Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/9eb1eae48be688219e9bdb4e7e77fb16a995ed1a.roa
File: 9eb1eae48be688219e9bdb4e7e77fb16a995ed1a.roa (raw, json)
Hash identifier: r2o8NGqbWbaDGcIbgGl1XcIn/JLd41+J6tJJhz5mfEc=
Subject key identifier: 4D:D1:74:37:51:B9:97:9C:93:D4:06:CE:AD:32:D9:87:76:94:64:77
Certificate issuer: /CN=a336e26974c3cfc7b7b20511c84d25414d7bfc61
Certificate serial: 01D1
Authority key identifier: 8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/9eb1eae48be688219e9bdb4e7e77fb16a995ed1a.roa
Signing time: Wed 26 Jan 2022 12:25:50 +0000
ROA not before: Wed 26 Jan 2022 03:00:00 +0000
ROA not after: Fri 26 Jan 2024 03:00:00 +0000
asID: 52323
IP address blocks: 138.118.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 07:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a336e26974c3cfc7b7b20511c84d25414d7bfc61
Validity
Not Before: Jan 26 03:00:00 2022 GMT
Not After : Jan 26 03:00:00 2024 GMT
Subject: CN=9eb1eae48be688219e9bdb4e7e77fb16a995ed1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:63:80:2d:e5:34:41:5e:d4:d1:e9:c7:1c:
50:bc:4f:6f:c4:b2:e2:c4:29:e1:54:7d:cb:be:13:
51:7a:11:18:18:be:9c:e1:c9:69:bb:6c:c5:51:e3:
41:e7:dd:ce:84:da:10:83:32:03:50:51:d2:52:fb:
9d:20:db:7b:43:04:23:e6:84:13:dd:66:2e:3d:1e:
bc:eb:47:56:3c:ac:89:9c:b4:60:8a:b2:24:2a:c4:
92:24:95:22:ba:c3:78:93:45:cf:28:f2:53:fa:db:
ab:8a:ca:ba:40:0f:60:db:02:bc:cf:dd:57:e1:9f:
5a:31:c5:1c:1c:54:87:80:96:69:63:01:3a:83:db:
7f:57:b7:68:53:de:e7:67:09:32:a4:e5:ad:5d:bb:
3c:fd:f3:5e:47:84:3f:39:65:46:1d:3c:31:05:19:
50:b5:a7:a3:37:9c:01:fc:bb:e7:37:bb:57:45:0f:
c6:cf:89:d4:8f:db:e4:a9:09:b8:2a:45:ac:67:87:
75:c7:c3:56:68:6f:35:02:aa:da:e4:ad:6b:90:e7:
de:f0:d2:bd:a8:62:12:3c:86:8c:8d:28:f5:ff:5b:
c3:e5:46:98:ba:25:40:1a:2b:d9:f0:1b:91:c9:26:
62:d6:91:48:84:fc:c4:bf:79:ca:97:ec:29:a8:54:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:74:37:51:B9:97:9C:93:D4:06:CE:AD:32:D9:87:76:94:64:77
X509v3 Authority Key Identifier:
keyid:8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/9eb1eae48be688219e9bdb4e7e77fb16a995ed1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.208.0/22
Signature Algorithm: sha256WithRSAEncryption
02:44:96:07:2c:aa:90:ed:13:0a:fd:7d:32:1c:bc:9c:a9:b4:
9a:d8:d9:82:f5:95:02:28:38:5b:2d:1a:a6:53:c3:e1:08:d6:
ed:ae:09:16:f0:ac:3a:97:7d:ad:95:65:33:57:3e:82:8c:4b:
16:e5:7a:82:af:88:88:f5:0b:09:ae:90:5b:09:6f:79:b6:11:
ff:f3:94:e4:73:00:52:80:1c:c5:57:7e:c2:be:e4:fd:2d:f7:
44:cd:77:6e:13:11:29:e8:42:1f:83:ea:9d:11:1a:7d:50:f9:
82:9f:b8:37:ce:1c:95:eb:17:0a:24:e0:51:a0:8f:49:13:b5:
bb:e6:ac:e7:ad:f8:78:eb:71:8a:70:20:b7:de:e8:da:28:84:
4a:c0:fc:82:b0:ba:eb:e6:2f:ba:02:ee:93:48:45:12:38:d0:
ad:38:65:86:a9:84:09:52:7b:b2:8a:b1:e0:b6:c7:4b:8c:cd:
62:11:48:6d:90:db:01:88:de:e9:06:57:c0:1e:89:30:5e:c5:
f6:58:2a:ed:f7:7f:ee:2e:6b:3f:33:ad:e8:58:0e:a2:20:7d:
e5:a9:3a:60:fa:e5:26:73:b4:04:3e:8b:37:2e:1f:ff:74:df:
35:8d:6f:c0:51:79:37:1e:ba:bc:c5:78:7f:1d:9c:69:32:59:
58:11:a7:ec
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYTMz
NmUyNjk3NGMzY2ZjN2I3YjIwNTExYzg0ZDI1NDE0ZDdiZmM2MTAeFw0yMjAxMjYw
MzAwMDBaFw0yNDAxMjYwMzAwMDBaMDMxMTAvBgNVBAMTKDllYjFlYWU0OGJlNjg4
MjE5ZTliZGI0ZTdlNzdmYjE2YTk5NWVkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiRWOALeU0QV7U0enHHFC8T2/EsuLEKeFUfcu+E1F6ERgYvpzh
yWm7bMVR40Hn3c6E2hCDMgNQUdJS+50g23tDBCPmhBPdZi49HrzrR1Y8rImctGCK
siQqxJIklSK6w3iTRc8o8lP626uKyrpAD2DbArzP3Vfhn1oxxRwcVIeAlmljATqD
239Xt2hT3udnCTKk5a1duzz9815HhD85ZUYdPDEFGVC1p6M3nAH8u+c3u1dFD8bP
idSP2+SpCbgqRaxnh3XHw1ZobzUCqtrkrWuQ597w0r2oYhI8hoyNKPX/W8PlRpi6
JUAaK9nwG5HJJmLWkUiE/MS/ecqX7CmoVL29AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUTdF0N1G5l5yT1AbOrTLZh3aUZHcwHwYDVR0jBBgwFoAUjqhyDHb6idIl0s1p
aZzv60dvA8owDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9hMzM2ZTI2
OTc0YzNjZmM3YjdiMjA1MTFjODRkMjU0MTRkN2JmYzYxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wYWU2OWRjZC0wY2QwLTQ5MjYtYTMyYy05OTAwZGUw
MWFjMWEvOWViMWVhZTQ4YmU2ODgyMTllOWJkYjRlN2U3N2ZiMTZhOTk1ZWQxYS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBhZTY5ZGNkLTBjZDAtNDkyNi1hMzJjLTk5MDBk
ZTAxYWMxYS9hMzM2ZTI2OTc0YzNjZmM3YjdiMjA1MTFjODRkMjU0MTRkN2JmYzYx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCinbQMA0GCSqGSIb3DQEBCwUAA4IBAQACRJYHLKqQ7RMK/X0y
HLycqbSa2NmC9ZUCKDhbLRqmU8PhCNbtrgkW8Kw6l32tlWUzVz6CjEsW5XqCr4iI
9QsJrpBbCW95thH/85TkcwBSgBzFV37CvuT9LfdEzXduExEp6EIfg+qdERp9UPmC
n7g3zhyV6xcKJOBRoI9JE7W75qznrfh463GKcCC33ujaKIRKwPyCsLrr5i+6Au6T
SEUSONCtOGWGqYQJUnuyirHgtsdLjM1iEUhtkNsBiN7pBlfAHokwXsX2WCrt93/u
Lms/M63oWA6iIH3lqTpg+uUmc7QEPos3Lh//dN81jW/AUXk3Hrq8xXh/HZxpMllY
Eafs
-----END CERTIFICATE-----
Generated at Thu Jan 25 12:58:17 2024 by rpki-client on console-ams.rpki-client.org