Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/02169f477d17b01d4a8acf0495b4cea953167283.roa
File: 02169f477d17b01d4a8acf0495b4cea953167283.roa (raw, json)
Hash identifier: W5JiFq5ulqjdOAFvor+/JTHuKpEN7DSY5NuIVmYPjHo=
Subject key identifier: 60:70:95:0A:4A:84:22:FE:17:68:4F:AC:2B:94:B1:80:E6:DC:3D:8D
Certificate issuer: /CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Certificate serial: 26A7E7
Authority key identifier: DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/02169f477d17b01d4a8acf0495b4cea953167283.roa
Signing time: Tue 26 Dec 2023 02:40:49 +0000
ROA not before: Tue 26 Dec 2023 02:40:48 +0000
ROA not after: Fri 26 Dec 2025 02:40:48 +0000
asID: 264740
IP address blocks: 170.239.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533351 (0x26a7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Validity
Not Before: Dec 26 02:40:48 2023 GMT
Not After : Dec 26 02:40:48 2025 GMT
Subject: CN=02169f477d17b01d4a8acf0495b4cea953167283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:24:3e:3b:92:ed:f5:96:28:ba:f2:46:c4:
6d:b2:9f:7d:4d:7d:59:20:bb:c0:3c:d3:e1:cc:5d:
ea:37:f9:6b:bc:57:f6:6d:f1:86:d8:61:e7:db:0b:
45:bc:eb:bf:10:80:3d:22:e6:0b:43:7f:89:7b:11:
6b:9d:e9:3c:05:53:e5:5c:1e:cb:59:88:4c:40:dc:
7d:6e:20:a7:f2:bc:f8:6c:e4:76:ca:e6:2a:3b:10:
4e:65:5d:87:03:b8:45:23:28:ab:0d:01:56:ec:6a:
c1:b1:1e:d9:01:17:62:76:3d:91:51:48:a2:d1:12:
4e:b4:a3:9b:8a:f5:b4:c9:62:18:2b:44:ec:84:4d:
7d:15:6c:22:8b:11:fb:f7:bf:af:61:a0:33:50:ad:
6a:c5:61:6b:be:79:ab:ee:03:f2:e8:6b:3a:e4:dd:
5e:32:e9:42:d1:56:e7:c7:b3:1f:2e:40:bb:d0:ce:
e2:82:af:1a:ea:05:72:01:56:73:51:37:e7:93:81:
01:91:99:de:c9:b3:aa:70:46:b8:85:35:18:6e:30:
4e:fa:61:f9:62:6c:c0:fd:61:8f:10:dc:56:3d:59:
e7:a7:66:17:90:64:4d:e5:47:0f:9f:45:30:02:0e:
88:49:5f:12:c1:99:bb:21:cf:4f:f6:55:a3:fa:79:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:95:0A:4A:84:22:FE:17:68:4F:AC:2B:94:B1:80:E6:DC:3D:8D
X509v3 Authority Key Identifier:
keyid:DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/02169f477d17b01d4a8acf0495b4cea953167283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.180.0/22
Signature Algorithm: sha256WithRSAEncryption
af:59:1e:5a:56:66:75:18:62:4d:c2:d8:20:d0:12:06:41:92:
62:c0:cc:62:7d:9a:f8:64:61:9d:f1:70:b6:17:3f:e5:ab:e6:
49:15:3a:05:d7:ea:62:26:0d:6c:0d:4f:54:0a:54:2b:0a:45:
66:48:df:7e:23:34:ca:8f:fa:9a:53:cb:f8:4c:2d:3b:f3:6b:
8a:5c:5b:43:af:ce:a5:97:1e:bf:78:cb:28:4f:b5:39:12:4f:
41:43:49:50:a3:46:d2:f3:18:fd:cc:12:46:31:b2:4d:c3:da:
a6:21:27:ce:a6:e4:ca:87:68:1c:80:02:bf:02:ce:70:18:8f:
2b:87:0f:33:87:d1:a5:f1:33:da:b0:55:43:b8:3e:4d:20:07:
fd:85:2e:aa:6a:9d:9b:95:93:5f:32:21:18:3c:ef:af:4b:44:
c2:45:73:a2:d2:3f:b5:2d:e8:71:f8:09:11:e3:4e:b1:05:45:
f0:8e:42:ec:e8:86:e0:bb:b8:be:85:5c:62:3f:d2:58:d9:e1:
fa:00:d0:29:5c:4f:d7:15:e7:db:be:a0:d7:bd:cf:6c:8c:32:
ad:4b:f7:2f:97:b7:09:f8:0d:19:b9:ae:41:a9:9b:24:91:c0:
b8:a4:5f:e3:c2:3e:93:0e:44:7b:31:3d:a6:8a:73:42:cf:ba:
a3:3a:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:29:33 2023 by rpki-client on console-fra.rpki-client.org