Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/0d3ee4ede62523178121671f3d819320fe15b228.roa
File: 0d3ee4ede62523178121671f3d819320fe15b228.roa (raw, json)
Hash identifier: uhjEhrztVgLzuRkbHIuLPVBxkCrp3BiMaV6K/85nQTY=
Subject key identifier: 52:8A:D8:DD:D0:AD:B8:8C:3D:58:CC:22:E6:73:8C:37:81:C3:96:3D
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 1620E9
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/0d3ee4ede62523178121671f3d819320fe15b228.roa
Signing time: Tue 06 Jun 2023 12:36:37 +0000
ROA not before: Mon 05 Jun 2023 12:36:35 +0000
ROA not after: Fri 06 Jun 2025 12:36:35 +0000
asID: 270026
IP address blocks: 161.22.33.0/24 maxlen: 24
161.22.34.0/23 maxlen: 24
161.22.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 21:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450217 (0x1620e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Jun 5 12:36:35 2023 GMT
Not After : Jun 6 12:36:35 2025 GMT
Subject: CN=0d3ee4ede62523178121671f3d819320fe15b228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:92:a9:a3:3a:11:79:67:0f:43:77:67:8c:
4f:cd:82:fe:5b:30:2e:bb:32:4b:6d:5a:a0:e3:be:
16:1a:bd:76:fe:8a:3b:f5:65:c3:2e:5f:ec:78:0c:
f1:62:50:72:5d:e0:9c:4e:45:94:dc:9a:97:0f:c3:
43:2f:20:0c:8c:ea:a7:32:88:74:c4:d8:e9:c1:5e:
6c:8b:f9:ec:9a:b6:40:30:4b:a3:1f:86:91:bc:7d:
a2:e9:f3:8f:cb:e6:61:cd:83:07:88:81:66:7b:d4:
d5:6b:06:f6:8a:67:e3:a2:0d:3e:31:83:bf:1f:a2:
df:9c:b0:8a:75:b2:fb:84:03:37:9f:c1:dc:69:86:
79:0e:71:8a:ee:fe:1e:b4:8d:5f:7d:88:1f:bd:95:
81:da:85:41:a9:6c:07:4d:fc:f3:61:b1:e4:1c:20:
ff:69:0c:f0:3f:9d:0e:5c:76:b3:39:8b:d9:fe:26:
dc:86:08:d9:39:a6:89:6b:52:4c:26:1c:2c:c0:c3:
b0:57:26:11:ad:a3:47:2b:3b:bf:97:35:58:d3:18:
4f:68:cd:8c:da:ab:05:2a:d2:91:8d:48:39:08:30:
3f:dd:7f:9f:02:68:ae:92:b8:81:c5:5d:e8:1b:04:
77:3d:b8:04:be:2f:f2:4d:80:78:55:3e:e2:14:f7:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:D8:DD:D0:AD:B8:8C:3D:58:CC:22:E6:73:8C:37:81:C3:96:3D
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/0d3ee4ede62523178121671f3d819320fe15b228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.33.0-161.22.36.255
Signature Algorithm: sha256WithRSAEncryption
9a:f2:2d:05:a5:7c:a2:8d:65:46:71:a1:83:9b:5d:cb:23:d4:
30:29:9e:56:54:b2:28:f0:57:7a:8d:87:ea:d6:e3:ab:75:7c:
56:cd:6a:d3:40:65:58:f0:09:f4:bd:ba:d1:fc:d2:6f:07:3c:
e1:0e:61:43:4a:f8:04:c8:4b:ac:1f:f1:73:10:c9:8d:ff:00:
33:58:5d:c8:4d:b1:f6:dc:f3:70:e3:3e:56:06:d9:bc:5b:66:
d5:c4:ba:3f:1c:0e:1b:0f:b2:74:77:ba:24:bc:f7:3c:38:cc:
58:13:2d:36:22:14:48:a1:6e:10:cf:35:7d:28:7e:b1:d8:0e:
94:25:1a:64:eb:94:6b:33:23:28:c2:e2:37:89:77:48:6b:c1:
32:b5:6d:a4:9f:8c:d1:4c:a8:af:ca:61:15:78:fe:bc:f0:e0:
ef:61:4b:63:38:85:d8:46:20:fa:3f:31:0a:eb:71:9c:37:bd:
52:82:08:52:29:22:2a:e3:27:26:1b:c6:9b:49:81:37:85:9e:
d5:ba:cd:9a:8b:76:ea:83:82:73:93:5c:e2:1d:1a:20:e3:71:
13:c0:30:4c:c8:aa:35:f0:19:13:a2:44:e0:09:c8:5a:73:6c:
2c:bc:f1:d0:9b:06:36:9f:b0:a0:6c:cc:a3:b5:32:af:eb:17:
64:e3:e2:ef
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDFiDpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
ZjU5ZTRkMGY0ZGQ2NmQxZTgwY2I0ZmY3NmU2YWIyOTMxNzk1OTEwHhcNMjMwNjA1
MTIzNjM1WhcNMjUwNjA2MTIzNjM1WjAzMTEwLwYDVQQDEygwZDNlZTRlZGU2MjUy
MzE3ODEyMTY3MWYzZDgxOTMyMGZlMTViMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArciSqaM6EXlnD0N3Z4xPzYL+WzAuuzJLbVqg474WGr12/oo7
9WXDLl/seAzxYlByXeCcTkWU3JqXD8NDLyAMjOqnMoh0xNjpwV5si/nsmrZAMEuj
H4aRvH2i6fOPy+ZhzYMHiIFme9TVawb2imfjog0+MYO/H6LfnLCKdbL7hAM3n8Hc
aYZ5DnGK7v4etI1ffYgfvZWB2oVBqWwHTfzzYbHkHCD/aQzwP50OXHazOYvZ/ibc
hgjZOaaJa1JMJhwswMOwVyYRraNHKzu/lzVY0xhPaM2M2qsFKtKRjUg5CDA/3X+f
AmiukriBxV3oGwR3PbgEvi/yTYB4VT7iFPeAHQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFFKK2N3QrbiMPVjMIuZzjDeBw5Y9MB8GA1UdIwQYMBaAFELszKz4iWvIsP8q
dGlWz1aJC8gYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDBmNTll
NGQwZjRkZDY2ZDFlODBjYjRmZjc2ZTZhYjI5MzE3OTU5MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTA1YjY4NGMtZGQwMC00ODQxLTk5MjktMWFiNzUw
OTQ2NzliLzBkM2VlNGVkZTYyNTIzMTc4MTIxNjcxZjNkODE5MzIwZmUxNWIyMjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDViNjg0Yy1kZDAwLTQ4NDEtOTkyOS0xYWI3
NTA5NDY3OWIvZDBmNTllNGQwZjRkZDY2ZDFlODBjYjRmZjc2ZTZhYjI5MzE3OTU5
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAoRYhAwQAoRYkMA0GCSqGSIb3DQEBCwUAA4IBAQCa8i0F
pXyijWVGcaGDm13LI9QwKZ5WVLIo8Fd6jYfq1uOrdXxWzWrTQGVY8An0vbrR/NJv
BzzhDmFDSvgEyEusH/FzEMmN/wAzWF3ITbH23PNw4z5WBtm8W2bVxLo/HA4bD7J0
d7okvPc8OMxYEy02IhRIoW4QzzV9KH6x2A6UJRpk65RrMyMowuI3iXdIa8EytW2k
n4zRTKivymEVeP688ODvYUtjOIXYRiD6PzEK63GcN71SgghSKSIq4ycmG8abSYE3
hZ7Vus2ai3bqg4Jzk1ziHRog43ETwDBMyKo18BkTokTgCchac2wsvPHQmwY2n7Cg
bMyjtTKv6xdk4+Lv
-----END CERTIFICATE-----
Generated at Fri Jan 12 00:46:58 2024 by rpki-client on console-ams.rpki-client.org