Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa
File: a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa (raw, json)
Hash identifier: FXg5jR5YSGUYSed4sEWnoXr+loQcHcIChWRKTeuopx8=
Subject key identifier: EB:84:1B:D8:61:00:31:0A:B2:21:BA:5B:B0:93:1F:F3:63:59:F5:B3
Certificate issuer: /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial: 0D2644
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa
Signing time: Wed 24 Mar 2021 14:35:06 +0000
ROA not before: Wed 24 Mar 2021 14:35:06 +0000
ROA not after: Tue 24 Mar 2026 14:35:06 +0000
asID: 264646
IP address blocks: 138.0.88.0/24 maxlen: 24
138.0.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861764 (0xd2644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
Validity
Not Before: Mar 24 14:35:06 2021 GMT
Not After : Mar 24 14:35:06 2026 GMT
Subject: CN=a2cdb3497caf4b395edece204fd6fbfcf4fddb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:83:3f:8c:e7:11:22:4f:64:e8:7b:fe:cc:
ea:31:54:9f:ab:63:bd:1c:06:25:1a:50:5a:96:19:
12:aa:1b:40:0f:58:84:de:6b:5d:ef:c8:94:74:07:
b6:42:09:8a:ac:15:20:69:1f:52:62:f5:65:a7:bd:
69:a0:bb:d5:73:e0:8c:b1:a0:7f:0a:4e:f1:56:2d:
67:07:3d:1d:71:71:47:ba:a7:99:1f:e9:83:ea:f9:
0a:d9:75:ee:e0:ad:82:d0:2c:f9:a1:71:8b:31:49:
e4:69:66:70:8b:4f:25:29:3f:6d:ed:d6:d9:cf:47:
84:41:ba:89:59:da:ab:1b:55:c0:d3:55:8e:16:80:
a2:73:5c:36:03:ff:ba:9a:3d:30:a3:fa:8b:5a:a1:
c7:dc:09:f2:c0:d5:d3:ce:9b:9f:15:67:8f:22:5b:
11:8e:e2:16:88:dc:eb:1c:cf:13:c6:fc:dc:a8:78:
31:07:44:b5:bc:9e:30:01:91:d4:79:79:1a:38:7c:
c0:6b:ec:6d:c3:f4:17:06:56:9e:4e:67:c1:38:c1:
db:3f:b5:4b:cb:18:f9:18:cc:bc:6f:85:ae:e7:6d:
b8:a2:c9:7a:2b:69:c4:bf:44:3c:ad:1e:8c:34:57:
63:d4:e1:ff:9c:92:3e:b4:14:e0:7b:21:70:35:1f:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:84:1B:D8:61:00:31:0A:B2:21:BA:5B:B0:93:1F:F3:63:59:F5:B3
X509v3 Authority Key Identifier:
keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/a2cdb3497caf4b395edece204fd6fbfcf4fddb29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.88.0/24
138.0.90.0/24
Signature Algorithm: sha256WithRSAEncryption
46:1c:91:56:5e:de:c5:b3:28:bc:58:65:61:a0:14:05:0d:9d:
fb:64:22:37:4e:a2:4a:84:cf:77:3c:98:d6:11:fa:d6:54:0e:
81:6f:2c:a8:cb:93:3e:d7:7b:e6:5e:2a:21:22:23:81:b4:93:
95:d7:dd:d4:04:b8:71:4b:34:d7:f3:83:3a:db:cc:7b:bf:5d:
31:93:c9:eb:38:52:1b:fc:18:3e:ca:9d:97:21:ab:92:40:9a:
57:27:d3:a4:52:32:b6:b9:61:6b:9a:fc:2a:84:f8:f8:93:d9:
50:f2:61:5e:e7:a3:ec:c6:4d:2c:ee:9c:4c:76:7c:50:23:34:
f9:b5:40:4d:ff:1a:72:0f:d6:17:82:1d:f2:3d:94:e3:94:e2:
61:d9:21:1d:a7:6e:b0:9f:31:e2:93:4c:49:36:ad:1f:26:58:
b4:3e:54:71:9b:73:f8:c7:0f:15:f9:ef:f4:22:49:3e:e2:c3:
80:aa:9f:6b:63:c0:0e:61:e2:d3:5c:48:46:90:e0:f1:b6:9e:
92:15:9a:22:a4:9d:8a:db:90:9f:6c:ee:d0:99:03:b5:7c:4a:
13:18:1d:6b:1e:1f:64:c9:cb:2c:f8:5b:7f:7d:35:a6:6d:f4:
a8:8d:c4:c7:5e:53:b4:78:b4:84:67:87:59:b6:f6:70:cb:11:
5b:db:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org