Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/b5615ee7b744fc1faa52268c8aa89fad3890f5f9.roa
File: b5615ee7b744fc1faa52268c8aa89fad3890f5f9.roa (raw, json)
Hash identifier: 7B5wkfwqpahZu4ApeGg0ymLufGv5rewGG83vX791NIE=
Subject key identifier: B4:B2:CB:2B:C0:C8:27:FC:68:7C:C1:A5:55:25:45:E8:8E:BA:F0:29
Certificate issuer: /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial: 02607A
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/b5615ee7b744fc1faa52268c8aa89fad3890f5f9.roa
Signing time: Wed 24 Mar 2021 14:35:02 +0000
ROA not before: Wed 24 Mar 2021 14:35:02 +0000
ROA not after: Tue 24 Mar 2026 14:35:02 +0000
asID: 262186
IP address blocks: 131.221.40.0/24 maxlen: 24
131.221.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155770 (0x2607a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Validity
Not Before: Mar 24 14:35:02 2021 GMT
Not After : Mar 24 14:35:02 2026 GMT
Subject: CN=b5615ee7b744fc1faa52268c8aa89fad3890f5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:43:c4:b2:2c:aa:be:80:1e:8c:6e:a1:1b:
1f:7d:ce:19:48:87:8a:e3:18:d3:0f:dd:f3:e5:5b:
be:94:5f:a1:e1:11:c1:1c:cf:83:75:dc:42:47:da:
72:a2:0f:dd:97:ea:8d:8e:60:0a:7a:96:d7:71:8d:
49:38:fc:7d:49:28:ba:40:c2:0b:18:04:54:1a:27:
2c:21:d3:6d:c9:ee:37:e9:47:4e:f2:7b:c1:ce:df:
48:89:6b:30:11:16:08:8b:c0:4d:9d:59:e3:e9:76:
65:6a:8f:32:27:e3:2b:af:5b:59:2f:92:56:43:1d:
81:0e:78:75:db:96:aa:3f:d9:67:ab:a6:90:5d:77:
46:d9:d2:4f:d8:07:44:6f:08:52:37:ab:b8:1c:9f:
4d:36:16:bb:1e:a0:76:18:86:5e:7c:f3:77:66:8b:
fb:4b:cf:10:70:01:b5:9d:72:b7:2a:42:40:19:03:
a2:fa:b2:af:97:3f:8d:14:2f:6d:dc:2b:75:b1:55:
08:62:57:f8:5e:8d:83:7f:a2:b9:a8:76:b3:e0:c8:
e1:a3:41:fe:3d:f2:8a:16:9c:ad:3c:4d:2d:26:fd:
94:99:a8:8a:0d:71:bb:82:a4:76:c3:b6:72:b3:6d:
b9:59:6e:aa:d9:97:8c:28:1a:2f:4e:87:62:67:9a:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:CB:2B:C0:C8:27:FC:68:7C:C1:A5:55:25:45:E8:8E:BA:F0:29
X509v3 Authority Key Identifier:
keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/b5615ee7b744fc1faa52268c8aa89fad3890f5f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.40.0/24
131.221.43.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6a:08:3b:63:80:21:43:98:8d:ee:9b:dd:8c:a5:4d:1c:7d:
a4:4d:bf:6c:90:5a:06:9a:76:f8:34:94:60:8c:10:f8:f1:07:
bf:73:6f:1d:d9:b2:e1:bc:d5:5b:2c:81:02:fd:16:d8:3c:4c:
08:54:e4:98:f0:97:f2:8e:6f:95:5f:a1:b9:da:45:b1:f8:6c:
21:af:c7:79:42:91:20:7b:0f:ee:b9:5e:77:35:82:0f:1e:c4:
be:6c:f3:b6:fb:87:8a:7e:89:00:e2:01:02:d6:7e:61:30:3b:
a1:38:11:1f:5b:7b:bd:47:87:49:5b:5a:10:4a:a6:68:15:df:
7d:ad:8f:e0:0e:25:bb:f2:1c:71:1e:b5:0a:d0:e4:9a:fd:4a:
c9:46:25:a8:5e:3a:5b:a8:e0:95:ea:ed:2f:21:63:6d:d6:ba:
ed:26:07:a1:99:f0:36:72:ad:32:85:41:cd:71:86:26:e5:18:
6f:13:49:b2:3b:c7:c7:7d:ed:23:d1:9b:14:10:7e:b6:dd:d9:
4f:88:2c:9e:a1:b8:23:ab:4d:22:a2:9c:73:42:b4:4a:5a:90:
65:da:be:f6:6a:72:a2:a5:71:db:b7:85:d1:65:96:77:86:fa:
43:c1:bf:b5:99:56:a3:49:54:b9:de:53:4e:ae:7a:c3:c0:0e:
c0:ef:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org