Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/16901896e9908bd30323b2f849fb6cd616eea028.roa
File: 16901896e9908bd30323b2f849fb6cd616eea028.roa (raw, json)
Hash identifier: r/0PA1TZa2sRazjYsjr50FCu80846vj2xKVqEztuH/c=
Subject key identifier: 0A:9F:B0:94:12:41:CB:89:BC:F9:4F:EF:79:4B:15:1A:0A:07:4E:7B
Certificate issuer: /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial: 2020D6
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/16901896e9908bd30323b2f849fb6cd616eea028.roa
Signing time: Tue 27 Jun 2023 16:28:58 +0000
ROA not before: Mon 26 Jun 2023 16:28:56 +0000
ROA not after: Fri 27 Jun 2025 16:28:56 +0000
asID: 264856
IP address blocks: 170.244.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105558 (0x2020d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Validity
Not Before: Jun 26 16:28:56 2023 GMT
Not After : Jun 27 16:28:56 2025 GMT
Subject: CN=16901896e9908bd30323b2f849fb6cd616eea028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:7b:6f:61:29:73:eb:3a:a3:b7:9d:ca:3f:
98:94:64:78:51:3c:78:2c:2d:ae:f9:22:b9:89:a0:
64:46:4d:ba:6e:b5:0e:04:3f:85:a5:c0:4d:46:8c:
e8:93:78:08:31:6d:60:c0:ae:51:95:3e:60:1c:ad:
ef:f8:cd:b3:c6:dd:55:a2:63:2f:0b:42:88:ad:91:
c6:97:f0:28:24:1d:0a:c6:8f:97:84:0d:06:e4:eb:
db:af:81:22:2b:e2:85:4f:6a:64:4d:3e:85:06:41:
a7:66:a1:c1:0e:d7:ee:77:18:aa:b7:57:5c:6e:4c:
7c:1d:7e:06:62:81:a6:39:24:c4:f9:17:d4:ee:83:
c2:15:0e:1d:63:2f:df:ef:56:2f:a9:7a:a5:90:24:
8b:06:9a:3f:17:db:75:34:a7:f1:e3:42:d9:83:41:
cb:79:3b:1e:b8:61:a0:71:f5:37:08:96:54:d3:bc:
59:12:17:b8:e6:4c:4f:c0:e0:51:68:fe:8e:3d:35:
91:fa:c1:28:42:a6:b6:a2:fd:3d:a3:eb:17:8a:df:
34:c5:d4:41:fb:b4:be:2e:98:33:da:dc:c2:b1:c5:
b5:30:6f:ab:ed:4e:1f:2d:e1:45:88:82:03:73:01:
b3:9b:25:49:db:9f:f0:4d:f3:af:a7:89:b3:0c:1e:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9F:B0:94:12:41:CB:89:BC:F9:4F:EF:79:4B:15:1A:0A:07:4E:7B
X509v3 Authority Key Identifier:
keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/16901896e9908bd30323b2f849fb6cd616eea028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:71:eb:3e:44:75:dd:9b:a1:55:55:03:b3:45:24:97:cd:2f:
9d:27:fb:1e:df:53:b0:7e:60:02:a7:5e:79:bd:c3:78:5c:72:
35:90:81:63:5d:68:c6:70:8c:94:89:44:29:db:fa:82:8e:a3:
f4:95:cb:34:9e:14:92:f5:61:33:34:cc:12:d8:78:f1:e3:fe:
3a:65:da:6c:93:15:5a:91:7a:5e:12:56:f8:75:3d:72:ee:5e:
0b:8b:24:ea:fc:cc:b3:a7:f9:17:a9:64:92:14:18:1e:83:43:
d5:28:cd:b1:06:4f:1d:fb:10:d0:8f:cc:47:ec:0e:d3:ea:a0:
aa:f5:af:2e:e4:d2:f6:98:f7:cb:27:43:97:fa:49:a9:7f:f8:
62:d2:2c:5c:45:6d:fc:00:e2:6a:71:6d:bc:39:ed:d4:6d:be:
84:d5:a4:00:03:cb:29:6c:8a:7d:81:5b:00:3b:76:6d:b2:77:
30:b5:d4:f3:4a:fc:3b:88:47:e9:6b:e7:97:32:7b:ba:69:d5:
5c:c1:41:db:95:da:ac:38:78:74:fc:46:75:7a:42:bb:59:1c:
84:7c:1b:ba:1d:5b:1f:d1:00:33:e1:80:0a:b8:4e:0c:60:ab:
45:f8:5e:19:ab:a6:79:82:98:2c:4e:9e:b9:f3:55:b3:62:23:
25:00:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 21:28:23 2023 by rpki-client on console-ams.rpki-client.org