Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/a5b5cea916109564edcb48f01293267c7cb78b8a.roa
File: a5b5cea916109564edcb48f01293267c7cb78b8a.roa (raw, json)
Hash identifier: e/UpUXeUQIuuulj69xcH/Y0plNIHTc/GYBAXJTjWw7s=
Subject key identifier: 36:BD:00:9D:A7:71:E6:4B:E4:18:B8:6B:39:2E:AD:92:8D:EF:C1:3C
Certificate issuer: /CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
Certificate serial: 1C3D47
Authority key identifier: 9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/a5b5cea916109564edcb48f01293267c7cb78b8a.roa
Signing time: Tue 01 Nov 2022 13:22:04 +0000
ROA not before: Tue 23 Mar 2021 14:39:30 +0000
ROA not after: Tue 24 Mar 2026 14:39:30 +0000
asID: 265629
IP address blocks: 170.239.204.0/24 maxlen: 24
170.239.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850695 (0x1c3d47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
Validity
Not Before: Mar 23 14:39:30 2021 GMT
Not After : Mar 24 14:39:30 2026 GMT
Subject: CN=a5b5cea916109564edcb48f01293267c7cb78b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:ab:a6:30:a8:40:24:65:22:b0:14:1d:e0:
6b:29:50:8a:f5:ec:bd:58:cb:f3:4a:68:ce:64:98:
e8:90:c4:c0:e9:b4:17:27:52:8c:19:94:1b:83:2d:
67:d1:8e:06:6b:8b:a6:ed:1e:c9:16:fb:e1:c1:72:
ac:51:60:c0:45:19:c1:f8:df:12:df:6d:f2:17:6c:
f5:1d:7d:68:27:be:4c:c6:70:17:a7:dd:18:76:7f:
40:37:11:25:be:cf:30:91:24:91:4e:94:25:25:64:
19:13:e2:a8:ee:8e:28:6a:2c:13:07:da:e4:7c:34:
5f:05:6b:83:73:73:d7:3a:b6:c3:bc:6f:45:5d:2f:
cd:bf:2d:07:63:3b:cd:8a:b4:73:9f:08:e5:3a:cf:
99:37:ac:5b:09:29:be:21:87:11:0c:eb:30:61:84:
1d:62:a8:45:e2:31:6d:ce:5a:af:5e:e2:77:09:72:
1d:c0:26:5f:2b:eb:3c:ad:8b:26:87:03:e3:3f:42:
66:09:08:46:e5:24:d5:36:b6:d2:ef:12:f6:04:a6:
08:9b:9d:32:88:77:61:c6:73:82:eb:80:08:ba:05:
f6:ff:0d:fe:0e:1e:d3:b4:eb:47:2b:d8:be:ed:d4:
b6:d9:1e:89:5c:f6:89:32:5e:8a:65:c0:31:45:7b:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BD:00:9D:A7:71:E6:4B:E4:18:B8:6B:39:2E:AD:92:8D:EF:C1:3C
X509v3 Authority Key Identifier:
keyid:9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/a5b5cea916109564edcb48f01293267c7cb78b8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.204.0/24
170.239.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d0:18:b2:0a:2f:ae:d7:3b:6f:d9:a1:3d:be:c8:01:35:7d:
73:b7:b5:1d:fd:18:a5:e7:c7:02:17:fd:ba:64:31:71:e5:06:
0c:85:e0:90:60:e2:5a:60:5f:14:5e:52:4a:42:80:ac:8f:c6:
c2:df:a6:a0:09:ee:62:e3:60:47:e5:66:41:a8:ee:22:ad:f5:
a9:58:4d:0b:16:2a:1e:dd:36:f6:00:9a:09:71:64:e0:4a:78:
df:b8:ed:58:3c:30:30:b7:be:a2:41:bc:a6:a2:93:d9:e3:0c:
10:65:bc:8a:7f:6e:d7:f0:3d:32:97:76:63:3d:ea:a8:52:15:
98:b5:9f:ef:ce:6f:05:d8:4c:9b:15:0e:8b:1c:fe:22:3f:ce:
0b:e5:ea:34:38:dd:85:86:11:8f:76:ce:80:86:ea:bb:2a:8a:
ff:ac:70:19:c7:05:98:5e:08:d8:34:a7:e5:ec:b6:2d:7f:64:
dd:c0:db:bd:e5:e2:0d:b7:f8:26:46:21:99:9d:0d:f3:5f:0e:
d3:83:b9:10:d4:26:c6:74:b5:a7:8a:1c:83:cb:f1:f5:21:f9:
6f:12:d2:90:8c:f5:ed:94:99:30:74:01:be:91:88:45:bd:fe:
ee:76:54:5b:b7:42:af:6d:76:da:48:c6:b9:bf:ae:dc:d6:a0:
0d:01:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org