Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/993f34255d153f14abaf784fa027540af4dd0d10.roa
File: 993f34255d153f14abaf784fa027540af4dd0d10.roa (raw, json)
Hash identifier: ZX3Swp4Bm9po4tbOrdPYGljxWQum11QFf75VgFmX4Ec=
Subject key identifier: 9C:84:32:28:E7:A6:38:75:69:93:6E:16:90:FD:D6:BC:30:FB:1E:A2
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 19EDE9
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/993f34255d153f14abaf784fa027540af4dd0d10.roa
Signing time: Fri 03 Nov 2023 15:32:01 +0000
ROA not before: Fri 03 Nov 2023 15:32:01 +0000
ROA not after: Mon 03 Nov 2025 15:32:01 +0000
asID: 269918
IP address blocks: 161.22.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699305 (0x19ede9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Nov 3 15:32:01 2023 GMT
Not After : Nov 3 15:32:01 2025 GMT
Subject: CN=993f34255d153f14abaf784fa027540af4dd0d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:52:9a:20:6f:96:50:1c:92:bb:a3:fd:4d:
57:f0:c4:3e:f3:c2:ff:8c:09:e3:69:b2:0c:ea:4d:
fa:ff:4a:48:61:35:ba:cd:0c:cd:45:bb:e4:bb:7b:
2f:2d:e2:3e:45:b9:74:88:92:34:a8:d9:5a:a4:ef:
ea:6f:84:f2:ac:22:87:71:84:d4:7a:33:93:98:4c:
40:08:c0:8d:0d:04:77:80:cd:0c:c1:64:d6:2b:c5:
bf:11:ba:64:8c:f5:32:bc:5e:1d:b9:1c:b8:b0:3c:
95:5e:1b:46:33:b4:4f:12:0b:44:51:77:c3:75:04:
53:ce:91:00:03:13:b3:6c:1c:61:03:3a:95:79:0c:
31:8e:83:9f:db:ee:95:99:50:2d:f2:6e:ac:17:05:
89:5d:5b:34:03:5f:6b:3e:94:9d:bd:4b:7f:c5:3c:
17:77:81:e1:b8:fc:3a:cf:ca:01:73:ec:65:55:ab:
5d:62:89:ab:01:fa:f3:25:78:64:a6:c2:a5:0c:02:
66:54:25:aa:e7:20:ea:da:17:ce:72:13:ac:da:b2:
3b:75:08:b2:8a:fd:56:80:0e:7e:aa:87:ca:bc:39:
f3:77:da:a4:32:da:9d:59:e9:72:e7:1b:ed:f2:ee:
2d:74:24:07:be:6f:91:30:d4:e1:2c:0c:e1:da:30:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:32:28:E7:A6:38:75:69:93:6E:16:90:FD:D6:BC:30:FB:1E:A2
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/993f34255d153f14abaf784fa027540af4dd0d10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
71:81:71:8e:ea:60:bf:c0:4e:1e:45:51:cc:04:94:29:61:46:
92:da:ce:d4:cd:f6:f2:12:53:33:68:6e:06:0d:2a:72:76:0b:
8e:40:80:c6:18:c6:78:e9:c3:70:91:ed:32:67:3d:2b:10:26:
83:64:3d:06:8a:20:51:00:86:79:19:65:f3:22:c5:3d:66:04:
19:9c:33:13:f3:74:8a:14:a3:b4:a0:67:54:9d:35:0e:6e:11:
e4:10:8a:96:f5:79:18:25:4b:eb:80:b9:aa:2c:a0:49:07:9e:
e5:24:38:5e:58:bb:ad:c3:81:d0:23:f9:b1:9c:0f:ad:03:9c:
8b:2f:ea:29:b9:8d:47:a1:29:f1:d4:2f:09:5d:47:e9:57:b6:
c6:f7:b8:ac:63:45:68:f2:50:0c:67:81:ac:60:83:1e:16:f7:
bf:6f:4a:4e:aa:67:1e:ab:17:8f:c0:c0:a7:be:25:02:14:ff:
22:24:42:63:25:ac:48:7a:2d:bc:01:1e:b0:4b:40:ac:53:af:
57:2a:e1:e3:4b:59:ac:a9:4b:31:ff:06:8a:b8:85:fb:35:0b:
87:d6:96:5b:d8:a0:0f:16:a4:f5:29:1e:f3:a4:7f:51:51:23:
f6:4a:26:54:9e:31:e9:69:46:d1:8b:c2:0b:ac:ac:4a:be:66:
42:74:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 5 20:35:04 2023 by rpki-client on console-ams.rpki-client.org