Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/2152bc2f3a14d44475a2251e6c38cfa2524c6365.roa
File: 2152bc2f3a14d44475a2251e6c38cfa2524c6365.roa (raw, json)
Hash identifier: 4+VtPHK+VfKdiIXG6ke/M1w6b44FmdGxjuvic2NT8z4=
Subject key identifier: 0E:28:90:93:5A:7D:5C:2A:0C:08:10:11:C4:BD:D2:2A:39:4E:4D:6F
Certificate issuer: /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial: 122F3A
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/2152bc2f3a14d44475a2251e6c38cfa2524c6365.roa
Signing time: Fri 08 Oct 2021 16:18:31 +0000
ROA not before: Fri 08 Oct 2021 03:00:00 +0000
ROA not after: Sun 08 Oct 2023 03:00:00 +0000
asID: 263781
IP address blocks: 138.118.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191738 (0x122f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Validity
Not Before: Oct 8 03:00:00 2021 GMT
Not After : Oct 8 03:00:00 2023 GMT
Subject: CN=2152bc2f3a14d44475a2251e6c38cfa2524c6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:66:59:2c:9f:d6:31:09:7d:c5:d7:03:dd:
4b:91:a5:53:21:21:87:86:48:46:19:69:27:f2:69:
61:88:e3:ae:57:bc:db:e0:f6:12:b7:35:10:d0:c4:
2f:4d:bf:a0:79:7c:3a:ff:6f:75:dd:de:e8:bd:93:
7f:dd:05:f4:f1:7f:c7:c6:0f:44:25:f7:a5:ee:a1:
e8:d2:61:20:19:63:ca:39:e1:97:6b:20:0d:4e:ab:
59:8f:f4:f3:48:4b:b9:ff:fe:7f:21:c4:fe:93:6a:
d8:0e:7c:42:71:10:94:0e:fd:f4:3b:86:e4:c5:82:
de:91:11:ab:e0:03:74:b1:0b:43:c0:1e:a8:8e:8b:
2c:c7:21:fd:d3:fc:87:ff:71:11:6a:f2:7e:80:0f:
18:19:cb:26:ef:0e:b5:b3:51:e1:eb:b5:5e:d1:64:
25:d8:69:51:de:02:c2:e4:87:03:bc:df:fa:6a:4d:
24:a9:84:c0:53:f8:42:89:76:cf:40:34:69:78:9b:
7a:8a:55:32:6e:0c:46:2e:3c:f6:84:e0:44:cc:55:
fa:0f:23:42:95:74:4f:92:43:8f:2d:3b:16:02:c9:
18:8f:0a:97:fd:81:0a:9f:79:b2:68:88:94:da:8f:
f3:13:bb:bf:36:8e:cf:1f:5d:8a:c2:fd:bd:90:a9:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:90:93:5A:7D:5C:2A:0C:08:10:11:C4:BD:D2:2A:39:4E:4D:6F
X509v3 Authority Key Identifier:
keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/2152bc2f3a14d44475a2251e6c38cfa2524c6365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.104.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a4:18:16:fc:b1:65:95:f1:4f:11:e1:76:40:39:15:2b:d3:
a8:02:91:39:19:8e:c6:6e:ca:a6:a5:89:79:9d:a5:a0:44:ca:
49:2e:a7:47:e3:0d:05:55:84:d7:99:f6:2b:18:53:3b:a4:09:
bb:fe:9b:2e:a6:61:1d:0d:90:2f:12:f4:63:6e:b3:5f:ee:0b:
d3:1f:05:e8:7c:60:58:10:6d:60:ba:69:cd:24:ef:10:82:a3:
74:e6:a5:58:ae:ca:7a:11:6c:a5:5d:43:1f:fc:a0:c0:11:3b:
f6:79:ec:07:25:84:91:a7:8b:10:ac:12:42:b8:30:94:fd:7b:
53:19:f8:35:3b:51:f3:56:82:23:d4:ac:50:d1:dd:4c:2c:97:
f2:81:b2:4f:a8:c9:4a:48:fe:b6:32:cc:61:fb:c5:c7:89:44:
94:4f:4f:45:db:60:ab:02:d6:75:2b:19:9d:54:fe:24:4e:75:
df:1c:69:2b:6f:1e:28:c5:fd:9d:e1:26:ad:56:71:00:09:8d:
d1:66:7e:39:4a:4b:08:38:68:40:36:6a:8c:c5:77:a1:f3:a1:
b2:e0:c5:09:00:c2:ac:08:cd:df:fb:47:0b:88:b3:2e:4a:e2:
45:4f:7c:29:0e:78:76:8a:35:b6:34:37:d5:3e:56:58:de:5d:
e2:b7:7d:a5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEi86MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
NDg4ODJlYjFjOGU2NmFiNWMyM2Y2NjczNjI1NjdlNmQ3ZGI2NzEwHhcNMjExMDA4
MDMwMDAwWhcNMjMxMDA4MDMwMDAwWjAzMTEwLwYDVQQDEygyMTUyYmMyZjNhMTRk
NDQ0NzVhMjI1MWU2YzM4Y2ZhMjUyNGM2MzY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgeJmWSyf1jEJfcXXA91LkaVTISGHhkhGGWkn8mlhiOOuV7zb
4PYStzUQ0MQvTb+geXw6/2913d7ovZN/3QX08X/Hxg9EJfel7qHo0mEgGWPKOeGX
ayANTqtZj/TzSEu5//5/IcT+k2rYDnxCcRCUDv30O4bkxYLekRGr4AN0sQtDwB6o
jossxyH90/yH/3ERavJ+gA8YGcsm7w61s1Hh67Ve0WQl2GlR3gLC5IcDvN/6ak0k
qYTAU/hCiXbPQDRpeJt6ilUybgxGLjz2hOBEzFX6DyNClXRPkkOPLTsWAskYjwqX
/YEKn3myaIiU2o/zE7u/No7PH12Kwv29kKlvtwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA4okJNafVwqDAgQEcS90io5Tk1vMB8GA1UdIwQYMBaAFF697Iy1u+wGFl6M
Od28euJhkYp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTI0ODg4
MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNlZTI5OWQtZjgyMi00ZjlkLThmMTktNTY4N2My
MDAyN2JkLzIxNTJiYzJmM2ExNGQ0NDQ3NWEyMjUxZTZjMzhjZmEyNTI0YzYzNjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2VlMjk5ZC1mODIyLTRmOWQtOGYxOS01Njg3
YzIwMDI3YmQvMTI0ODg4MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp2aDANBgkqhkiG9w0BAQsFAAOCAQEAEaQYFvyxZZXxTxHh
dkA5FSvTqAKRORmOxm7KpqWJeZ2loETKSS6nR+MNBVWE15n2KxhTO6QJu/6bLqZh
HQ2QLxL0Y26zX+4L0x8F6HxgWBBtYLppzSTvEIKjdOalWK7KehFspV1DH/ygwBE7
9nnsByWEkaeLEKwSQrgwlP17Uxn4NTtR81aCI9SsUNHdTCyX8oGyT6jJSkj+tjLM
YfvFx4lElE9PRdtgqwLWdSsZnVT+JE513xxpK28eKMX9neEmrVZxAAmN0WZ+OUpL
CDhoQDZqjMV3ofOhsuDFCQDCrAjN3/tHC4izLkriRU98KQ54doo1tjQ31T5WWN5d
4rd9pQ==
-----END CERTIFICATE-----
Generated at Sat Oct 7 09:00:16 2023 by rpki-client on console-ams.rpki-client.org