Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/e19bdeef80da48d45b4559c254517b85c73015d6.roa
File: e19bdeef80da48d45b4559c254517b85c73015d6.roa (raw, json)
Hash identifier: r7jKtymxNYjYAAh10UFkRF1HdhjUq6+6CHCuPXlsfFk=
Subject key identifier: E5:0B:5A:B2:85:FD:F6:93:B7:7F:83:26:F7:9D:A8:C0:0E:9C:4F:42
Certificate issuer: /CN=d590b2b0a721f48828604c97f912f283f0658e8a
Certificate serial: 0DB41C
Authority key identifier: FE:2A:E8:40:FB:E3:9B:2F:13:12:00:F9:6F:D9:6C:1A:FF:7E:9D:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d590b2b0a721f48828604c97f912f283f0658e8a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/e19bdeef80da48d45b4559c254517b85c73015d6.roa
Signing time: Wed 24 Mar 2021 14:29:46 +0000
ROA not before: Wed 24 Mar 2021 14:29:46 +0000
ROA not after: Tue 24 Mar 2026 14:29:46 +0000
asID: 52367
IP address blocks: 138.117.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 15:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898076 (0xdb41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d590b2b0a721f48828604c97f912f283f0658e8a
Validity
Not Before: Mar 24 14:29:46 2021 GMT
Not After : Mar 24 14:29:46 2026 GMT
Subject: CN=e19bdeef80da48d45b4559c254517b85c73015d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:ad:54:a6:20:a3:e2:b9:e2:6c:7a:ab:a6:
98:f0:64:ec:fc:54:5f:5e:26:ab:f5:ff:f5:bc:96:
c6:eb:1b:5d:d4:85:b2:70:a8:30:24:45:35:06:8b:
d8:0c:7a:bb:c4:6d:ec:67:80:c1:bd:79:c8:5f:d4:
3d:81:93:75:58:b5:ff:b0:3c:76:b4:5d:07:5c:d9:
f6:f0:dd:d8:be:63:9d:5d:b9:8b:91:60:5a:25:b3:
d9:0c:33:f9:bd:e3:be:1d:d8:f3:d3:63:ed:a1:12:
cd:87:3e:f4:37:52:14:57:95:f3:23:b3:07:06:11:
61:d6:c3:65:b0:b1:a6:a8:44:a1:58:3f:8f:9b:20:
9a:38:f8:68:57:f6:7d:56:c1:9a:3a:87:44:5e:07:
33:17:77:5f:e2:07:fb:56:5d:ee:46:bd:6e:d3:34:
43:08:95:94:96:e2:7d:9a:25:6d:f9:85:29:5e:67:
27:3a:e8:f2:c4:5c:c1:c8:f7:a3:56:5a:87:74:24:
31:58:f4:ad:f8:b8:5a:e8:d5:76:cf:12:b2:4b:8b:
ed:a6:df:02:8c:50:e4:27:2c:59:29:b4:7d:94:11:
b0:77:d8:c4:c2:80:52:94:04:13:6d:b4:f9:72:6d:
43:88:f2:be:52:62:bd:17:34:98:1d:da:b4:7e:52:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:5A:B2:85:FD:F6:93:B7:7F:83:26:F7:9D:A8:C0:0E:9C:4F:42
X509v3 Authority Key Identifier:
keyid:FE:2A:E8:40:FB:E3:9B:2F:13:12:00:F9:6F:D9:6C:1A:FF:7E:9D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d590b2b0a721f48828604c97f912f283f0658e8a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/e19bdeef80da48d45b4559c254517b85c73015d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/d590b2b0a721f48828604c97f912f283f0658e8a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:eb:44:74:5f:60:06:e7:d3:3b:cb:07:d2:36:ed:9a:fc:6c:
59:29:6c:ff:23:a6:bf:60:02:5f:08:0a:4f:8a:f1:b2:70:2c:
3b:32:c8:d4:05:17:e9:51:5c:cc:ff:4d:50:74:6a:76:15:40:
22:e1:55:bf:6c:71:00:e6:28:12:94:af:aa:35:02:a9:79:75:
1b:13:bb:4b:2f:cd:a1:f5:a3:16:ea:63:45:59:5b:56:62:4d:
39:3e:af:22:7d:77:9e:4d:5b:62:6c:29:69:52:45:74:86:76:
c4:4a:6b:61:9a:93:4d:43:5b:ff:7a:02:22:3c:f2:52:c6:8a:
ee:d3:31:96:21:3f:f2:6c:52:f2:28:66:6a:00:59:10:9c:bc:
92:18:c1:17:19:e9:75:44:26:9c:9f:90:f3:99:59:94:e9:54:
d9:8d:78:fe:65:c3:f2:34:40:a6:a1:d9:dd:ba:1b:3b:a3:a2:
ca:b1:da:f5:66:d1:a3:80:94:93:63:59:ee:63:64:55:9e:20:
ac:58:68:c9:d0:c9:12:45:85:75:47:1d:f6:c4:61:f9:03:3b:
4b:15:42:2d:99:0f:08:26:1e:94:b8:8d:13:53:4d:5a:24:c3:
51:72:b4:2c:3e:d4:c7:28:72:ce:ad:63:3f:0e:de:ae:a0:da:
5c:d0:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 20:26:33 2024 by rpki-client on console-fra.rpki-client.org