Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/e95eb56431d7cd2cb46d3f77e00711a70822adbe.roa
File: e95eb56431d7cd2cb46d3f77e00711a70822adbe.roa (raw, json)
Hash identifier: oUAZekaIsQzu7uBqY62w22lObOhrn5p26ZIIAcq34xI=
Subject key identifier: 85:04:C0:AA:9C:78:5D:32:13:76:80:30:48:CD:21:BD:EA:83:9C:56
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 0B87A7
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/e95eb56431d7cd2cb46d3f77e00711a70822adbe.roa
Signing time: Wed 24 Mar 2021 14:31:58 +0000
ROA not before: Wed 24 Mar 2021 14:31:57 +0000
ROA not after: Tue 24 Mar 2026 14:31:57 +0000
asID: 263186
IP address blocks: 170.210.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755623 (0xb87a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Mar 24 14:31:57 2021 GMT
Not After : Mar 24 14:31:57 2026 GMT
Subject: CN=e95eb56431d7cd2cb46d3f77e00711a70822adbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:6a:d3:2a:e4:63:e9:ec:49:68:eb:f4:fa:
6a:63:05:b4:68:c0:96:03:72:cc:2a:6a:60:06:81:
70:fb:38:d7:3f:11:77:b4:d9:7b:4e:b3:71:31:bb:
3d:79:b7:d9:1e:bc:78:fa:61:0d:b9:fe:e3:80:6d:
d9:f2:be:eb:1c:4d:f2:01:77:2e:b8:0a:9f:16:30:
cf:d7:b9:d3:3d:7d:07:67:32:db:ab:16:33:9e:51:
fa:3c:ef:f8:b8:a6:01:9c:b0:a5:8b:56:85:49:ba:
65:e1:aa:29:b6:6f:4c:f7:a2:a8:15:c9:e3:15:10:
86:e8:f7:e7:bf:8c:d0:a5:da:db:5a:45:f1:74:e8:
ca:be:b3:69:9c:02:3c:9c:68:1b:b0:a7:35:03:46:
6f:a2:44:60:6b:f5:d0:8f:35:80:b6:da:93:a5:34:
8e:2a:a6:f6:c9:b7:cf:2c:ca:c2:40:f7:a4:67:56:
47:07:44:82:67:13:39:84:d9:98:7b:67:0b:2b:88:
90:35:bf:1d:8e:9b:6b:a4:7d:5b:e1:aa:f7:7b:bb:
34:89:87:78:d3:01:1c:e5:33:f0:81:44:c3:6a:90:
dd:86:7c:fd:1f:a3:3f:f5:5b:35:0c:4c:64:cf:4f:
e6:80:77:7a:0c:72:6e:a0:3c:b6:c4:eb:17:de:37:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:C0:AA:9C:78:5D:32:13:76:80:30:48:CD:21:BD:EA:83:9C:56
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/e95eb56431d7cd2cb46d3f77e00711a70822adbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.52.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:73:b8:f6:33:6a:4e:9f:2a:a4:80:2e:ea:59:e9:d2:d1:6a:
72:4e:c4:08:28:15:3d:4b:5f:c7:90:ec:8f:71:1a:bd:80:84:
08:86:ce:22:ad:03:65:13:5d:11:52:b0:fa:99:45:45:4e:67:
30:b7:6e:dc:58:9d:ec:20:03:77:85:c1:0e:4d:ad:bc:d3:a2:
d8:0d:77:f7:7b:aa:92:33:32:4b:13:e6:db:c6:77:14:b4:13:
99:29:f3:7b:ee:55:dc:e2:f7:13:dd:c5:22:9e:67:05:96:5c:
d2:19:51:ad:f2:c1:69:d0:03:63:71:cd:d3:07:1e:07:a9:45:
4a:f8:c6:f2:58:3d:89:be:89:4f:f3:c5:87:eb:08:ec:3f:93:
f7:cb:c9:b0:b6:fe:26:0f:66:8d:7a:98:77:aa:61:37:62:16:
9a:5b:5e:a3:d0:ee:c6:e3:b2:ef:e4:e5:99:a4:15:0a:2f:fe:
67:01:88:d1:50:b7:3c:e7:b3:3d:28:31:f4:cc:23:d5:5e:45:
15:e9:8d:ef:2e:b1:fd:f4:a9:c5:3d:73:fb:07:39:4d:c6:ca:
e0:97:15:46:8f:1f:3b:5f:b4:35:32:9b:14:1a:14:52:c6:e6:
e3:3d:10:21:c4:2f:9f:24:ce:8c:ba:1a:ff:2b:a8:cf:fb:b7:
65:bd:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org