Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/be41f9d6d358a486f67ba034eae68e545a5141db.roa
File: be41f9d6d358a486f67ba034eae68e545a5141db.roa (raw, json)
Hash identifier: ZtmZeZN96DVxWo4KhK3ZngT1LmSaXZy4F5HPx4JxpCc=
Subject key identifier: 79:E2:7E:E1:51:5B:E0:6F:47:0D:0C:2D:DE:95:52:F2:9E:29:96:81
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 18F0D1
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/be41f9d6d358a486f67ba034eae68e545a5141db.roa
Signing time: Sun 24 Sep 2023 02:06:45 +0000
ROA not before: Sat 23 Sep 2023 02:06:45 +0000
ROA not after: Wed 24 Sep 2025 02:06:45 +0000
asID: 269918
IP address blocks: 161.22.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1634513 (0x18f0d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Sep 23 02:06:45 2023 GMT
Not After : Sep 24 02:06:45 2025 GMT
Subject: CN=be41f9d6d358a486f67ba034eae68e545a5141db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:33:25:b8:45:80:63:f4:fe:43:fe:47:1b:
22:1c:67:a2:65:26:9b:3e:36:70:58:89:6a:45:a0:
88:cc:1d:4e:0d:41:33:11:3d:8c:1b:5f:cd:f9:80:
9f:85:d6:45:93:ac:ef:65:59:bd:9c:7c:62:a4:95:
da:e7:87:46:8c:11:2e:20:62:15:30:f5:8f:07:67:
16:55:63:b9:97:fc:3f:7e:c7:b4:ea:5a:4a:92:f8:
eb:6a:35:4f:8d:a6:9e:07:d1:e2:c4:66:79:40:d4:
46:99:43:7d:d0:b9:f7:d0:2e:40:de:90:c4:f4:97:
6e:e9:01:33:45:35:85:e8:55:55:b3:b5:a9:74:52:
fe:70:7f:6c:50:b1:8b:46:e8:18:42:65:98:1e:74:
a8:dd:3b:c3:9a:86:a5:aa:42:00:f7:f9:d5:ac:24:
3f:c5:fe:9a:2c:5e:0c:11:f2:ce:63:f7:e1:70:5c:
a5:fa:89:20:9f:e4:7a:20:77:be:27:0d:fc:d0:46:
dd:3b:1b:51:01:24:76:b9:31:d1:0a:8f:dc:04:a9:
65:c8:ab:64:11:14:ea:ef:6f:ce:1d:6d:85:dc:ad:
41:2d:5d:96:6e:2d:32:c8:ba:b1:c7:52:b4:81:40:
87:ad:de:5c:bf:bf:17:d6:83:e3:24:0d:88:d5:82:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:7E:E1:51:5B:E0:6F:47:0D:0C:2D:DE:95:52:F2:9E:29:96:81
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/be41f9d6d358a486f67ba034eae68e545a5141db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
95:28:a5:0d:72:ea:e1:ad:4a:9c:cb:f1:ff:af:25:1e:d3:56:
00:6d:9e:de:90:13:c2:b7:12:b4:95:b1:cc:89:f3:eb:29:4f:
1a:26:ff:2f:bb:9d:c7:f5:f4:6a:49:ab:6a:dd:2b:ab:dc:1d:
5c:48:d8:86:8a:80:6a:44:a7:e8:02:9a:61:71:a1:4f:c9:a9:
73:5e:48:bd:23:9f:2c:37:96:67:57:e9:a4:6d:21:e0:4d:1d:
29:ce:bf:2e:ab:dd:ac:c9:7f:c3:29:dc:e6:38:18:b3:6a:5a:
bf:e9:cc:d3:07:9b:79:45:90:01:9e:db:43:cf:d2:9b:5c:4d:
11:18:d3:1b:ba:32:3e:bb:55:c6:32:f3:65:ef:ee:25:e9:0b:
75:0f:b5:55:70:b3:c5:24:10:60:e9:bb:5f:0c:86:bf:5d:3c:
0b:5c:6f:37:16:5b:86:ad:12:d6:9e:35:45:4c:02:c6:59:69:
71:70:c3:b6:13:85:42:fb:55:a0:e0:8e:1b:1a:08:93:89:18:
9c:54:76:83:e8:5a:2f:76:cc:8f:86:4d:0c:17:15:83:a2:84:
15:b4:77:cb:f8:11:fe:66:18:ce:ab:1f:73:68:7d:20:29:7f:
0c:63:08:c0:e8:da:12:cd:3a:f3:69:11:8b:1b:a8:53:5e:b6:
57:bb:c0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 16:21:43 2023 by rpki-client on console-ams.rpki-client.org