Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/c5eff67d1b1e029827d4c9d2342b6063fb293551.roa
File: c5eff67d1b1e029827d4c9d2342b6063fb293551.roa (raw, json)
Hash identifier: 4qAUj5NwnOOJKa3JVeeYyM30dCV9/YhRm8mrb9pVTdE=
Subject key identifier: 0E:5B:B6:3F:1B:00:AD:7C:35:F6:79:95:D9:30:90:57:38:26:C1:0C
Certificate issuer: /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial: 0DC132
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/c5eff67d1b1e029827d4c9d2342b6063fb293551.roa
Signing time: Wed 24 Mar 2021 14:33:50 +0000
ROA not before: Wed 24 Mar 2021 14:33:50 +0000
ROA not after: Tue 24 Mar 2026 14:33:50 +0000
asID: 61506
IP address blocks: 138.204.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 12 Jan 2024 19:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901426 (0xdc132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Validity
Not Before: Mar 24 14:33:50 2021 GMT
Not After : Mar 24 14:33:50 2026 GMT
Subject: CN=c5eff67d1b1e029827d4c9d2342b6063fb293551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:47:50:07:bc:dc:82:9e:e3:6d:6f:92:b6:
73:4e:02:fd:88:b4:e9:fa:bb:aa:4c:29:f5:18:b5:
32:d4:57:9e:08:c3:3c:97:4d:42:a4:cc:d5:91:83:
68:bf:34:8a:7f:a7:32:e4:eb:0d:66:5e:9d:f7:ef:
a2:ec:f9:b2:43:24:3e:a0:33:0e:ee:95:31:a6:21:
6a:01:96:bf:10:ba:cc:e2:6c:d5:e9:45:ba:6a:3e:
0c:48:98:f1:3a:ad:a4:8c:ef:09:4d:58:6a:2f:78:
ba:ce:c1:a2:4a:be:4d:3b:22:fa:a9:29:3c:6b:ac:
3a:70:af:c0:97:da:db:b7:94:0c:d5:e4:f9:e3:5a:
f5:52:c5:8e:fb:30:2d:da:cf:fa:06:af:db:88:4b:
d6:ad:80:c1:19:5c:f8:6b:c9:cb:94:e3:1d:b7:bb:
05:54:0f:81:46:d0:f6:0c:34:f1:82:9f:02:cb:7a:
ac:5c:62:8f:df:f0:fa:f9:1a:f5:8e:4b:36:88:41:
70:b2:bc:61:42:19:9c:08:c9:bd:42:83:27:9a:dc:
b1:1d:ef:62:3c:60:27:27:d6:7c:e8:45:e3:6a:0d:
c7:44:25:e7:2b:65:f1:03:a9:b6:e5:d8:13:ce:04:
18:a6:b9:18:c1:4b:49:3c:c0:3a:77:96:2a:3f:61:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:B6:3F:1B:00:AD:7C:35:F6:79:95:D9:30:90:57:38:26:C1:0C
X509v3 Authority Key Identifier:
keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/c5eff67d1b1e029827d4c9d2342b6063fb293551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.228.0/22
Signature Algorithm: sha256WithRSAEncryption
95:c1:f4:ff:9e:62:4f:83:ab:41:1d:91:73:bf:6e:0d:e4:93:
2f:08:fd:06:7f:03:2b:13:25:f1:34:1d:3d:46:01:9d:04:6e:
80:50:ef:53:e2:f7:1c:6c:56:1d:36:77:7a:9e:83:6d:b7:9a:
94:64:47:34:f9:05:23:f2:bf:95:02:b1:be:ab:51:e4:b5:d5:
16:b8:66:9b:62:83:60:a1:b4:2a:c2:0c:ea:47:c5:a0:fa:f5:
69:c5:b6:8b:5c:03:79:8c:10:b9:72:3e:5a:f3:46:23:29:35:
bb:6f:05:c9:81:56:93:ac:af:9c:32:b1:e5:ae:eb:69:30:25:
96:f3:d9:5e:83:e5:3c:56:2d:9e:cc:03:a7:05:35:9c:03:ee:
1c:b6:8f:c7:2a:bd:93:7b:a7:e9:c8:d3:f0:2d:d6:ba:e8:2c:
b3:ab:12:1a:76:2e:dc:51:cb:eb:64:69:91:4c:44:1d:2e:49:
05:95:3e:d9:5d:72:43:66:8a:9b:40:7f:ae:92:ed:b3:7b:11:
04:1e:c4:7f:7d:49:1e:3b:36:22:c7:12:95:6a:1f:4d:0b:1f:
8f:a3:0d:ab:a1:b5:da:fa:e4:ff:ef:66:3e:16:3b:a1:96:66:
bf:a0:e8:a4:73:d6:ee:d7:ea:98:c3:dc:91:25:05:9b:1a:87:
44:a6:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 22:43:43 2024 by rpki-client on console-fra.rpki-client.org