Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b469f9b3a003a217f4b5ec40079ac30fec92e6d6.roa
File: b469f9b3a003a217f4b5ec40079ac30fec92e6d6.roa (raw, json)
Hash identifier: jNDEZxjsd/6EOAL9ktfssnfMY9b4cxvLNPviftfrxmk=
Subject key identifier: B7:A1:01:E2:9F:62:88:0D:FB:8C:D3:9B:1E:F3:88:13:ED:79:DB:AC
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 17B208
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b469f9b3a003a217f4b5ec40079ac30fec92e6d6.roa
Signing time: Sun 06 Aug 2023 00:59:45 +0000
ROA not before: Sat 05 Aug 2023 00:59:45 +0000
ROA not after: Wed 06 Aug 2025 00:59:45 +0000
asID: 269918
IP address blocks: 161.22.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1552904 (0x17b208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Aug 5 00:59:45 2023 GMT
Not After : Aug 6 00:59:45 2025 GMT
Subject: CN=b469f9b3a003a217f4b5ec40079ac30fec92e6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:f4:45:61:19:d6:02:ae:1d:a8:37:ae:c8:
1c:ae:42:a6:53:5c:6d:6c:ee:69:bc:b4:89:55:08:
fc:00:75:bc:2e:70:ee:05:91:c7:3c:0f:2e:f2:cb:
0a:b4:ca:55:5a:d3:cd:46:84:d2:98:58:c8:ed:78:
73:3b:9a:b7:41:4e:69:2a:f8:5e:8a:77:a6:d2:3d:
d9:1b:2f:d8:c6:dc:04:be:79:53:13:cd:1b:f1:85:
f8:99:b2:11:1f:3e:2a:34:0b:57:81:e3:c8:31:7a:
b6:4e:a0:26:21:e0:06:e8:c9:4a:b5:7c:27:bf:63:
24:76:e9:0e:a6:c7:36:02:f1:1d:12:ee:b7:a3:16:
c5:db:dd:53:e4:4c:6f:14:76:5c:ac:ac:05:ff:e8:
b3:e8:b8:c9:89:98:f9:b8:d3:91:1e:d6:4a:da:15:
61:48:15:a2:61:77:e3:46:de:45:90:d4:4c:6f:fe:
35:0c:ab:af:31:e2:7b:28:dc:78:33:66:8f:79:14:
9c:9e:67:8b:c4:db:5c:4d:1b:23:32:cf:90:a1:f2:
bd:85:8e:d8:93:43:81:e4:7f:5e:83:0d:78:05:de:
36:bc:d4:cf:dc:a3:68:bb:db:91:b6:a7:27:76:a8:
58:eb:b2:bf:55:9a:36:99:b6:33:5f:b6:a2:dd:60:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:01:E2:9F:62:88:0D:FB:8C:D3:9B:1E:F3:88:13:ED:79:DB:AC
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/b469f9b3a003a217f4b5ec40079ac30fec92e6d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:76:7f:76:3d:ec:64:06:6b:72:a7:26:e1:91:d9:4f:f4:8e:
57:7c:92:89:34:d3:7a:5f:45:1c:77:ff:41:db:13:94:9c:76:
70:3d:c2:e2:21:42:c0:ad:54:3b:d6:17:b6:54:11:1d:17:87:
b5:27:ab:74:43:9b:6d:a3:9b:93:a0:6f:3e:54:62:58:76:6c:
0d:af:d3:5b:5a:57:16:d3:d6:f7:f2:15:f3:2e:a9:5e:4d:e7:
61:4f:22:7a:b0:fb:ca:0c:c3:85:44:48:e7:a0:e2:23:f0:91:
79:66:7f:d2:df:19:ce:09:c1:a3:09:6e:88:58:2f:11:eb:8b:
da:8b:49:9d:50:c4:2b:fc:e1:4c:c9:d6:56:93:b7:96:3c:41:
6d:a1:c8:d6:9f:e9:da:d6:8b:2e:e8:7a:75:5c:ba:a2:ed:a1:
e9:76:21:56:f2:d0:03:1a:c2:d0:ec:a1:b9:59:1e:d8:d1:0a:
40:d8:8a:e6:33:f1:c4:a9:29:00:3a:92:e7:a6:31:0f:48:1a:
b0:78:e1:f3:1e:3e:9c:55:fa:87:db:e5:fc:76:51:c2:26:60:
f4:59:7f:89:8f:2e:bc:75:b8:4d:ef:84:1e:83:9a:95:23:90:
09:c9:c2:ed:80:f7:03:ae:90:d8:63:11:62:cc:08:86:2f:09:
9c:dc:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 16:56:41 2023 by rpki-client on console-fra.rpki-client.org