Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/7c951ea6dbc13137a1dd2a9e3400f1d7fbaf5934.roa
File: 7c951ea6dbc13137a1dd2a9e3400f1d7fbaf5934.roa (raw, json)
Hash identifier: LzPshBlLkvS5v+Jj8cLvHvZe5nzF+JEHCRM8d3d6ib8=
Subject key identifier: CA:A1:A4:32:AD:97:35:50:42:1A:7A:ED:67:A0:77:5B:18:1E:7C:34
Certificate issuer: /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial: 23BF5F
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/7c951ea6dbc13137a1dd2a9e3400f1d7fbaf5934.roa
Signing time: Sat 07 Oct 2023 08:30:04 +0000
ROA not before: Fri 06 Oct 2023 08:30:04 +0000
ROA not after: Sun 05 Oct 2025 08:30:04 +0000
asID: 263781
IP address blocks: 138.118.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342751 (0x23bf5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Validity
Not Before: Oct 6 08:30:04 2023 GMT
Not After : Oct 5 08:30:04 2025 GMT
Subject: CN=7c951ea6dbc13137a1dd2a9e3400f1d7fbaf5934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:c2:b9:82:9d:55:af:9b:3b:68:ed:0f:40:
2b:b0:20:43:fa:84:74:a2:e0:a4:0b:6b:e6:90:1e:
7d:da:c5:08:9f:16:5b:00:61:62:e1:03:86:b5:59:
51:df:c6:07:1d:ee:ed:c7:7a:e1:55:91:0c:df:f6:
da:6d:1c:e3:7a:83:47:77:e3:d4:ca:68:19:57:eb:
28:a9:84:0d:11:e3:53:28:69:76:cf:d0:46:5b:93:
26:c7:ac:8d:22:04:eb:08:e4:65:a3:95:1e:98:09:
2d:be:3f:62:dd:9e:6b:5a:e7:07:fd:af:05:8a:b5:
c1:c0:92:60:c5:19:d6:1b:6a:14:4f:39:25:91:6e:
9d:90:76:78:8e:87:0d:ea:26:f7:c7:86:34:eb:e7:
bb:22:a6:bf:04:84:a6:08:25:08:c8:bb:ab:47:9c:
66:9a:00:07:6f:ed:69:67:21:5f:0a:97:40:3a:f6:
41:8c:12:ac:6c:30:23:00:e3:4f:ed:06:be:a2:f2:
80:35:c7:80:ec:a7:46:d5:f6:84:a6:f9:f7:6a:60:
6f:52:59:d6:27:12:c9:b7:b6:e9:57:dc:a7:07:0b:
20:c7:47:49:84:fe:f3:b4:90:df:4c:2e:ce:e4:7c:
f2:02:8e:65:0b:40:2a:1d:cf:2b:fe:42:50:ff:c8:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:A4:32:AD:97:35:50:42:1A:7A:ED:67:A0:77:5B:18:1E:7C:34
X509v3 Authority Key Identifier:
keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/7c951ea6dbc13137a1dd2a9e3400f1d7fbaf5934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:84:fe:08:b2:f8:5c:89:94:92:70:2b:ce:3d:a1:4b:d2:b0:
1b:c2:ef:a7:44:3d:a7:50:54:5d:67:e1:ca:71:9a:ce:87:9e:
6b:b2:93:79:b4:e3:f2:fb:48:0f:6b:37:ba:76:87:4f:fb:8c:
b7:1a:a3:c5:9d:2a:9e:bc:5d:31:a5:8e:d3:4b:43:04:56:41:
ea:0a:93:50:32:0f:55:99:20:93:79:90:1a:4f:fd:9c:45:f3:
13:bb:c5:c1:d4:43:fa:62:b7:0e:2b:7a:90:80:ce:b1:50:d9:
4f:09:f1:d7:49:32:0b:22:c8:e8:54:e0:e9:cf:df:2d:c6:0c:
c8:20:7b:12:96:3c:44:40:6a:41:4e:62:32:ba:6b:6a:57:7c:
57:eb:ed:d4:9d:9a:1d:a4:24:00:f2:19:36:2e:da:7b:f9:fb:
97:b5:01:8b:53:6b:56:d3:29:74:8d:78:37:a1:a5:f4:40:14:
7b:42:d3:fa:6a:31:5d:69:31:59:85:13:08:ea:0b:4c:8c:b2:
70:49:9d:59:61:a7:31:53:b0:c2:b7:d3:35:88:e5:55:5e:63:
f0:37:f1:6f:69:dc:82:a8:e0:e4:32:c5:0c:2b:a7:f7:17:fb:
e8:44:38:79:3e:55:55:81:09:bf:55:34:80:cd:ba:eb:6c:cb:
86:e1:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 19:26:39 2023 by rpki-client on console-fra.rpki-client.org