Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/6fac17ad398b49d5fcc6568f492aed6c9bafc3fb.roa
File: 6fac17ad398b49d5fcc6568f492aed6c9bafc3fb.roa (raw, json)
Hash identifier: /lZeiuRkS2us7t70OTHGVX5zdmCD7jjL/mDM4w5epwM=
Subject key identifier: AF:73:44:EA:F5:1D:14:74:2A:D5:DA:69:92:8F:61:86:AC:04:72:E2
Certificate issuer: /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial: 2018FC
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/6fac17ad398b49d5fcc6568f492aed6c9bafc3fb.roa
Signing time: Tue 27 Jun 2023 16:28:56 +0000
ROA not before: Mon 26 Jun 2023 16:28:56 +0000
ROA not after: Fri 27 Jun 2025 16:28:56 +0000
asID: 263684
IP address blocks: 170.244.56.0/22 maxlen: 24
200.115.25.0/24 maxlen: 24
200.115.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103548 (0x2018fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Validity
Not Before: Jun 26 16:28:56 2023 GMT
Not After : Jun 27 16:28:56 2025 GMT
Subject: CN=6fac17ad398b49d5fcc6568f492aed6c9bafc3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:ac:d7:55:3d:47:33:5a:11:c6:36:40:32:
1d:8f:07:28:47:c0:88:00:28:b0:37:9b:16:42:64:
01:1a:b2:0f:b7:61:6f:88:49:80:ca:45:11:5b:76:
f7:0a:12:ab:1e:d0:85:eb:4f:ba:e2:65:45:a3:c4:
5c:0c:23:7b:3e:af:c6:f7:b3:b7:99:ca:be:bf:65:
9d:83:97:4a:73:04:84:01:07:79:08:93:63:34:38:
fa:dd:b6:d1:f0:77:15:57:86:9b:f0:ea:86:70:24:
5a:f0:54:c5:3c:b1:14:99:5b:e5:83:68:88:6d:d0:
7f:db:82:df:01:c9:74:e4:e2:b9:98:dc:ce:24:57:
12:88:3b:bb:fa:01:d4:7a:2a:be:fe:9a:1f:7a:ff:
25:6f:11:67:72:a6:8e:88:5d:cc:e0:1c:38:ee:51:
2f:f5:da:51:db:a2:26:8b:9c:6c:e4:73:d2:28:e9:
07:79:f6:04:24:6f:9f:08:d6:8c:8b:ba:65:46:b3:
5e:52:96:fc:69:19:fe:f7:e2:69:17:51:8e:b9:ec:
c1:a4:6e:18:61:0a:b0:03:fb:94:1a:d3:70:2c:18:
5b:ac:c2:b9:cd:74:59:0a:78:e5:c1:fc:f4:58:21:
2b:78:2e:d3:e6:a7:e6:a2:11:72:b9:b6:13:56:ca:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:73:44:EA:F5:1D:14:74:2A:D5:DA:69:92:8F:61:86:AC:04:72:E2
X509v3 Authority Key Identifier:
keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/6fac17ad398b49d5fcc6568f492aed6c9bafc3fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.56.0/22
200.115.25.0-200.115.27.255
Signature Algorithm: sha256WithRSAEncryption
4e:5e:c5:44:56:57:5f:c9:7e:33:33:40:43:51:3d:fb:82:cd:
38:88:5e:ab:6c:a5:ae:ee:0c:b8:0a:36:46:25:c3:dc:ac:59:
b6:59:49:80:9f:85:d0:e5:e5:51:55:c1:f8:de:46:20:21:d6:
43:ef:65:e1:6c:e8:71:af:ae:fd:a8:96:4d:a3:b9:86:3e:30:
90:6b:47:71:62:65:46:5f:78:5c:8b:1c:3e:e1:b6:41:57:07:
89:77:a6:0d:65:10:40:43:40:d1:2a:53:65:13:d2:3b:79:a3:
be:0a:7b:5e:4c:f0:5f:b6:8f:f1:02:27:e4:e7:88:b5:5d:47:
91:19:06:8f:56:86:95:1b:58:0a:7c:87:0f:7a:72:47:32:44:
c0:05:82:9a:b1:aa:9b:71:96:9d:04:49:4f:dc:d0:35:a0:68:
6f:26:90:48:43:9a:2b:48:05:8a:22:7f:57:15:c6:97:8d:cd:
cf:89:cb:de:3a:73:e6:71:98:8d:7d:fc:9d:44:48:3f:d4:6b:
95:7c:ba:a9:42:5b:5e:f3:c6:40:af:09:38:e9:3d:82:72:26:
2d:a7:6e:d9:ca:5b:a4:cd:92:9e:58:0f:21:87:db:64:db:19:
5d:9f:b0:48:bc:1d:88:85:99:77:3c:f9:00:6f:de:34:59:ef:
89:28:0e:50
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDIBj8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
ZmZjMWUwYmI2ZDVmZWE4NTI5YzRmZTY1YmRhNzZmNzJkNGM4OGMwHhcNMjMwNjI2
MTYyODU2WhcNMjUwNjI3MTYyODU2WjAzMTEwLwYDVQQDEyg2ZmFjMTdhZDM5OGI0
OWQ1ZmNjNjU2OGY0OTJhZWQ2YzliYWZjM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2lGs11U9RzNaEcY2QDIdjwcoR8CIACiwN5sWQmQBGrIPt2Fv
iEmAykURW3b3ChKrHtCF60+64mVFo8RcDCN7Pq/G97O3mcq+v2Wdg5dKcwSEAQd5
CJNjNDj63bbR8HcVV4ab8OqGcCRa8FTFPLEUmVvlg2iIbdB/24LfAcl05OK5mNzO
JFcSiDu7+gHUeiq+/pofev8lbxFncqaOiF3M4Bw47lEv9dpR26Imi5xs5HPSKOkH
efYEJG+fCNaMi7plRrNeUpb8aRn+9+JpF1GOuezBpG4YYQqwA/uUGtNwLBhbrMK5
zXRZCnjlwfz0WCEreC7T5qfmohFyubYTVspsKwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFK9zROr1HRR0KtXaaZKPYYasBHLiMB8GA1UdIwQYMBaAFOKxgIx8ev/AjDHz
50OUxayJBKaoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmZmZmMx
ZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjI0NzZhNDgtM2RjOS00NzM2LWJmOWYtZDc2MWJh
ZjQzN2MyLzZmYWMxN2FkMzk4YjQ5ZDVmY2M2NTY4ZjQ5MmFlZDZjOWJhZmMzZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMjQ3NmE0OC0zZGM5LTQ3MzYtYmY5Zi1kNzYx
YmFmNDM3YzIvMmZmZmMxZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEAqr0ODAMAwQAyHMZAwQCyHMYMA0GCSqGSIb3DQEBCwUAA4IB
AQBOXsVEVldfyX4zM0BDUT37gs04iF6rbKWu7gy4CjZGJcPcrFm2WUmAn4XQ5eVR
VcH43kYgIdZD72XhbOhxr679qJZNo7mGPjCQa0dxYmVGX3hcixw+4bZBVweJd6YN
ZRBAQ0DRKlNlE9I7eaO+CnteTPBfto/xAifk54i1XUeRGQaPVoaVG1gKfIcPenJH
MkTABYKasaqbcZadBElP3NA1oGhvJpBIQ5orSAWKIn9XFcaXjc3PicveOnPmcZiN
ffydREg/1GuVfLqpQlte88ZArwk46T2CciYtp27ZylukzZKeWA8hh9tk2xldn7BI
vB2IhZl3PPkAb940We+JKA5Q
-----END CERTIFICATE-----
Generated at Tue Dec 26 21:28:23 2023 by rpki-client on console-ams.rpki-client.org