Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa
File: 6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa (raw, json)
Hash identifier: FY5ZVM8BzILURLkYIH5I5Y7sQkN691FoJ0q4hsV/qgg=
Subject key identifier: 44:C7:FD:60:9C:5B:4C:F1:89:6D:4C:B6:30:3B:19:73:83:B1:B2:3A
Certificate issuer: /CN=f141eb6e9ac20adf6f655eada96814f65d5beedd
Certificate serial: 04A8
Authority key identifier: C9:17:37:79:CF:2F:5F:0B:67:61:D5:D6:30:66:F7:B8:31:7D:A3:DE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f141eb6e9ac20adf6f655eada96814f65d5beedd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa
Signing time: Wed 04 Aug 2021 12:54:37 +0000
ROA not before: Wed 04 Aug 2021 03:00:00 +0000
ROA not after: Fri 04 Aug 2023 03:00:00 +0000
asID: 27750
IP address blocks: 138.59.12.0/22 maxlen: 22
200.0.204.0/22 maxlen: 22
2001:1348::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f141eb6e9ac20adf6f655eada96814f65d5beedd
Validity
Not Before: Aug 4 03:00:00 2021 GMT
Not After : Aug 4 03:00:00 2023 GMT
Subject: CN=6b73c86f1b7a6a80c24a3d19b46457abd3df8acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:6b:f1:2e:33:39:5e:55:55:b5:9a:02:8c:
16:b1:e6:99:7a:a4:a2:96:eb:72:81:ba:0f:5c:18:
67:3c:18:4d:de:d8:ae:76:4c:c2:d7:7b:5e:86:15:
6e:4b:57:4f:97:dc:37:4f:b1:ea:13:00:ad:c1:bd:
fc:6f:3f:35:7b:fe:39:b8:f1:4c:91:43:6d:9d:39:
60:76:cc:fd:95:0e:29:53:ce:14:eb:02:e5:d2:b3:
14:d8:f6:40:52:83:3d:54:c2:2c:ea:32:8e:67:2f:
45:56:df:49:af:ff:d1:af:f4:45:0c:f1:6d:8e:dc:
f0:c5:49:d7:1b:49:70:08:d9:f7:2b:0d:8c:64:a8:
9a:4a:ac:57:55:fc:18:38:a2:7b:e8:25:cb:98:4b:
44:95:ce:3d:4f:15:c8:ee:17:43:57:1e:c5:d6:5a:
1f:79:83:51:9d:e2:a3:80:54:9a:ec:27:01:1c:76:
3c:c6:bb:d5:70:22:0c:dd:74:e4:b3:97:3c:a9:74:
40:23:57:26:ee:90:58:6f:f4:50:5e:34:03:d0:99:
8b:75:fd:b7:eb:03:e9:06:d6:3e:f6:0b:4c:a9:78:
80:75:2b:c2:66:fe:1d:ff:7c:e7:dd:5f:54:81:4a:
2d:a5:ad:72:70:78:08:5e:92:ef:1d:3a:ef:f8:c6:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:FD:60:9C:5B:4C:F1:89:6D:4C:B6:30:3B:19:73:83:B1:B2:3A
X509v3 Authority Key Identifier:
keyid:C9:17:37:79:CF:2F:5F:0B:67:61:D5:D6:30:66:F7:B8:31:7D:A3:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f141eb6e9ac20adf6f655eada96814f65d5beedd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/6b73c86f1b7a6a80c24a3d19b46457abd3df8acf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/500e6364-fa49-4f1c-a9df-0de990487523/f141eb6e9ac20adf6f655eada96814f65d5beedd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.12.0/22
200.0.204.0/22
IPv6:
2001:1348::/32
Signature Algorithm: sha256WithRSAEncryption
72:1d:f0:3b:a9:2f:fa:f3:71:3b:41:80:0d:50:3a:ac:d3:7f:
d5:51:65:12:aa:d3:c1:9c:f2:75:a3:45:c6:d9:98:60:55:68:
ea:d0:a8:a9:ab:39:90:2d:ba:bb:d2:ae:c0:b7:78:ef:e7:18:
60:9b:49:97:93:28:b1:56:16:ce:74:42:c2:d8:96:b7:62:68:
40:53:3e:a7:39:15:ec:9c:be:0b:ea:85:b7:a5:d0:73:00:19:
39:ae:51:5a:b2:cf:c5:73:07:5d:02:fc:a0:5a:c5:1c:64:3b:
f6:75:d6:9d:9f:da:5a:d4:bf:f5:09:87:ff:ca:7f:38:cd:55:
83:5e:6d:cf:38:81:80:97:5b:28:6e:e7:56:23:18:2d:e8:22:
1c:d9:21:fb:3e:31:61:cb:19:9d:87:01:8b:c3:94:d1:8b:32:
76:6b:3a:36:9d:9e:11:50:de:c3:16:1d:4a:1b:d7:55:b6:fe:
13:d0:93:1b:77:cb:af:7e:14:5d:46:11:ad:4f:e8:07:80:c2:
0a:7c:9b:98:79:92:b9:42:b2:65:3b:e9:ed:23:65:31:79:59:
fb:e3:71:4c:59:8c:02:07:84:44:f4:fd:ae:ee:3a:59:5d:98:
0f:d2:2f:6f:45:47:d1:b1:b4:8a:d9:b6:be:e6:95:ef:f5:d5:
5c:1f:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org