Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/36a17f93d3b5e61dcf9c5eadfed98c739b61c6ee.roa
File: 36a17f93d3b5e61dcf9c5eadfed98c739b61c6ee.roa (raw, json)
Hash identifier: jM5epWm6wwnQ6qpegG1NK5kuHEuifctXkr+bXogaRF4=
Subject key identifier: 92:11:FE:76:D6:A4:C1:EC:09:4C:4E:25:B0:78:31:A6:75:01:72:A4
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 024AE8
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/36a17f93d3b5e61dcf9c5eadfed98c739b61c6ee.roa
Signing time: Wed 24 Mar 2021 14:48:09 +0000
ROA not before: Wed 24 Mar 2021 14:48:09 +0000
ROA not after: Tue 24 Mar 2026 14:48:09 +0000
asID: 271812
IP address blocks: 161.22.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150248 (0x24ae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Mar 24 14:48:09 2021 GMT
Not After : Mar 24 14:48:09 2026 GMT
Subject: CN=36a17f93d3b5e61dcf9c5eadfed98c739b61c6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:da:2b:84:61:30:ac:46:57:13:a3:b2:9b:
2d:8e:3a:83:28:e1:55:cc:45:e8:c0:ed:24:6f:72:
c7:7b:56:7d:0d:86:c9:d0:82:21:db:b0:61:86:b4:
5a:c3:92:29:2e:48:27:e0:09:a2:6a:24:77:4f:4f:
08:f3:68:b2:1e:36:90:85:b5:73:fa:65:67:79:75:
a7:fd:3f:5c:68:5c:8c:73:2f:46:23:39:3d:53:d5:
55:4d:cf:e2:f2:49:8c:85:94:de:e4:5d:f7:a6:2d:
8e:47:09:4a:4c:60:7d:6a:d1:5c:7c:f9:ca:59:e7:
ee:53:1a:73:10:62:d1:2a:ba:fe:84:c4:21:1b:36:
45:83:a1:43:b4:59:15:e3:aa:1d:63:48:40:1c:a1:
8f:96:88:ba:11:7c:44:88:2b:6e:b5:3e:2a:f4:87:
b1:35:44:ab:62:ec:67:3b:1f:ec:ea:3b:e5:0d:0f:
bd:14:7e:2d:19:03:da:9c:31:a6:5b:6f:0a:72:d6:
b1:73:14:f8:3e:3f:c8:f3:82:3c:41:cd:f8:a0:0e:
64:18:62:f8:5c:4d:1e:dc:32:6a:b6:44:b3:30:71:
92:ab:2e:ca:4b:59:47:d0:2f:78:28:c7:ce:77:c8:
77:bf:09:b7:74:11:77:83:82:48:e5:37:c5:69:5c:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:FE:76:D6:A4:C1:EC:09:4C:4E:25:B0:78:31:A6:75:01:72:A4
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/36a17f93d3b5e61dcf9c5eadfed98c739b61c6ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e0:16:7d:4d:fc:a6:b6:b7:84:e4:0f:5e:7f:ab:3c:33:53:
5f:10:d0:0b:89:76:20:b1:05:fd:cf:a6:a5:75:4c:58:46:59:
f0:b2:e5:13:02:9a:39:19:95:08:35:6f:65:cb:0a:4a:b0:e6:
e8:8b:fd:23:63:1f:bb:ac:44:fd:80:15:92:46:8e:e8:d3:02:
9c:c9:2e:66:5a:fe:f4:69:c9:7c:c3:d1:10:01:1c:96:6b:57:
cd:df:29:d2:a1:aa:07:d4:56:ce:84:8a:90:f8:69:d6:e8:ed:
2a:8e:92:9a:a9:9c:ee:54:02:64:e6:f0:8e:a0:4d:44:36:37:
8c:05:75:fb:b8:08:b4:58:0b:b4:f2:e9:1d:66:1a:85:de:e3:
2e:39:da:47:7c:4b:43:a1:12:21:3c:af:06:56:a5:76:ea:0a:
0e:12:42:f4:83:b3:71:30:89:62:1b:25:2b:dc:0f:f1:e7:23:
38:6b:9d:a9:e3:bb:b4:ad:45:13:24:76:43:eb:17:5a:4e:ae:
29:7f:82:49:fd:27:bc:9f:8c:ed:eb:cf:0a:98:7b:79:ed:e5:
82:78:e3:7c:9e:7b:ed:81:87:96:83:a7:01:51:c1:08:7a:68:
e3:b8:26:f4:f8:f1:0f:58:f5:50:cd:83:a8:ec:b2:c2:54:5f:
a3:05:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org