Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/14cc5e727430bf4ba46b0c6557460d7d31d24c4c.roa
File: 14cc5e727430bf4ba46b0c6557460d7d31d24c4c.roa (raw, json)
Hash identifier: 54Bh9wS1zzEfGq0LpzF6fQL2e5xq8fk5WHM31iX/PyM=
Subject key identifier: FC:14:47:5A:F8:14:B1:F2:1E:8E:C4:C1:E7:D8:D1:7E:CF:13:0A:F8
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 1A0DA8
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/14cc5e727430bf4ba46b0c6557460d7d31d24c4c.roa
Signing time: Sun 05 Nov 2023 23:17:25 +0000
ROA not before: Sun 05 Nov 2023 23:17:24 +0000
ROA not after: Wed 05 Nov 2025 23:17:24 +0000
asID: 269918
IP address blocks: 161.22.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707432 (0x1a0da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Nov 5 23:17:24 2023 GMT
Not After : Nov 5 23:17:24 2025 GMT
Subject: CN=14cc5e727430bf4ba46b0c6557460d7d31d24c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:47:0e:d3:c7:ef:17:57:9f:fd:35:0d:5a:
c6:72:2a:37:27:2d:5e:c6:49:55:60:d2:10:25:8b:
2c:9f:99:21:6a:8f:a6:5b:52:02:68:c5:77:48:b9:
99:01:9e:b7:99:d6:87:33:f4:25:e0:68:7b:a2:94:
69:ce:cc:80:87:8e:a5:7d:bc:1d:a9:cf:f5:31:8d:
21:76:59:3e:f1:59:cc:0e:f4:ee:ee:8f:98:d8:65:
70:8b:08:11:f6:61:7c:fb:37:df:8c:8d:2a:e2:2d:
e2:bb:bd:aa:bc:6e:95:53:4a:65:44:d9:7d:12:22:
1c:44:d3:48:89:ec:b2:d3:ce:01:4e:03:8c:bf:f5:
3f:86:e2:41:6e:cf:76:04:91:43:7f:27:6f:c8:37:
70:0d:47:b9:c6:cf:15:ae:a2:78:8e:1f:96:b2:46:
a5:c3:94:51:d9:88:33:50:c3:f5:fd:13:69:78:31:
b0:ca:dc:be:3b:57:36:11:dc:5c:13:dd:6d:1d:8b:
7f:79:ce:0b:fb:2a:59:c0:9f:fe:41:f9:c9:e5:4b:
b8:5a:2e:ee:82:be:c7:d4:4f:d9:f4:8b:9c:0f:92:
72:be:95:2a:a7:a1:0b:93:06:33:a9:16:c6:35:82:
0e:ba:ec:f5:fe:5b:06:cd:f7:1c:71:eb:96:0d:f7:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:47:5A:F8:14:B1:F2:1E:8E:C4:C1:E7:D8:D1:7E:CF:13:0A:F8
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/14cc5e727430bf4ba46b0c6557460d7d31d24c4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:32:c2:68:4f:9f:06:aa:02:ad:62:66:ac:0f:7b:7e:db:33:
bd:3f:1e:cf:c2:56:19:24:41:56:9d:73:c4:b3:d3:8f:0f:0d:
0d:85:8a:a1:57:e4:dc:51:ba:2f:5e:d2:f6:de:20:3a:b3:8d:
08:bd:2f:bb:33:13:17:0a:86:50:42:ae:57:61:96:29:f5:8f:
47:de:18:df:1b:0a:fc:3c:a1:9e:34:fa:d0:01:8b:ba:b5:6b:
c4:a1:7e:4e:e6:1d:12:c2:3f:b2:2f:73:d6:8b:00:b4:24:7c:
3b:c1:be:29:ea:dc:76:db:bf:08:66:61:9f:3e:4f:61:a2:07:
ca:2d:7f:41:43:3b:a5:da:e2:3e:fe:99:df:7f:02:5c:ed:41:
e9:b3:6f:1d:0c:f6:08:e6:01:d2:23:0c:5a:9e:8f:30:43:fa:
61:ba:7c:a3:86:60:16:f2:84:61:be:5b:6a:e4:c5:b4:84:b0:
1b:2a:2e:e9:27:b5:50:b8:64:43:ff:93:29:22:ed:0b:95:93:
0f:f0:df:88:ac:c5:22:14:02:4b:cc:20:cb:ad:4f:9d:17:69:
b9:93:3b:78:00:17:9a:35:f4:d6:8f:9b:8f:3a:23:4d:1c:fc:
1c:5f:75:64:4f:fb:40:a3:3f:e1:d3:25:92:70:ed:3a:7d:4e:
ce:92:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 19:19:35 2023 by rpki-client on console-ams.rpki-client.org