Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/54df769841e0887f6a1d077cd6f059f7e46c2ff7.roa
File: 54df769841e0887f6a1d077cd6f059f7e46c2ff7.roa (raw, json)
Hash identifier: VS4+TUUMpP/+OE/iNnh5r3Abq2yaPd4d4DERXZDJHTw=
Subject key identifier: A6:DB:20:51:EE:44:C7:4F:42:E4:D5:8A:2F:14:BC:AD:6F:14:A5:A2
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 0E0F30
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/54df769841e0887f6a1d077cd6f059f7e46c2ff7.roa
Signing time: Wed 27 Jul 2022 14:10:35 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 269832
IP address blocks: 161.22.33.0/24 maxlen: 24
161.22.34.0/23 maxlen: 24
161.22.34.0/24 maxlen: 24
161.22.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921392 (0xe0f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=54df769841e0887f6a1d077cd6f059f7e46c2ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:81:fe:6c:8b:27:d4:fc:c4:fe:48:28:cf:
8c:7d:c4:0b:75:4f:4f:f6:d8:75:ad:7c:2a:bb:31:
5a:c6:73:d1:55:85:7e:83:08:68:64:16:36:12:5d:
db:71:0d:15:7a:68:64:1e:45:33:9e:85:4e:81:86:
b3:19:e3:53:85:70:8d:27:78:d3:49:4b:9b:70:56:
91:cd:d6:8c:8a:43:cd:b7:98:74:5d:fb:65:ac:6e:
d2:af:39:99:98:d2:75:4d:9a:79:88:98:1a:01:63:
47:2c:5a:7c:51:ba:e5:8d:a1:ad:b3:41:17:0b:68:
9a:35:53:75:40:7d:fc:df:5e:5b:be:d0:6d:6a:5e:
6e:87:b8:bf:84:81:ee:69:b9:51:17:98:0e:38:9b:
bb:a8:90:b3:28:5d:eb:9f:bd:26:f5:d8:75:1e:36:
bf:cf:c6:82:ee:13:2a:97:bd:dc:43:b5:f8:bf:ed:
4d:01:24:2f:7f:12:22:cb:90:4a:17:7f:b5:96:4d:
5b:0b:61:d6:32:2f:63:18:8d:d4:02:9f:2c:dc:35:
59:e6:ba:3f:ab:a0:46:c2:40:df:36:3e:ce:6a:6e:
5f:9c:73:91:f1:76:76:c9:d3:6f:5f:f2:51:f7:f6:
21:9d:83:48:ea:26:2c:56:37:9b:22:c8:33:c9:ef:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:20:51:EE:44:C7:4F:42:E4:D5:8A:2F:14:BC:AD:6F:14:A5:A2
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/54df769841e0887f6a1d077cd6f059f7e46c2ff7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.33.0-161.22.35.255
Signature Algorithm: sha256WithRSAEncryption
39:fc:9e:8d:e9:af:d9:71:7a:56:98:39:58:68:d2:b3:a3:87:
15:76:79:bb:ca:17:86:d9:8e:ff:5e:42:d2:ca:a3:60:3d:9a:
df:64:87:9b:fd:45:89:58:55:db:30:35:bb:31:5e:bd:c3:54:
7f:78:5e:e3:f8:93:95:fd:07:bd:3e:55:18:e1:64:96:79:3e:
e3:fa:62:86:ce:4c:8d:c3:ec:6c:5c:ac:1e:b8:7a:7d:78:1a:
a9:7a:c2:9c:a8:3d:d7:56:cb:d4:2a:49:81:bf:26:72:56:df:
d9:c9:de:e2:43:a0:81:79:3b:c8:73:78:f9:40:d4:56:c7:11:
6e:a8:28:0d:a6:3f:20:d8:06:94:56:50:1c:e6:c8:52:13:ff:
e5:c5:dc:8e:0b:8b:57:4b:f2:b3:59:6c:b2:59:07:6f:13:1b:
e6:32:e4:b4:3d:ff:87:a0:68:09:b2:6a:53:85:fa:fc:b4:d4:
9b:f2:83:43:f0:10:f4:1d:28:fe:46:d6:b3:36:a3:73:4e:9c:
ed:c4:78:91:ee:48:c1:b2:0e:ed:54:11:a4:76:e2:02:fb:c0:
80:80:60:f7:53:48:16:7e:f8:58:7d:d3:ac:0d:e0:30:76:ab:
bd:bb:58:bd:fd:56:a2:58:ad:c1:21:a4:7f:2c:da:b7:f8:98:
6c:cf:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org