Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/c080d848916d39b5b496f93d24962e214dc619f3.roa
File: c080d848916d39b5b496f93d24962e214dc619f3.roa (raw, json)
Hash identifier: AeIA97uertBBcMldQ2P6PImQ4tqMwHd25eO2bpUKUm0=
Subject key identifier: E1:45:43:48:F9:B6:69:24:53:EE:69:D2:5A:10:7F:BB:03:09:59:9F
Certificate issuer: /CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Certificate serial: 03171C
Authority key identifier: 13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/c080d848916d39b5b496f93d24962e214dc619f3.roa
Signing time: Wed 24 Mar 2021 14:40:15 +0000
ROA not before: Wed 24 Mar 2021 14:40:15 +0000
ROA not after: Tue 24 Mar 2026 14:40:15 +0000
asID: 270049
IP address blocks: 131.161.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202524 (0x3171c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c6924e8891b8dd6d9889adcc8e4154f3f02c4
Validity
Not Before: Mar 24 14:40:15 2021 GMT
Not After : Mar 24 14:40:15 2026 GMT
Subject: CN=c080d848916d39b5b496f93d24962e214dc619f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:6f:09:a9:a9:66:ac:1d:05:57:74:92:af:
15:3f:d1:12:d9:ef:ce:41:34:d9:a6:89:56:9f:58:
26:9b:1e:45:d7:9d:68:73:20:45:90:ae:27:8d:df:
81:0b:e1:39:a0:a6:16:91:3f:87:02:ed:0a:d5:c9:
98:ca:35:17:d8:ce:8a:b8:73:04:0d:5f:86:35:3f:
ef:de:37:b8:7f:c2:84:36:1b:58:28:6c:81:36:8a:
00:ac:18:5d:48:df:2c:2b:9b:7b:de:1a:fa:cc:02:
a3:f6:10:5b:ca:2b:28:5c:d3:1d:3f:e7:4d:cf:e3:
1e:1f:ec:ad:97:4d:68:42:78:53:b6:cb:35:75:e5:
62:42:db:2c:45:52:0a:d3:f6:d9:45:12:b6:b8:c0:
84:28:f3:a1:e0:70:27:d8:58:93:20:7c:41:b2:9b:
3d:3c:a4:46:ec:1f:7b:d1:20:4e:de:2e:c0:ae:ec:
2d:83:d7:6e:57:ff:b9:7b:50:7c:e9:bf:0f:45:af:
27:78:62:24:d6:c0:aa:b5:a7:f1:ee:2a:71:ba:22:
15:f8:b7:3f:9e:12:bf:08:c9:c9:77:ab:d2:9d:49:
01:4f:9a:30:24:31:6d:18:ed:75:fd:e0:81:95:5f:
0e:d5:23:07:f8:1f:10:16:af:56:bd:ea:22:25:ca:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:43:48:F9:B6:69:24:53:EE:69:D2:5A:10:7F:BB:03:09:59:9F
X509v3 Authority Key Identifier:
keyid:13:EE:C7:A5:32:52:23:CB:DF:6D:3D:07:81:C3:95:16:AE:FD:BF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/c080d848916d39b5b496f93d24962e214dc619f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/db28bc19-2af3-458b-8007-b36cb292864a/063c6924e8891b8dd6d9889adcc8e4154f3f02c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.220.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e1:4c:7a:2e:42:bb:8d:45:bd:7b:3a:7c:d8:cd:9c:86:47:
89:c0:86:a3:cf:9e:74:1b:f9:fb:d7:d0:72:10:04:c6:1c:b9:
6d:c7:a8:4b:cc:1d:1b:0a:1e:cd:c8:8a:20:40:2d:9b:1f:b6:
49:ac:56:c4:7d:d4:e7:1d:ee:fd:5f:d1:c4:8f:26:42:cc:92:
e2:eb:4d:e1:d5:67:c1:00:dd:5a:dc:58:85:c7:13:b7:21:c6:
1e:83:6d:bb:e3:a1:c3:84:f9:f7:74:4b:08:6a:4f:45:80:89:
ec:86:15:1e:db:18:f9:f0:9e:9d:6e:3a:5f:bc:b9:d3:c6:18:
44:ab:12:96:27:1a:a4:02:70:ed:9f:cd:56:ff:9a:52:7e:52:
54:b2:e4:92:20:2c:54:c0:d3:0c:9d:b9:98:02:9d:f0:55:32:
ab:02:f4:6b:b5:9d:be:a4:bb:74:bf:64:2c:47:c1:0f:da:52:
0d:91:68:43:14:14:ba:2a:bf:b3:fe:bd:49:f7:e4:69:f1:1f:
8c:16:43:e7:b4:85:5d:36:37:93:7f:bd:e3:87:4a:0a:9a:02:
f2:8c:74:67:85:53:4d:61:1d:3b:a5:7c:2b:3e:b8:7f:4a:7e:
b0:2c:4e:db:72:4a:26:34:f0:e4:22:4d:29:6a:f4:b6:42:42:
3c:67:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 16:16:57 2023 by rpki-client on console-fra.rpki-client.org