Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/bcd739dff13a9f467e8e40e8d22fdaf8329417ea.roa
File: bcd739dff13a9f467e8e40e8d22fdaf8329417ea.roa (raw, json)
Hash identifier: ZYoZg7e1UCv/QnQoveyo6zg4uq7QcmZRcTI3rG+Qgxk=
Subject key identifier: D4:E2:D5:59:C4:6E:9B:BE:30:D1:76:33:81:E7:01:33:AF:27:CF:00
Certificate issuer: /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial: 157466
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/bcd739dff13a9f467e8e40e8d22fdaf8329417ea.roa
Signing time: Sat 06 May 2023 14:52:41 +0000
ROA not before: Fri 05 May 2023 14:52:40 +0000
ROA not after: Tue 06 May 2025 14:52:40 +0000
asID: 27951
IP address blocks: 131.221.41.0/24 maxlen: 24
131.221.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406054 (0x157466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Validity
Not Before: May 5 14:52:40 2023 GMT
Not After : May 6 14:52:40 2025 GMT
Subject: CN=bcd739dff13a9f467e8e40e8d22fdaf8329417ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:b1:a0:1a:6b:68:b3:e7:df:8a:19:43:ff:
82:bc:06:50:2a:a6:0e:47:cb:6a:fd:ae:69:48:8f:
c1:4e:b5:40:88:ec:b7:fc:f8:59:a4:3a:bf:1d:a2:
5c:0d:96:27:7e:2e:40:7b:20:ed:33:8e:cf:7a:dc:
f6:e7:a9:57:7d:ff:b8:e6:ac:10:3c:23:b2:0d:8a:
f6:dc:40:8e:b3:fb:80:36:f9:62:ad:d0:f7:27:dc:
9e:30:6e:c5:bf:2e:40:cf:47:f7:7a:59:e7:f8:5b:
32:65:07:81:62:8f:f6:42:97:08:68:23:e0:de:d8:
d8:a8:84:97:96:7e:0a:8b:e8:08:d4:ff:2c:ec:7a:
96:d5:9b:46:e2:84:26:e7:d5:b3:49:f1:57:1e:5e:
d2:48:7b:ba:13:1f:29:c2:70:02:80:44:25:c5:b4:
6b:d4:98:14:9d:e8:37:73:6b:cc:49:47:c1:ad:d2:
59:e4:4d:8a:86:e3:3d:cb:de:2a:bb:e5:ae:34:03:
c7:a2:ab:be:c2:1b:0f:2d:89:43:12:79:4c:63:91:
22:fd:51:46:62:b1:ac:2a:4a:56:b4:84:03:d8:23:
3e:c6:7f:72:50:1b:a4:5b:3f:32:3d:68:d1:ed:c2:
82:8f:4a:0f:5d:c8:91:ae:58:95:ad:83:c0:f6:67:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:D5:59:C4:6E:9B:BE:30:D1:76:33:81:E7:01:33:AF:27:CF:00
X509v3 Authority Key Identifier:
keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/bcd739dff13a9f467e8e40e8d22fdaf8329417ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.41.0-131.221.42.255
Signature Algorithm: sha256WithRSAEncryption
80:a9:1a:68:46:32:cf:55:a2:86:87:b4:82:94:1d:67:8e:3a:
a6:8a:9a:6a:04:c7:66:ca:c3:10:77:87:e3:58:e0:d2:f2:77:
ed:80:92:85:3e:dc:21:3a:26:24:67:93:c6:fc:a7:ea:1f:cc:
1d:88:f5:51:c3:ca:3a:6f:46:45:42:ca:9b:51:76:ea:6d:ed:
f9:00:00:79:3e:f6:8a:67:9a:06:73:bf:c0:24:ba:b9:28:dd:
6d:ed:41:ac:e7:f4:82:7a:67:4e:86:39:f9:6e:3d:a0:53:4a:
77:34:3c:ff:78:c1:86:89:e6:45:8b:8b:45:8a:e5:c4:c6:19:
01:04:77:25:83:06:96:c1:95:86:16:9f:dc:9b:39:b3:d8:14:
cf:1b:dd:bf:8f:15:15:53:bd:dd:a6:60:83:84:b5:c4:05:38:
1f:42:18:da:c9:de:12:c0:32:2e:89:38:7b:96:91:2d:44:d2:
2c:1c:9c:a7:83:06:56:6e:b1:d4:60:5f:66:9f:54:7e:bd:f3:
f5:ae:13:f8:f0:2d:e0:ef:e2:ec:2b:d3:2d:b9:85:eb:74:1e:
21:b2:e7:cf:3a:c8:44:44:c4:99:e5:ea:40:c8:7e:67:11:ed:
11:ce:c8:41:ab:aa:0b:b9:94:cb:af:a2:f8:ad:33:c9:7f:5f:
02:91:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 20:31:25 2023 by rpki-client on console-fra.rpki-client.org