Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/be24133fbce1385376ad338e8da5df7f3d7d4ad9.roa
File: be24133fbce1385376ad338e8da5df7f3d7d4ad9.roa (raw, json)
Hash identifier: 3HZ1LCJ+oNbNUAfl/fpcKqJCchmkA5ocJXPxb2j2wyI=
Subject key identifier: 8F:BA:EF:9D:76:81:5D:92:22:4A:7C:57:7B:90:19:D1:95:F5:B3:39
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 0DD79A
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/be24133fbce1385376ad338e8da5df7f3d7d4ad9.roa
Signing time: Mon 18 Jul 2022 15:19:38 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 269832
IP address blocks: 161.22.33.0/24 maxlen: 24
161.22.34.0/23 maxlen: 24
161.22.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907162 (0xdd79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=be24133fbce1385376ad338e8da5df7f3d7d4ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:ac:f5:51:d1:d5:68:40:22:da:cd:0e:10:
9b:5f:13:27:ec:2a:f7:d1:16:67:bb:1a:60:0f:db:
57:aa:30:c4:77:6b:f4:3e:e0:00:14:78:15:6b:87:
27:88:a4:d9:9a:d7:c5:af:5e:03:34:b6:aa:6e:a8:
b6:33:e5:52:4c:f9:8d:99:d4:6e:59:c7:fc:cf:18:
b7:ea:22:73:eb:92:a1:b3:ba:28:2e:11:0c:df:03:
ea:86:26:6a:fd:8e:8b:95:6e:89:f1:1f:5b:a8:7e:
25:12:79:4d:43:b1:51:d9:89:c6:0a:cd:73:33:7d:
88:24:7b:92:12:4f:1b:14:04:0c:2e:1f:75:25:a9:
f5:b8:56:6c:15:c7:fb:bb:4f:8f:90:41:b2:ab:43:
b9:db:72:61:26:55:d9:98:c2:e1:2e:0a:69:ba:2b:
1f:9c:76:64:f1:fc:da:7d:95:d3:7c:06:ca:75:a7:
b4:80:a4:c7:60:5f:f6:85:41:7e:b8:c7:1e:69:58:
8d:dd:c8:ef:23:fc:c8:db:05:23:b4:df:98:bd:96:
ed:d4:c7:87:d7:21:43:ee:b0:73:c5:8b:7e:db:c5:
a1:f6:dc:37:e6:f7:8f:94:a9:8a:76:8d:ed:75:33:
84:f2:4a:ec:1b:20:c9:32:11:8a:a6:9c:b9:10:a9:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:EF:9D:76:81:5D:92:22:4A:7C:57:7B:90:19:D1:95:F5:B3:39
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/be24133fbce1385376ad338e8da5df7f3d7d4ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.33.0-161.22.35.255
Signature Algorithm: sha256WithRSAEncryption
7b:97:cd:ae:87:f5:b5:e3:0b:b7:fc:c9:97:9d:be:2c:26:57:
79:fe:0c:61:e2:64:ee:0d:ab:85:32:15:35:77:66:e4:91:31:
90:1a:3d:a9:ef:74:f4:42:3f:fa:a0:ce:8e:da:67:3c:30:43:
21:b4:61:60:66:2b:9b:7f:af:2a:2d:00:8d:14:c3:33:43:9e:
35:30:c5:72:0c:f5:c4:3e:0a:12:82:ec:e7:5b:74:72:a7:7d:
6d:ea:e1:e5:b1:3d:77:fb:02:b0:1b:76:c3:05:03:19:e7:9e:
7d:1b:9a:b3:60:aa:91:0c:89:ca:c7:37:c0:61:52:de:95:f8:
2e:7b:93:39:03:fa:e9:d3:dc:48:b8:63:c3:3e:30:4a:04:f7:
b5:c3:3d:ac:46:55:cb:e5:22:35:d7:cd:e2:c3:7e:05:4d:14:
f5:79:0b:87:7e:17:e3:46:c4:fe:18:43:6a:40:d6:ef:e8:d2:
c1:2b:cf:92:b3:98:de:a0:52:69:9e:76:05:0f:59:bd:0c:51:
b6:f8:2b:9b:9b:23:32:1c:d3:87:8b:9b:7a:34:22:9c:ec:0b:
25:bf:5f:6d:38:4b:b0:81:ff:2a:5b:8d:64:ad:37:13:99:c0:
28:49:2a:74:af:0b:a0:eb:65:60:1c:76:f9:8d:5b:e1:e7:c5:
4b:7e:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org