:a0:90:0a:ef:e7:a8:26:64:ba:e1:29:
a0:02:fa:31:c2:1f:da:b5:ff:f5:4a:ea:b0:e8:8c:
d8:28:61:84:ad:aa:69:58:a9:47:dc:41:97:dc:3b:
e0:c1:a5:4a:a7:72:76:b8:93:ca:d3:1d:2a:a2:d0:
a0:a3:10:d1:14:63:db:a5:c7:1b:7b:c4:07:c2:41:
c8:95:e3:b0:55:d6:f5:9c:5d:ba:bc:f2:67:ba:60:
45:fe:74:ba:b5:ad:e8:9f:5f:07:88:18:d0:b4:09:
8c:a4:35:90:8d:3a:cd:92:e5:e5:68:2b:3a:32:07:
c2:6b:2e:b1:99:4c:f6:8e:4b:ea:59:6e:1b:45:4c:
31:cc:d3:d4:5a:4b:c7:d6:9b:7b:be:bf:63:cf:4a:
9f:39:54:64:af:a6:82:0e:b4:e9:24:48:c5:e0:54:
56:10:7b:8b:6b:28:0b:42:e8:3c:22:6a:8f:22:e3:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:BC:6D:EF:E0:A5:CE:78:F1:9D:AA:D7:B4:7A:27:0D:44:82:32
X509v3 Authority Key Identifier:
keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/2f2b277d84032f53958a07710ede48c0d42ff86d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.212.0/22
Signature Algorithm: sha256WithRSAEncryption
75:45:f5:7d:ae:7d:c6:24:93:77:af:ee:09:52:08:a2:b5:65:
76:22:73:4a:b2:4d:df:c5:4a:d4:c0:1d:44:0e:08:90:87:07:
02:1c:40:ce:de:dc:77:d3:12:06:ae:a6:5f:87:6d:0b:e4:fa:
23:9e:da:29:21:3d:cb:4c:7b:b5:eb:0a:e3:04:dc:0a:79:27:
02:b8:56:9d:8a:f8:a5:42:ab:4b:fa:90:bc:47:39:06:71:b7:
ae:bc:0b:5a:06:4b:a9:df:80:58:9a:8b:05:80:8c:f6:f3:5b:
b0:9a:0c:d5:16:bb:b3:16:93:2d:fe:9a:a1:22:ae:7a:12:48:
d1:28:ab:c2:6c:ce:8a:68:b7:fd:0f:14:c6:23:d1:1b:54:47:
1e:84:30:3d:c4:93:b3:3c:8d:c2:e0:cb:7d:a1:28:15:c1:34:
8a:85:7c:ad:04:89:20:21:86:36:c0:da:56:f6:03:e9:4d:65:
45:d4:9e:86:04:27:e3:56:8e:3d:b8:5b:2a:83:f2:1e:45:86:
56:3f:67:f3:e2:e2:4f:2e:6a:d2:83:ce:1b:ce:84:a9:31:40:
53:49:e6:7c:53:5c:0e:17:f0:02:7a:2b:64:b1:2a:1a:38:a5:
9c:a4:f4:eb:13:ba:13:9e:d2:39:dd:d1:b4:ab:bb:25:a7:fc:
a5:58:e8:02
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDbZuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZTRjYWRhZmNmN2UwM2FmZTI4OTI1YWRmMzUwZjEyODZkYjdiMjUwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEygyZjJiMjc3ZDg0MDMy
ZjUzOTU4YTA3NzEwZWRlNDhjMGQ0MmZmODZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgAtN6mJ00K1ZoYelk/4jJjmwLuMQ98dvLXW+5SY+oORqxZco
X1Ark2uQ7WFAii+Hr1Cmn5lmaohijDxgHJ0WXdEoz9UIba1Ie2gEo6hcoJAK7+eo
JmS64SmgAvoxwh/atf/1Suqw6IzYKGGErappWKlH3EGX3DvgwaVKp3J2uJPK0x0q
otCgoxDRFGPbpccbe8QHwkHIleOwVdb1nF26vPJnumBF/nS6ta3on18HiBjQtAmM
pDWQjTrNkuXlaCs6MgfCay6xmUz2jkvqWW4bRUwxzNPUWkvH1pt7vr9jz0qfOVRk
r6aCDrTpJEjF4FRWEHuLaygLQug8ImqPIuPu7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOdwvG3v4KXOePGdqte0eicNRIIyMB8GA1UdIwQYMBaAFNaRNNTUo5m3dxWU
ae+IZyBfwVVzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBlNGNh
ZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2IyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ4YjhmYWEtYmJlMy00MzcxLWE5NWEtZGIxOTdk
ZmQzYmJmLzJmMmIyNzdkODQwMzJmNTM5NThhMDc3MTBlZGU0OGMwZDQyZmY4NmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDhiOGZhYS1iYmUzLTQzNzEtYTk1YS1kYjE5
N2RmZDNiYmYvYjBlNGNhZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2Iy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqr31DANBgkqhkiG9w0BAQsFAAOCAQEAdUX1fa59xiSTd6/u
CVIIorVldiJzSrJN38VK1MAdRA4IkIcHAhxAzt7cd9MSBq6mX4dtC+T6I57aKSE9
y0x7tesK4wTcCnknArhWnYr4pUKrS/qQvEc5BnG3rrwLWgZLqd+AWJqLBYCM9vNb
sJoM1Ra7sxaTLf6aoSKuehJI0SirwmzOimi3/Q8UxiPRG1RHHoQwPcSTszyNwuDL
faEoFcE0ioV8rQSJICGGNsDaVvYD6U1lRdSehgQn41aOPbhbKoPyHkWGVj9n8+Li
Ty5q0oPOG86EqTFAU0nmfFNcDhfwAnorZLEqGjilnKT06xO6E57SOd3RtKu7Jaf8
pVjoAg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org