Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6aa67f2082b41c3d42902e602c55df333e7cd8fa.roa
File: 6aa67f2082b41c3d42902e602c55df333e7cd8fa.roa (raw, json)
Hash identifier: 7AAn28VIJcCLbhuK6VmYFHzq8m+VUlgXBI/8zKuzTZ8=
Subject key identifier: 50:65:84:DF:23:4E:C7:04:69:CC:4D:2A:D1:94:9C:09:6B:2F:FE:13
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 0E1A74
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6aa67f2082b41c3d42902e602c55df333e7cd8fa.roa
Signing time: Thu 08 Jul 2021 14:21:28 +0000
ROA not before: Thu 08 Jul 2021 03:00:00 +0000
ROA not after: Sat 08 Jul 2023 03:00:00 +0000
asID: 52424
IP address blocks: 170.210.24.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924276 (0xe1a74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Jul 8 03:00:00 2021 GMT
Not After : Jul 8 03:00:00 2023 GMT
Subject: CN=6aa67f2082b41c3d42902e602c55df333e7cd8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:a4:06:de:4c:44:2d:66:65:f2:3c:9e:60:
9f:f0:60:d1:d5:28:fc:b5:f2:41:f4:08:47:08:ed:
71:97:30:93:62:55:12:77:8a:3c:f9:62:0f:7b:ad:
7c:4a:49:a9:73:77:9e:b6:f1:ec:ad:05:52:ef:3d:
05:d2:e7:b3:f6:3a:7f:22:0f:52:50:e3:94:15:c9:
b8:20:d8:13:7a:5e:a2:0a:09:00:ea:ee:1e:dd:8e:
6b:dc:95:d0:16:a3:c9:2d:92:3f:54:88:db:54:b3:
31:4c:6e:8a:7c:0e:14:10:bc:ae:29:84:a4:26:a5:
71:de:1d:48:eb:51:b1:d4:bc:e7:ae:a2:8c:ff:d4:
db:c6:36:dd:96:3a:36:a9:db:bc:98:86:d5:b5:6e:
ed:a8:2a:58:ca:57:a8:57:2b:c3:11:40:87:0a:07:
23:53:eb:fc:ad:5e:54:20:f7:a7:13:51:d6:32:29:
56:d1:79:32:1f:7b:cf:59:b7:da:7e:a0:ff:cc:a8:
a2:cc:f0:f7:b2:aa:47:69:3b:c2:f5:33:53:21:3b:
de:85:be:4a:fb:08:b9:dc:d9:04:20:2b:b0:d9:42:
af:c0:3c:d5:9c:22:66:e0:f2:98:bd:cf:34:d3:52:
02:1f:55:13:a5:e7:40:50:51:1e:da:c9:47:62:21:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:65:84:DF:23:4E:C7:04:69:CC:4D:2A:D1:94:9C:09:6B:2F:FE:13
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/6aa67f2082b41c3d42902e602c55df333e7cd8fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.24.0/21
Signature Algorithm: sha256WithRSAEncryption
50:10:a7:fd:cc:c3:22:1b:4d:de:bc:5a:6b:69:5d:8b:82:3c:
98:5d:76:c2:07:ec:ea:27:30:4f:8c:50:cd:d4:61:f6:8a:c5:
24:4a:51:c6:65:66:04:9c:06:7b:61:de:3c:74:54:92:96:e6:
72:46:90:b3:0c:5f:71:a5:57:36:06:3b:f0:c7:19:60:72:b0:
34:df:d1:69:97:86:10:04:ad:ef:f2:ff:f5:e1:da:0b:57:46:
dc:a7:42:74:bf:bc:b0:7b:af:19:12:d7:04:64:72:43:02:b2:
91:13:ed:ce:84:d8:d3:b1:d2:1e:96:e5:84:19:f1:ae:28:58:
27:af:fe:81:ae:63:05:e6:b7:07:32:4d:93:82:56:67:7f:d3:
7a:ee:57:85:63:68:e5:6a:6f:24:51:03:b7:c0:ea:e8:5c:c0:
86:fc:0b:0d:6e:bd:a9:25:2e:e9:26:a4:3f:b3:5c:fa:8a:8c:
58:4e:12:fc:36:b6:ae:4a:7e:f3:74:c6:db:8e:b3:0d:8f:5e:
06:d1:0e:a1:b7:e9:17:48:9a:24:b6:b2:1e:7b:9e:20:a3:b4:
42:62:37:58:77:75:36:c1:54:b6:38:f7:54:74:e6:20:44:d8:
c3:9a:16:16:d0:7a:f6:31:8a:23:9a:3c:b4:43:70:a2:cd:be:
bb:2a:a7:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDhp0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjEwNzA4
MDMwMDAwWhcNMjMwNzA4MDMwMDAwWjAzMTEwLwYDVQQDEyg2YWE2N2YyMDgyYjQx
YzNkNDI5MDJlNjAyYzU1ZGYzMzNlN2NkOGZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsT+kBt5MRC1mZfI8nmCf8GDR1Sj8tfJB9AhHCO1xlzCTYlUS
d4o8+WIPe618Skmpc3eetvHsrQVS7z0F0uez9jp/Ig9SUOOUFcm4INgTel6iCgkA
6u4e3Y5r3JXQFqPJLZI/VIjbVLMxTG6KfA4UELyuKYSkJqVx3h1I61Gx1LznrqKM
/9Tbxjbdljo2qdu8mIbVtW7tqCpYyleoVyvDEUCHCgcjU+v8rV5UIPenE1HWMilW
0XkyH3vPWbfafqD/zKiizPD3sqpHaTvC9TNTITvehb5K+wi53NkEICuw2UKvwDzV
nCJm4PKYvc8001ICH1UTpedAUFEe2slHYiGf+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFBlhN8jTscEacxNKtGUnAlrL/4TMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlLzZhYTY3ZjIwODJiNDFjM2Q0MjkwMmU2MDJjNTVkZjMzM2U3Y2Q4ZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA6rSGDANBgkqhkiG9w0BAQsFAAOCAQEAUBCn/czDIhtN3rxa
a2ldi4I8mF12wgfs6icwT4xQzdRh9orFJEpRxmVmBJwGe2HePHRUkpbmckaQswxf
caVXNgY78McZYHKwNN/RaZeGEASt7/L/9eHaC1dG3KdCdL+8sHuvGRLXBGRyQwKy
kRPtzoTY07HSHpblhBnxrihYJ6/+ga5jBea3BzJNk4JWZ3/Teu5XhWNo5WpvJFED
t8Dq6FzAhvwLDW69qSUu6SakP7Nc+oqMWE4S/Da2rkp+83TG246zDY9eBtEOobfp
F0iaJLayHnueIKO0QmI3WHd1NsFUtjj3VHTmIETYw5oWFtB69jGKI5o8tENwos2+
uyqnYg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org