Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/85f9c2c2628204c71bfc1a5105c4074e2bf57c1a.roa
File: 85f9c2c2628204c71bfc1a5105c4074e2bf57c1a.roa (raw, json)
Hash identifier: a9eej1jQgNI8CKN3hbm7bw7t5xFHQqWM9iQih6npPqg=
Subject key identifier: 2F:52:D8:9F:41:F8:43:AF:F0:27:57:65:8A:DC:CE:EA:F2:98:BF:93
Certificate issuer: /CN=4245076a2cc4607485f913342504c58cdd14441f
Certificate serial: 0CC1C0
Authority key identifier: AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/85f9c2c2628204c71bfc1a5105c4074e2bf57c1a.roa
Signing time: Wed 24 Mar 2021 14:34:22 +0000
ROA not before: Wed 24 Mar 2021 14:34:22 +0000
ROA not after: Tue 24 Mar 2026 14:34:22 +0000
asID: 265703
IP address blocks: 138.36.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836032 (0xcc1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4245076a2cc4607485f913342504c58cdd14441f
Validity
Not Before: Mar 24 14:34:22 2021 GMT
Not After : Mar 24 14:34:22 2026 GMT
Subject: CN=85f9c2c2628204c71bfc1a5105c4074e2bf57c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:15:55:01:51:fd:db:67:16:43:c1:5c:c7:
1a:2f:c5:11:31:02:d5:a7:dc:61:68:d6:4e:0e:89:
8e:6e:82:1e:92:34:b3:f0:f4:a4:c1:6d:24:05:33:
48:46:69:88:48:06:30:ee:f6:1c:15:52:97:93:1b:
5d:90:5b:e3:d7:c2:4a:82:58:e1:0a:12:e0:95:26:
9d:bb:30:d0:a7:e9:b7:43:b1:3c:ce:f1:51:77:f8:
02:4d:6d:f9:b8:fb:cb:77:f0:3f:1a:09:4a:bb:c1:
50:c9:50:42:79:a1:23:aa:36:16:20:23:c7:af:b2:
8c:6d:d3:b0:22:36:9d:ee:18:f5:4b:d0:59:3d:a4:
81:32:51:9d:e8:75:19:b3:a0:92:b6:7a:52:f3:e8:
57:c3:e7:fa:fc:30:33:b1:fd:1b:3e:79:01:1e:bd:
ec:16:b0:aa:5b:cd:20:51:83:48:5c:a4:10:43:d0:
72:a2:d6:97:9c:82:56:9a:d0:bc:9d:52:a9:f0:39:
24:dc:5b:cd:c2:ba:fb:cd:a5:a0:54:43:d9:a5:29:
f4:80:31:64:0a:72:78:52:5b:11:05:ba:fc:c5:c8:
5e:84:73:fe:f1:39:af:b2:65:05:bf:e1:d9:36:4a:
4b:57:e0:e8:5c:4f:8f:1a:9d:4c:82:63:6d:96:0e:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:D8:9F:41:F8:43:AF:F0:27:57:65:8A:DC:CE:EA:F2:98:BF:93
X509v3 Authority Key Identifier:
keyid:AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/85f9c2c2628204c71bfc1a5105c4074e2bf57c1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:de:dc:b3:df:62:a9:9a:b2:54:2c:0d:04:b6:50:bc:d6:f1:
95:8c:61:e2:31:4d:b1:58:1a:8e:68:ef:35:3a:94:09:bc:31:
88:0d:34:36:61:d0:2a:33:bd:5d:f8:c4:19:9c:d1:0a:93:55:
fa:c7:eb:f8:d6:0a:c5:ef:e6:73:f7:ed:74:70:65:c2:4c:9d:
86:87:18:88:21:81:a9:2b:b6:9f:07:f0:27:d1:77:35:ee:33:
9a:dc:0e:93:ad:c8:bd:e6:39:f4:23:1e:c4:1a:76:cf:d8:6a:
10:8b:3f:42:d6:36:74:60:9e:c9:94:25:76:14:f4:f9:28:6e:
1c:36:76:61:19:80:9b:aa:1c:10:69:3d:ea:38:e1:86:57:88:
0f:c5:16:e2:59:6e:e0:08:2b:a4:a7:f7:e4:cd:8c:d7:87:ee:
6c:17:6c:57:5d:b2:c3:84:db:4b:fc:41:b3:59:21:69:6f:b2:
16:c4:0c:c4:ac:27:12:e7:47:a5:2d:f9:35:a3:28:25:97:e5:
41:ec:8c:f7:38:8a:a1:44:07:9f:34:5f:47:93:34:26:02:9f:
87:e4:62:df:30:ef:c5:5c:dd:4d:63:e5:43:28:52:0a:ea:6b:
98:47:13:21:11:af:a5:47:f0:68:c7:95:d6:dc:59:38:db:85:
59:58:50:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org