Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/11cf7b4c99da31b039a7551669b29a8da21ca997.roa
File: 11cf7b4c99da31b039a7551669b29a8da21ca997.roa (raw, json)
Hash identifier: KYAehqv2cev3l5VVr6DImVlHZj9l3vyUGgN8HqWgTsQ=
Subject key identifier: 55:70:10:AA:93:23:30:98:06:FC:54:C5:E8:1B:86:35:FB:5F:36:FD
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 0B92F8
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/11cf7b4c99da31b039a7551669b29a8da21ca997.roa
Signing time: Wed 24 Mar 2021 14:31:58 +0000
ROA not before: Wed 24 Mar 2021 14:31:57 +0000
ROA not after: Tue 24 Mar 2026 14:31:57 +0000
asID: 52314
IP address blocks: 170.210.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758520 (0xb92f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Mar 24 14:31:57 2021 GMT
Not After : Mar 24 14:31:57 2026 GMT
Subject: CN=11cf7b4c99da31b039a7551669b29a8da21ca997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:f9:a9:b9:1b:4f:17:72:e0:f1:b5:0e:0e:
fe:dd:4e:53:1a:ca:b9:42:df:ba:e8:2c:22:bc:bc:
77:42:e5:41:ff:e6:f7:eb:19:c6:fc:19:da:48:9a:
77:eb:f3:2c:86:7d:9d:16:29:c3:b9:54:49:05:ae:
17:0e:77:f2:0e:a7:df:f0:7b:af:8b:71:67:f4:d7:
f3:69:b0:52:f7:c3:59:5a:8f:93:a7:b3:55:aa:66:
df:9f:56:dc:9b:58:25:3f:d9:ae:f8:e7:6b:7f:83:
f8:8e:21:d4:61:62:90:aa:70:ec:3f:8a:b3:09:c0:
18:59:fc:67:fa:ff:c6:4b:bd:a7:ee:a6:e5:98:98:
ef:c7:fa:35:0b:b5:f6:c9:a2:39:3b:85:b2:b9:14:
9f:d8:ba:a7:60:84:3f:9f:5f:1f:31:dc:b0:be:4f:
4f:1f:e7:9c:b2:08:d4:69:7d:a5:01:68:a1:27:9c:
d6:b0:f9:c4:53:28:4f:39:40:fd:34:df:e8:88:ae:
bd:c3:1d:79:3a:e6:f3:e9:5b:6b:d8:64:c7:67:23:
52:5a:f3:9a:4b:53:53:b6:a9:b3:4e:7c:06:45:4f:
78:db:10:62:a8:a8:97:8a:aa:af:7b:00:99:2a:0b:
66:44:26:5b:88:99:0c:e4:b5:22:ec:98:d7:50:2d:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:70:10:AA:93:23:30:98:06:FC:54:C5:E8:1B:86:35:FB:5F:36:FD
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/11cf7b4c99da31b039a7551669b29a8da21ca997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
35:df:ec:56:9d:11:f3:b2:3d:ba:b2:56:1f:d8:cd:88:b1:1d:
43:26:2a:f4:4b:14:09:f6:09:71:a8:dd:d8:1b:2b:f3:f1:01:
f6:5b:82:56:c5:eb:6a:7f:02:73:ce:69:1c:68:f9:da:87:d8:
60:bd:64:ec:e9:6b:f0:cb:25:49:48:bc:a5:09:ec:cc:c8:98:
2b:a7:e5:b9:36:45:90:35:e2:26:de:90:29:3e:3d:9a:74:48:
f4:ba:8b:59:c5:9c:0e:75:eb:1b:00:f9:12:79:7b:ec:d5:2d:
83:04:00:7a:fa:db:25:09:7f:3c:aa:22:41:f5:46:9c:2a:12:
c3:bd:d9:79:7b:e2:9f:4f:db:b8:10:d8:12:0e:fc:52:19:f5:
0d:20:00:f2:7a:f0:40:3f:50:68:98:d8:e6:ec:10:3b:6f:57:
7f:61:a8:fc:82:72:30:d9:30:f1:70:37:7c:c1:da:05:d6:33:
48:5a:46:fc:7e:bf:05:25:09:54:aa:31:49:6c:fc:43:78:f6:
2a:f6:ea:24:e4:95:3e:87:e2:db:4d:c0:d7:a7:f8:2a:1f:97:
e7:9c:71:53:7d:6e:3e:4e:e1:cc:c1:d2:36:af:98:e7:c6:ce:
56:0c:de:88:0e:52:9a:82:2b:71:2c:aa:af:8d:6b:64:45:f2:
bc:3f:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org