Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa
File: 369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa (raw, json)
Hash identifier: v35In5LoO2Z6xDrDM1lmwv3QXPSkQptr+x4w6EdhmJE=
Subject key identifier: 67:BD:17:01:A5:87:07:29:DA:44:80:CD:B4:B2:65:9E:31:A7:DC:62
Certificate issuer: /CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
Certificate serial: 02B57A
Authority key identifier: D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa
Signing time: Fri 28 Jul 2023 00:28:11 +0000
ROA not before: Thu 27 Jul 2023 00:28:10 +0000
ROA not after: Mon 28 Jul 2025 00:28:10 +0000
asID: 270096
IP address blocks: 170.245.132.0/23 maxlen: 23
170.245.132.0/24 maxlen: 24
170.245.133.0/24 maxlen: 24
2803:47e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177530 (0x2b57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b4ced70a812ae4cb948c754ed69ba0affff5
Validity
Not Before: Jul 27 00:28:10 2023 GMT
Not After : Jul 28 00:28:10 2025 GMT
Subject: CN=369a0b65d8a0825e6b5e102a77a8aed13c258ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:a1:aa:71:60:07:e4:65:09:c2:c7:aa:ee:
5e:40:fa:5f:6d:ca:1e:fc:90:e6:58:c8:82:de:5c:
e9:f3:a8:5a:c7:4c:d3:5b:ef:54:b1:ca:d1:c9:9e:
81:1b:72:7b:56:77:d9:8a:67:f2:2e:6f:f3:f2:4c:
f8:91:f2:6e:3a:3d:c7:a2:e1:60:6b:25:ca:c7:01:
02:44:49:61:43:b6:08:a4:1b:d9:0b:69:06:db:b8:
b3:91:2c:01:9a:f4:f4:11:77:b5:e4:06:c0:e5:5b:
65:fe:82:50:59:78:c0:01:1f:24:a6:90:42:95:e6:
ca:dd:c5:25:81:06:4d:4e:27:f9:13:95:bd:61:10:
85:c7:a8:d0:2c:c7:c4:b2:87:79:8c:a7:5c:ae:55:
de:fc:01:a1:f4:09:8a:7e:e3:5b:1f:13:0c:c5:07:
ce:06:13:ca:44:97:d1:bb:bd:18:15:36:54:1b:f6:
95:25:17:22:f9:b2:ef:a3:2f:ca:f9:d2:0a:84:c6:
a9:d3:02:bb:be:8b:d0:de:8c:53:25:3f:11:89:63:
10:85:c1:cb:8f:56:f1:c0:87:21:58:ad:fd:91:2f:
c6:af:ff:1b:fa:35:b0:fc:04:08:12:d4:6b:5a:19:
24:89:05:6b:91:aa:0b:86:47:95:6c:93:51:c5:51:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BD:17:01:A5:87:07:29:DA:44:80:CD:B4:B2:65:9E:31:A7:DC:62
X509v3 Authority Key Identifier:
keyid:D8:90:64:ED:82:CC:6C:14:3C:BA:DB:B9:54:3D:CD:41:D9:0C:8B:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/369a0b65d8a0825e6b5e102a77a8aed13c258ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a2888587-8ab2-48f7-9b6c-bd4bcf53df91/9fe1b4ced70a812ae4cb948c754ed69ba0affff5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.132.0/23
IPv6:
2803:47e0::/32
Signature Algorithm: sha256WithRSAEncryption
15:3e:b7:8e:65:1f:14:0b:3d:59:aa:b9:e7:63:cb:7f:68:88:
89:ce:05:91:48:35:ca:08:b7:29:d4:e1:6e:ee:ee:6a:83:3b:
ee:6f:23:1e:66:21:69:ea:04:77:bb:ea:e8:c9:37:1c:ba:6c:
b6:f5:98:42:55:0f:7b:66:0d:22:f9:5e:95:a0:3f:b5:a0:38:
4e:d9:e5:9f:15:31:9a:5a:a8:6a:24:a8:10:bf:dd:0f:5c:54:
a2:7f:56:5b:b5:bb:95:4c:ce:53:8b:bd:60:88:e0:79:70:5f:
30:68:f2:8a:f4:53:3d:bc:0c:46:6d:f9:93:f2:e1:35:0d:85:
d0:76:99:08:b4:a8:20:13:80:81:8a:f1:3e:44:e1:c2:87:fd:
9b:e1:04:f1:b0:a8:ee:17:cb:d3:d8:94:00:31:44:0d:31:01:
85:19:d0:b2:ad:bc:0f:56:3b:96:0b:9c:ce:c5:f0:ab:81:ba:
a9:b3:20:9b:17:b4:45:03:6a:09:52:81:ae:24:4b:ed:18:91:
51:83:8c:cf:5c:47:b9:b4:93:79:8f:d5:2b:cc:9f:26:2f:19:
77:ff:84:02:1e:fa:9a:29:40:e4:5e:8d:50:27:1d:0d:6f:a2:
8d:ee:8e:86:97:14:93:bf:b5:3e:f3:98:ee:49:55:e4:ad:bf:
90:fd:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 03:03:24 2023 by rpki-client on console-fra.rpki-client.org