Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/c2d5e2865611f597876f9e2474ab8e24ac3dd0b4.roa
File: c2d5e2865611f597876f9e2474ab8e24ac3dd0b4.roa (raw, json)
Hash identifier: hhwa3PbTtQmFgrMg5RuU8QU+4MjlavOY18a9oJOvezU=
Subject key identifier: 28:D7:0F:F1:CC:79:58:73:85:E7:4D:D3:31:FC:8F:A8:DB:CB:81:BA
Certificate issuer: /CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Certificate serial: 19517A
Authority key identifier: 49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/c2d5e2865611f597876f9e2474ab8e24ac3dd0b4.roa
Signing time: Sat 04 Nov 2023 07:30:00 +0000
ROA not before: Sat 04 Nov 2023 07:30:00 +0000
ROA not after: Mon 03 Nov 2025 07:30:00 +0000
asID: 270044
IP address blocks: 179.0.180.0/24 maxlen: 24
179.0.181.0/24 maxlen: 24
179.0.182.0/24 maxlen: 24
179.0.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659258 (0x19517a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Validity
Not Before: Nov 4 07:30:00 2023 GMT
Not After : Nov 3 07:30:00 2025 GMT
Subject: CN=c2d5e2865611f597876f9e2474ab8e24ac3dd0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:49:4f:e1:76:be:da:a9:72:a2:18:12:72:
43:9b:3a:09:19:ac:88:ea:f1:a6:d2:f4:56:b6:b4:
ff:7e:1e:92:3f:d7:a3:f8:5d:e9:68:18:b7:3b:b3:
43:65:94:4a:8d:e6:4b:42:db:a7:d4:13:23:74:d1:
96:c6:58:42:b0:40:c2:ca:d8:70:11:0d:8c:8b:44:
ab:8f:99:c4:bd:50:47:85:89:e4:aa:46:00:63:51:
01:22:43:b9:cd:cc:f3:dd:a7:dc:3f:75:d7:9b:3d:
e3:e4:a0:d9:63:ea:8c:fc:e5:fa:71:61:39:54:e3:
8f:6e:c8:28:93:a7:77:48:a2:8e:de:4f:6d:87:a1:
3f:69:52:49:ab:ee:d0:24:18:b3:92:59:f5:98:d6:
2d:5c:65:af:0c:ec:56:b1:50:af:b4:fc:30:cc:5e:
91:be:bf:27:e8:88:72:55:f8:16:f7:18:d4:dc:6e:
9d:cb:93:80:88:87:09:05:7a:6d:85:aa:7f:1a:23:
79:e2:df:82:2f:89:44:75:d7:f9:d5:d1:91:f7:fc:
ab:8f:e1:13:90:40:0f:1e:d1:c9:88:d8:dc:f2:9f:
5f:39:a4:cc:0e:6c:b8:2c:4b:b8:6b:9e:5d:da:6a:
5a:1f:99:be:8b:67:2b:ed:67:d5:09:56:ab:5a:0e:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D7:0F:F1:CC:79:58:73:85:E7:4D:D3:31:FC:8F:A8:DB:CB:81:BA
X509v3 Authority Key Identifier:
keyid:49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/c2d5e2865611f597876f9e2474ab8e24ac3dd0b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:3a:7c:7c:31:aa:06:cb:02:40:09:5c:46:13:fb:53:9e:66:
67:75:01:3d:8e:b1:4b:e1:c8:25:6e:87:7d:44:a8:df:ad:04:
a0:b6:4d:41:b3:61:c9:45:cb:00:1f:84:70:eb:48:ad:f2:fa:
b8:04:92:39:8e:e0:03:2b:93:71:85:a4:7f:72:77:b3:d1:9e:
f3:99:a3:e2:de:bb:63:41:d8:2c:2a:a4:94:4a:4f:83:51:ad:
1f:41:1d:45:9a:fc:63:0c:f7:61:50:44:8c:d0:68:f5:73:72:
e8:36:e8:6e:6e:19:30:e7:bc:51:11:b7:39:6e:ef:ac:57:7e:
40:f7:91:d7:43:4a:7d:09:4a:b2:35:92:eb:25:12:4a:d0:c2:
eb:34:91:47:cb:c6:93:6e:65:22:3b:fb:df:d0:6d:47:81:ca:
08:9a:00:88:d1:22:19:e3:6f:b1:af:7d:08:07:97:cd:55:a5:
8b:ac:7e:12:c3:06:98:09:3d:1a:79:c6:b7:e1:99:63:53:bf:
2b:c6:5d:f8:9f:50:e9:8b:03:4c:6c:98:7b:e4:b0:de:e7:c6:
ff:a4:d3:ec:7f:1d:eb:4f:29:f3:e9:dd:f3:07:cc:46:67:2c:
3c:2f:b9:8e:c5:5a:b1:4e:79:88:83:6d:d6:ac:21:6b:9a:28:
aa:24:56:84
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGVF6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRm
ZjFmMDRkNWI1MDgyODU0YjFlZGJmYjFlOWNmNGVjMTIwMDFlZjcwHhcNMjMxMTA0
MDczMDAwWhcNMjUxMTAzMDczMDAwWjAzMTEwLwYDVQQDEyhjMmQ1ZTI4NjU2MTFm
NTk3ODc2ZjllMjQ3NGFiOGUyNGFjM2RkMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkJVJT+F2vtqpcqIYEnJDmzoJGayI6vGm0vRWtrT/fh6SP9ej
+F3paBi3O7NDZZRKjeZLQtun1BMjdNGWxlhCsEDCythwEQ2Mi0Srj5nEvVBHhYnk
qkYAY1EBIkO5zczz3afcP3XXmz3j5KDZY+qM/OX6cWE5VOOPbsgok6d3SKKO3k9t
h6E/aVJJq+7QJBizkln1mNYtXGWvDOxWsVCvtPwwzF6Rvr8n6IhyVfgW9xjU3G6d
y5OAiIcJBXpthap/GiN54t+CL4lEddf51dGR9/yrj+ETkEAPHtHJiNjc8p9fOaTM
Dmy4LEu4a55d2mpaH5m+i2cr7WfVCVarWg6gTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCjXD/HMeVhzhedN0zH8j6jby4G6MB8GA1UdIwQYMBaAFEkLW9Q7NFK9X9eB
FTSksZsx2xiAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGZmMWYw
NGQ1YjUwODI4NTRiMWVkYmZiMWU5Y2Y0ZWMxMjAwMWVmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzE1ZjkzNzQtYjcxOS00OTBhLTg3Y2QtMGZiMGE0
N2RmMWU5L2MyZDVlMjg2NTYxMWY1OTc4NzZmOWUyNDc0YWI4ZTI0YWMzZGQwYjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMTVmOTM3NC1iNzE5LTQ5MGEtODdjZC0wZmIw
YTQ3ZGYxZTkvNGZmMWYwNGQ1YjUwODI4NTRiMWVkYmZiMWU5Y2Y0ZWMxMjAwMWVm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArMAtDANBgkqhkiG9w0BAQsFAAOCAQEAOjp8fDGqBssCQAlc
RhP7U55mZ3UBPY6xS+HIJW6HfUSo360EoLZNQbNhyUXLAB+EcOtIrfL6uASSOY7g
AyuTcYWkf3J3s9Ge85mj4t67Y0HYLCqklEpPg1GtH0EdRZr8Ywz3YVBEjNBo9XNy
6Dbobm4ZMOe8URG3OW7vrFd+QPeR10NKfQlKsjWS6yUSStDC6zSRR8vGk25lIjv7
39BtR4HKCJoAiNEiGeNvsa99CAeXzVWli6x+EsMGmAk9GnnGt+GZY1O/K8Zd+J9Q
6YsDTGyYe+Sw3ufG/6TT7H8d608p8+nd8wfMRmcsPC+5jsVasU55iINt1qwha5oo
qiRWhA==
-----END CERTIFICATE-----
Generated at Fri Jan 5 21:23:34 2024 by rpki-client on console-fra.rpki-client.org