Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/a2d4b0c306c41438f9f84d887adc948dc6edd37e.roa
File: a2d4b0c306c41438f9f84d887adc948dc6edd37e.roa (raw, json)
Hash identifier: zBPgGiRF6Wk+kWBzd5JEHTCmISAcIoj/k8bF9b/WMq4=
Subject key identifier: 8A:2A:3C:3C:E3:21:E6:12:0E:4B:B0:95:EC:40:C6:38:B5:AE:01:9A
Certificate issuer: /CN=8fd397f8d47b3a369017afd14e695229eb571750
Certificate serial: 1C118B
Authority key identifier: 45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/a2d4b0c306c41438f9f84d887adc948dc6edd37e.roa
Signing time: Wed 05 Jul 2023 12:33:39 +0000
ROA not before: Tue 04 Jul 2023 12:33:37 +0000
ROA not after: Sat 05 Jul 2025 12:33:37 +0000
asID: 265755
IP address blocks: 138.117.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839499 (0x1c118b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd397f8d47b3a369017afd14e695229eb571750
Validity
Not Before: Jul 4 12:33:37 2023 GMT
Not After : Jul 5 12:33:37 2025 GMT
Subject: CN=a2d4b0c306c41438f9f84d887adc948dc6edd37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:49:b3:6d:57:73:3b:cc:92:a0:84:b3:76:
e4:ba:e2:99:85:b1:35:4a:09:fe:5e:af:8d:a4:34:
1f:ae:67:20:77:7b:24:00:82:c3:5e:b1:10:59:0a:
22:57:c4:a2:6f:a0:3f:67:1a:f7:b4:2f:c6:2c:08:
e5:c4:cc:2e:bd:77:cf:10:68:e4:ef:80:13:00:5a:
8e:e1:10:d5:12:8f:48:f0:9c:31:b1:7c:27:b8:9d:
2c:d0:90:57:27:3c:20:cf:1d:b0:15:4d:a5:4c:8e:
90:77:7d:8b:db:c2:6a:db:de:d1:a0:0f:3d:dd:71:
d8:ec:cd:0e:1a:ad:7a:f1:03:3f:15:f8:69:bd:9b:
06:91:eb:e7:8d:39:19:c4:20:8f:0f:0e:b3:55:4a:
41:db:c8:e5:45:52:d1:88:5e:b0:3f:c9:e1:48:b4:
b0:4d:8e:23:76:c6:55:ba:67:6b:2a:4c:d2:b5:2a:
bf:91:c0:e2:4f:37:a5:a0:b6:ff:85:04:62:d5:6c:
48:1e:c4:09:ec:aa:95:e1:6c:c1:b5:70:25:45:99:
5f:15:28:d0:37:46:68:9d:0b:59:b4:3e:96:e3:05:
41:c6:37:5b:fa:b4:d6:67:0b:64:08:9d:c8:7f:27:
d7:08:a2:09:9c:4d:33:a8:1b:a0:7d:2a:f6:87:ea:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2A:3C:3C:E3:21:E6:12:0E:4B:B0:95:EC:40:C6:38:B5:AE:01:9A
X509v3 Authority Key Identifier:
keyid:45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/a2d4b0c306c41438f9f84d887adc948dc6edd37e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0d:e0:af:cf:42:a0:c6:6a:7f:8b:ec:28:7b:27:13:d1:04:
b4:9b:a1:bd:28:ac:1d:9c:ee:10:fd:cf:5e:7e:27:7b:d3:f8:
08:df:30:33:18:7e:a3:ed:aa:2f:46:f4:d4:c1:db:c3:ef:d6:
7b:c6:9d:6c:50:23:f8:0b:89:fc:44:40:2d:90:ac:ba:fa:89:
7e:83:3e:a5:aa:c9:1b:f1:e0:7e:f1:52:4e:b6:dc:38:cf:f2:
9d:ac:cc:1e:8e:6d:f4:52:83:58:df:d3:98:d3:bc:77:4a:bd:
97:ed:83:7c:a3:d0:77:a2:89:87:ae:ae:49:84:01:2d:04:a7:
59:53:3c:67:ac:1e:95:78:21:82:00:89:a6:48:5f:28:20:d1:
0e:83:5e:75:0f:99:0c:47:f4:27:7f:6c:91:84:ca:42:aa:b8:
b2:b7:a8:4d:55:3d:97:65:1e:d0:ed:89:9a:80:2d:a5:2a:70:
33:1e:e1:1b:63:a5:09:49:4d:29:6c:ee:0d:24:64:f1:f9:2a:
42:b5:e7:93:07:5a:c6:89:4e:e5:19:16:d8:b3:26:e3:18:32:
36:da:4a:62:05:17:6a:3e:b1:47:6f:a7:9e:9a:99:4d:42:c1:
85:b0:d9:07:48:e0:33:cd:36:1a:3c:fc:30:18:7e:7e:38:99:
1e:5e:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 20:54:08 2023 by rpki-client on console-ams.rpki-client.org