Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/dcfb32b5439b627e986df8d1597bc17c381cdc64.roa
File: dcfb32b5439b627e986df8d1597bc17c381cdc64.roa (raw, json)
Hash identifier: Y/SQkAd2VX4JeBRT10083H5Mh8WPTYelhbsg6UvXq1E=
Subject key identifier: 7B:38:BB:81:9D:73:08:EE:6C:9C:7E:82:2D:73:55:7E:74:F6:08:0B
Certificate issuer: /CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Certificate serial: 1BE38E
Authority key identifier: 12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/dcfb32b5439b627e986df8d1597bc17c381cdc64.roa
Signing time: Fri 24 Mar 2023 08:30:43 +0000
ROA not before: Thu 23 Mar 2023 08:30:42 +0000
ROA not after: Sat 22 Mar 2025 08:30:42 +0000
asID: 264795
IP address blocks: 170.238.40.0/24 maxlen: 24
170.238.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827726 (0x1be38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Validity
Not Before: Mar 23 08:30:42 2023 GMT
Not After : Mar 22 08:30:42 2025 GMT
Subject: CN=dcfb32b5439b627e986df8d1597bc17c381cdc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:c7:53:38:de:54:bd:9d:d5:51:68:cc:58:
02:88:c4:d7:70:8e:22:91:e6:6d:cc:fc:05:ee:8c:
be:f1:24:bd:c0:fb:23:12:8d:07:c6:ae:95:74:5c:
f5:7a:20:32:ea:5d:52:79:13:31:e2:00:46:a0:98:
1f:d6:55:2d:69:1c:a5:f2:35:4b:af:4b:e5:b2:f1:
fe:87:0c:26:cf:9b:d8:b5:d7:99:84:23:ab:90:05:
fc:d6:30:bc:2c:7d:13:9f:26:28:40:86:f7:62:f3:
5b:88:3f:52:96:b7:dd:ed:84:df:ff:f4:1c:61:e0:
41:f7:9d:bb:a4:1e:4e:17:1a:6b:e5:86:db:b0:19:
68:58:27:f8:4b:62:05:8b:dd:0b:21:23:bb:f7:c1:
20:22:2a:3f:ae:4e:0a:4b:e4:77:ee:05:f2:86:ea:
91:5f:5d:a5:a7:6e:5c:6b:77:11:d6:3a:0d:c3:19:
05:f6:37:96:b8:03:4e:14:59:d7:ce:84:c5:08:71:
d7:0f:f1:35:cb:db:6d:3f:d3:ad:b6:dd:5a:49:cf:
88:7b:25:d6:54:00:46:bd:e3:d5:60:21:cd:89:15:
ce:aa:c0:e5:cc:22:63:9e:1c:74:75:9f:03:71:5a:
7e:23:7b:97:29:4d:b2:13:7a:3d:ef:9d:b0:e8:1e:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:BB:81:9D:73:08:EE:6C:9C:7E:82:2D:73:55:7E:74:F6:08:0B
X509v3 Authority Key Identifier:
keyid:12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/dcfb32b5439b627e986df8d1597bc17c381cdc64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.40.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:6f:81:be:cb:d5:4f:1b:54:90:70:72:a8:c5:c7:3b:c3:1f:
b5:fc:7e:d8:72:87:98:80:34:ff:ad:39:35:a5:1d:69:90:08:
d4:0a:d3:14:13:02:5e:25:0a:88:d7:1b:e7:c4:ec:a1:eb:4e:
dc:0c:11:e8:da:3d:d8:b3:12:7d:df:0b:a3:27:c0:b8:d3:1d:
5c:03:78:39:e7:e0:48:78:c1:b2:87:6a:a2:c5:e6:a6:50:e1:
79:e2:b6:cc:59:f0:43:e3:2b:c7:50:20:7f:d8:f9:d7:d7:6a:
6b:c7:d4:b4:87:ba:43:1a:22:84:d0:8a:ce:21:07:91:8f:76:
af:e2:2e:f8:dc:e9:89:bf:75:c6:bb:18:9c:ba:ca:ee:db:a4:
7d:40:e4:1b:9f:25:df:e6:3f:40:dd:00:5e:55:dd:13:90:90:
fc:94:82:85:02:70:fe:f9:10:be:d7:ee:45:9d:30:03:99:9f:
a2:b2:ec:9a:71:ff:9e:15:a4:6a:f1:bb:a2:96:e6:7a:56:b5:
56:27:bf:5b:ff:93:41:98:65:eb:e7:32:3f:60:b9:43:c1:a8:
7a:97:98:ee:d0:22:5e:dd:f2:72:12:1c:7e:1f:f1:26:ff:b8:
57:1d:20:4a:99:48:23:20:df:a6:52:fe:1f:db:02:89:af:1f:
05:be:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org