Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/05b052553c01503c24b22099e97f53e5422b34c2.roa
File: 05b052553c01503c24b22099e97f53e5422b34c2.roa (raw, json)
Hash identifier: gUijgbf+sB5gke6qBU82aph6Kg+iqMk9+GZMs4E4ZoI=
Subject key identifier: BB:5F:48:DD:7C:8C:17:56:30:E3:02:22:C0:73:E1:C1:B0:42:6A:7D
Certificate issuer: /CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Certificate serial: 0E18FA
Authority key identifier: 81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/05b052553c01503c24b22099e97f53e5422b34c2.roa
Signing time: Wed 24 Mar 2021 14:32:11 +0000
ROA not before: Wed 24 Mar 2021 14:32:11 +0000
ROA not after: Tue 24 Mar 2026 14:32:11 +0000
asID: 61508
IP address blocks: 138.219.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923898 (0xe18fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Validity
Not Before: Mar 24 14:32:11 2021 GMT
Not After : Mar 24 14:32:11 2026 GMT
Subject: CN=05b052553c01503c24b22099e97f53e5422b34c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:b2:b2:fe:97:84:bb:57:e6:44:a2:50:b4:
23:eb:6d:cc:86:9a:3f:fa:60:e6:54:4d:32:3b:a5:
49:cf:62:b4:46:59:3c:4a:f5:55:dd:e9:ab:30:90:
cd:e3:ad:b9:4b:39:26:66:46:9d:0e:5b:cd:87:7a:
25:b0:ed:04:a3:2d:e5:01:2d:28:37:5b:9c:f1:df:
cc:55:91:2e:c3:a9:f7:db:58:d9:54:ac:cb:bc:7d:
50:09:10:ac:c4:ec:2b:2c:35:9e:cb:56:de:93:6f:
3b:b8:4a:cd:72:53:74:f3:65:48:c8:a1:ac:c6:dc:
2d:5e:ff:57:28:5d:d1:c8:e9:49:21:dd:d4:3b:e7:
5d:94:4d:c7:34:68:b7:31:34:8b:8b:b8:af:f7:20:
13:9f:70:5c:4f:27:08:4f:32:25:12:d6:e9:e8:90:
87:c0:7d:4d:17:3e:75:a2:8c:ae:04:f1:9d:ff:2d:
4d:69:92:fc:9a:bd:c6:6e:94:49:1b:9e:e7:ae:df:
f4:00:3e:48:11:21:a0:75:99:11:72:05:35:ca:b2:
1b:05:6f:85:22:23:00:8a:79:48:44:93:9b:36:9a:
e4:61:08:41:30:b5:f1:e5:18:3a:96:f6:22:39:fc:
2e:56:8c:a8:07:a4:74:e0:a4:22:3f:6d:ab:2f:f9:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:48:DD:7C:8C:17:56:30:E3:02:22:C0:73:E1:C1:B0:42:6A:7D
X509v3 Authority Key Identifier:
keyid:81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/05b052553c01503c24b22099e97f53e5422b34c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.60.0/22
Signature Algorithm: sha256WithRSAEncryption
24:e3:46:52:52:a3:eb:58:36:12:c5:09:3f:8b:1a:08:48:47:
92:6e:e1:68:48:d7:49:b1:fd:5f:cb:76:07:89:1a:55:c0:ca:
5a:ff:da:6d:42:6e:ce:a2:fb:f2:bf:da:0a:f6:aa:fa:77:c7:
cd:b7:19:81:eb:d8:64:f8:b8:57:04:ea:c7:2e:3f:03:b0:e6:
b0:2e:04:46:2c:91:5f:2b:d4:48:bf:c1:80:9a:60:b7:37:22:
dd:24:b8:37:f6:58:54:19:19:25:89:16:8f:86:dc:d9:25:57:
be:61:8a:dd:d1:59:ab:e7:62:1e:b6:62:7c:b5:c1:75:1d:be:
04:0e:71:0c:0e:cc:0a:34:69:33:7b:05:65:3d:55:e7:95:b4:
61:22:52:e9:65:9f:7a:d8:7a:94:bd:81:b4:1f:dd:67:8f:d4:
7e:b1:1e:28:c7:3e:17:6d:09:0f:de:fc:03:10:fe:10:4d:c4:
78:b5:9d:2c:f0:77:45:77:99:b5:e4:dc:30:fb:45:54:66:41:
be:cf:24:39:75:1e:5b:e9:fa:f2:75:45:c7:32:c1:26:e9:b0:
08:37:c0:9c:a0:24:98:6b:15:85:57:8c:05:ae:04:c8:e7:36:
71:a1:85:0c:81:77:dc:32:f5:e6:29:fd:0b:11:35:8a:31:51:
4c:a2:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org