Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/514e8491390c079a105f0f15a8fb70a2d898567c.roa
File: 514e8491390c079a105f0f15a8fb70a2d898567c.roa (raw, json)
Hash identifier: FriScf1pJobCL4KmyYWzATam7XkoVPxQOJq2S4o9QOE=
Subject key identifier: D5:63:05:79:37:9D:1F:BA:68:0E:83:C9:5D:89:FC:50:E7:49:4C:89
Certificate issuer: /CN=91b1e48227e2bbda9d2cb732746aa69540bc1c54
Certificate serial: 0C1A2E
Authority key identifier: 90:4A:D1:DB:DF:7A:3D:25:8B:0C:7C:B1:B4:73:F4:2B:4A:3D:38:3A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91b1e48227e2bbda9d2cb732746aa69540bc1c54.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/514e8491390c079a105f0f15a8fb70a2d898567c.roa
Signing time: Wed 24 Mar 2021 14:35:17 +0000
ROA not before: Wed 24 Mar 2021 14:35:17 +0000
ROA not after: Tue 24 Mar 2026 14:35:17 +0000
asID: 52320
IP address blocks: 138.204.236.0/22 maxlen: 24
200.16.68.0/22 maxlen: 24
2800:6e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793134 (0xc1a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b1e48227e2bbda9d2cb732746aa69540bc1c54
Validity
Not Before: Mar 24 14:35:17 2021 GMT
Not After : Mar 24 14:35:17 2026 GMT
Subject: CN=514e8491390c079a105f0f15a8fb70a2d898567c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:26:17:d6:bf:b1:a8:38:6a:4d:91:fa:7c:
04:1c:d7:3a:3b:e2:68:78:1a:3a:ff:bc:ec:a2:8f:
c5:f8:0c:1d:b2:1e:2b:9d:ee:90:d2:ca:d0:04:a2:
99:a1:09:ee:3f:0e:00:c8:64:86:cd:78:5e:df:67:
88:c7:f1:aa:4d:8b:c2:cb:52:8e:35:0d:c2:8f:53:
43:ea:27:a7:3e:24:2b:3a:3f:b4:84:78:1f:7a:f0:
c5:ac:34:f2:6a:01:53:d3:a1:35:97:a8:d7:26:dd:
70:e5:4b:2c:b1:93:5b:24:6f:c0:ca:b0:f1:64:04:
8d:e3:c3:a2:aa:c1:16:5a:e2:55:82:c5:81:9b:86:
c6:6d:f5:b7:8a:46:b5:ea:fe:a6:f6:81:97:5a:50:
9c:e4:65:1f:f0:df:fc:a7:8e:a1:ff:34:1d:3b:14:
17:25:87:ea:4b:63:7c:ba:f6:0d:1c:1c:2b:71:42:
47:cb:7c:47:66:6e:94:a6:e2:db:3b:bf:61:d4:a6:
99:f9:16:43:c4:a5:61:04:1b:5b:4c:e6:85:04:88:
db:c9:22:04:34:1a:3a:c3:a1:39:54:86:8a:b2:56:
20:ee:30:84:8b:63:d8:77:c9:ac:f0:14:3b:cd:10:
2e:24:e6:1b:1f:b6:99:80:0d:b2:83:18:cb:6d:b6:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:05:79:37:9D:1F:BA:68:0E:83:C9:5D:89:FC:50:E7:49:4C:89
X509v3 Authority Key Identifier:
keyid:90:4A:D1:DB:DF:7A:3D:25:8B:0C:7C:B1:B4:73:F4:2B:4A:3D:38:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91b1e48227e2bbda9d2cb732746aa69540bc1c54.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/514e8491390c079a105f0f15a8fb70a2d898567c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0a16e5c0-7679-45b3-b31a-abd79f05c08a/91b1e48227e2bbda9d2cb732746aa69540bc1c54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.236.0/22
200.16.68.0/22
IPv6:
2800:6e0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:f5:d8:44:f7:1d:48:7b:1f:bc:8d:c0:b8:10:db:93:ef:a3:
48:19:95:4f:f9:c6:7c:8f:43:ba:fd:64:0d:94:23:50:69:73:
e1:2b:7a:90:ba:8f:43:75:4f:e1:c7:60:05:a0:ec:b5:cd:de:
3a:be:9a:0c:2e:d6:5f:22:c7:c8:66:cb:ff:82:ab:25:15:ce:
a6:b6:bb:80:d7:3a:56:31:09:dd:9f:44:4f:9c:89:a0:44:b5:
cb:8c:65:dc:97:4a:ed:07:e3:53:38:70:62:eb:77:a2:b1:7b:
d3:bc:ad:42:a4:c1:15:ca:fb:65:a6:1a:4a:9e:a2:98:08:32:
4f:41:62:a4:ee:b5:e1:f9:22:7c:0c:9e:5a:ad:97:9b:72:d1:
a5:62:c9:5d:0f:49:c9:ee:02:db:82:10:e0:5f:5d:15:26:7d:
1f:7f:15:9c:89:a7:8f:6a:0e:e6:09:99:2c:d3:83:ea:2b:be:
a5:86:30:d9:c9:e8:57:ae:bb:c5:b8:86:2a:b4:cd:cc:4a:cf:
1d:8e:e2:e2:8f:be:67:20:39:dd:8d:40:c1:32:6e:93:ea:19:
46:1d:05:a0:02:cb:9c:4c:fe:45:d0:a6:1f:b3:db:c3:7d:2e:
2e:7b:75:dc:5c:79:9d:d3:62:5f:7c:91:a3:35:ad:d8:70:26:
b6:64:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org