Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/e4d51ee730c7dfdae7d2431062bf063c2a258536.roa
File: e4d51ee730c7dfdae7d2431062bf063c2a258536.roa (raw, json)
Hash identifier: 2oFXIeElqcY8O3U+tAFS4VRVaLQEJUTtI/5zd0F9vuc=
Subject key identifier: 8C:D4:AC:93:4A:C1:F8:17:04:72:30:77:E7:CD:46:2A:9D:99:43:22
Certificate issuer: /CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Certificate serial: 1219F6
Authority key identifier: 50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/e4d51ee730c7dfdae7d2431062bf063c2a258536.roa
Signing time: Tue 03 Oct 2023 08:30:06 +0000
ROA not before: Mon 02 Oct 2023 08:30:06 +0000
ROA not after: Wed 01 Oct 2025 08:30:06 +0000
asID: 263740
IP address blocks: 138.99.36.0/22 maxlen: 22
143.137.164.0/22 maxlen: 22
161.0.0.0/19 maxlen: 19
168.205.160.0/22 maxlen: 22
170.246.52.0/22 maxlen: 22
186.65.112.0/20 maxlen: 20
2803:6c00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jan 2024 19:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186294 (0x1219f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Validity
Not Before: Oct 2 08:30:06 2023 GMT
Not After : Oct 1 08:30:06 2025 GMT
Subject: CN=e4d51ee730c7dfdae7d2431062bf063c2a258536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:e2:70:9e:73:43:57:b3:d3:1e:76:a3:5c:
ef:cb:16:54:a5:3d:0f:57:a7:ea:d4:28:ef:1f:e1:
3e:67:3d:de:65:73:7e:e3:4d:28:31:28:d7:ad:f0:
21:2e:4b:27:16:5a:7d:0b:b2:f1:79:c0:e4:7b:a5:
45:8b:6c:1f:a9:1b:60:22:0b:16:5c:b4:d6:97:0c:
0b:b8:53:10:08:8d:92:7d:ab:97:98:46:07:c9:9c:
6c:6f:e5:e3:39:0d:86:b4:2d:2a:b6:ad:a0:53:a7:
61:4f:e9:12:72:e1:38:0d:4f:ad:a8:59:2e:8f:35:
20:71:ca:9a:b1:04:9f:38:39:92:75:e1:69:73:57:
61:2e:e1:5c:f5:f2:48:d5:7a:62:4e:1b:bf:49:91:
54:31:6d:30:93:73:16:8c:99:ac:7c:b6:df:37:02:
d6:d4:24:17:98:e0:31:e5:f2:c7:ef:d3:fd:1e:19:
1e:c7:f2:80:6c:27:06:c6:dd:fb:f5:e9:fc:fa:c2:
d1:ed:f4:3c:84:8d:4f:e2:61:8d:d7:e3:5d:a1:b1:
82:81:ab:e7:67:97:14:46:9d:9c:87:f0:91:2a:6a:
0e:7e:29:57:f0:59:69:aa:a6:51:6e:2a:04:d2:ea:
c5:92:59:69:1c:49:24:6a:18:5a:1b:07:04:f9:e3:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:AC:93:4A:C1:F8:17:04:72:30:77:E7:CD:46:2A:9D:99:43:22
X509v3 Authority Key Identifier:
keyid:50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/e4d51ee730c7dfdae7d2431062bf063c2a258536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.36.0/22
143.137.164.0/22
161.0.0.0/19
168.205.160.0/22
170.246.52.0/22
186.65.112.0/20
IPv6:
2803:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
ec:49:e9:d9:0a:0c:ef:1f:71:44:8c:b4:b0:b6:99:98:ec:c8:
28:c3:69:1c:cd:73:22:9c:1d:1c:8e:00:ee:f8:70:a9:b9:f0:
c3:23:a7:ac:aa:48:f8:38:8b:a6:d6:6e:62:a9:ae:c6:98:a0:
2e:f2:62:10:bf:96:16:e2:c9:57:0f:47:f9:0f:ad:84:84:09:
8c:42:68:33:f1:20:58:56:cd:45:55:fb:2a:ad:df:2c:cc:8c:
90:74:4e:28:ed:fa:c2:b2:b0:aa:48:8a:52:3c:42:15:83:ec:
6e:be:df:0a:c4:92:10:6c:ad:c0:8f:a1:f5:43:8b:6d:2d:88:
c9:f4:f7:78:d9:c1:b4:3c:22:48:8d:d1:31:4b:52:88:8a:a5:
4e:b5:58:11:52:3b:30:c5:4c:cf:f3:0f:75:b1:1e:8b:52:11:
d0:cb:af:a0:b7:f8:73:92:9f:82:9d:d3:5e:4d:c6:f7:a0:4b:
03:ff:ec:d0:ee:87:8e:c5:ab:40:52:c5:77:1d:07:ee:d3:44:
bd:6d:ea:3a:a0:2f:4f:aa:2c:31:ba:fa:a9:b6:c5:ff:a5:f0:
c3:e9:f7:67:4e:af:b9:ea:ba:7f:61:44:47:b9:95:ce:25:99:
bd:52:31:e2:67:b2:1e:e3:0d:d8:86:31:5a:0b:b9:56:9b:71:
3c:5b:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 23:51:21 2024 by rpki-client on console-fra.rpki-client.org