Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/a1853937aef4dadf16759c8f0f5c9b4b734ac5a1.roa
File: a1853937aef4dadf16759c8f0f5c9b4b734ac5a1.roa (raw, json)
Hash identifier: vUZ1QyY142WUJDgF4JauiiKxiW53dkR03At8P261ytQ=
Subject key identifier: F2:9C:AD:09:B6:EF:3B:26:41:76:CE:C2:5F:54:53:29:EF:8A:5B:35
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 100436
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/a1853937aef4dadf16759c8f0f5c9b4b734ac5a1.roa
Signing time: Wed 12 Oct 2022 23:51:15 +0000
ROA not before: Sun 26 Dec 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 270026
IP address blocks: 161.22.36.0/24 maxlen: 24
161.22.34.0/23 maxlen: 24
161.22.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049654 (0x100436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Dec 26 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=a1853937aef4dadf16759c8f0f5c9b4b734ac5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:35:42:b0:89:cd:b6:16:71:bb:55:ae:ed:
9c:07:e5:ca:27:dc:8d:55:ae:fb:dd:8f:63:48:ff:
20:ab:83:5c:8c:85:d7:f4:9a:15:4b:7c:f6:6f:6f:
50:3f:e5:60:0c:93:0d:31:e1:94:e9:00:41:a7:fe:
f4:32:35:79:18:5b:21:cc:4f:c3:ea:a4:92:9c:08:
10:0d:e0:f6:56:50:6d:be:0f:46:1f:6a:a7:79:b3:
97:a6:2f:51:85:3c:35:a1:f6:03:2e:f4:a9:c3:8e:
5e:2e:c3:b8:e3:57:5c:72:47:81:0e:b3:9b:07:b3:
f3:27:fe:7c:15:57:a2:09:4d:5d:2f:3e:f3:97:83:
d8:1c:02:64:df:28:08:98:ad:35:ae:1b:4d:53:7b:
c6:ba:f8:03:73:c8:40:91:20:57:64:34:e7:df:3d:
ae:74:fa:40:67:fe:75:d6:6c:58:5b:71:76:c2:33:
9e:af:32:77:89:90:b8:87:4d:b3:47:da:bc:6a:57:
05:b4:03:49:9d:d6:7f:11:20:b8:f0:eb:da:0a:56:
46:d5:be:5f:da:1f:49:1c:a3:bd:79:f3:cf:f4:ed:
ea:56:55:54:86:4d:83:be:b6:19:6f:5b:ca:60:29:
36:3d:66:bf:82:87:0e:0d:b7:58:0e:6c:26:dc:77:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:AD:09:B6:EF:3B:26:41:76:CE:C2:5F:54:53:29:EF:8A:5B:35
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/a1853937aef4dadf16759c8f0f5c9b4b734ac5a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.33.0-161.22.36.255
Signature Algorithm: sha256WithRSAEncryption
3e:8d:4f:48:5e:0a:89:cd:f2:48:53:ea:f4:93:92:0b:ce:4e:
b5:87:26:1f:11:3d:f3:db:30:a4:19:69:9a:86:0b:ae:b0:20:
4d:f3:ab:69:3f:96:97:04:91:68:21:1f:ad:b0:cd:b9:67:6d:
b4:a3:a7:18:52:2f:69:9b:04:3b:ca:be:60:f6:f7:04:52:1a:
64:ed:e4:46:d3:66:c2:36:8e:c3:38:61:da:30:76:5a:8f:78:
72:a5:78:ae:da:a1:8b:e0:2c:c4:77:cf:c1:cd:6f:77:6e:9e:
0d:10:50:92:ec:9c:55:6e:bb:07:3b:03:bb:f1:c5:e9:4a:c2:
62:27:4a:12:de:9a:95:67:68:69:c9:53:5b:4e:8e:9b:c1:70:
7e:70:77:ce:a7:bb:98:34:51:09:00:95:98:07:1f:34:90:49:
ad:8c:d3:25:a0:ac:c5:51:63:28:b0:eb:c3:62:5b:bf:17:40:
ec:c5:63:a5:4f:04:8f:c6:04:96:2e:87:44:fd:be:bb:bb:4c:
d4:d2:ee:41:66:30:8f:0d:b2:9e:0a:67:25:90:7a:c8:db:7b:
bb:06:6a:51:0e:4e:bd:8a:6c:22:4b:a8:b4:ad:89:32:b4:36:
03:42:1a:db:96:3e:1b:e3:ce:be:8c:92:5d:f4:f5:a2:8d:43:
5d:65:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org