Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/b5a37fe9c05f6373d59b3baae65f2226a16c8749.roa
File: b5a37fe9c05f6373d59b3baae65f2226a16c8749.roa (raw, json)
Hash identifier: dJqBxPdGJq3x1ORIgaFEH/fQ7VKXDc2Jobh6HVkcSgk=
Subject key identifier: 4F:8F:E8:A0:B1:24:9A:FE:A9:89:FB:96:AB:89:63:ED:F2:CF:1D:7E
Certificate issuer: /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial: 23B406
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/b5a37fe9c05f6373d59b3baae65f2226a16c8749.roa
Signing time: Sat 07 Oct 2023 08:30:00 +0000
ROA not before: Fri 06 Oct 2023 08:30:00 +0000
ROA not after: Sun 05 Oct 2025 08:30:00 +0000
asID: 263781
IP address blocks: 138.118.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339846 (0x23b406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Validity
Not Before: Oct 6 08:30:00 2023 GMT
Not After : Oct 5 08:30:00 2025 GMT
Subject: CN=b5a37fe9c05f6373d59b3baae65f2226a16c8749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:14:2f:b2:96:12:53:db:f0:d9:ed:e3:50:
c5:6d:43:50:95:0d:cb:e5:47:5e:9c:b0:6a:19:3b:
ad:c3:e3:05:7d:c2:96:98:69:dd:69:0e:07:a6:c1:
70:ea:24:60:bf:59:d6:8e:98:d5:e0:b2:86:d2:f5:
17:dc:84:cd:01:a0:4f:f4:94:95:59:62:3c:ad:5f:
c2:dd:09:0f:75:15:e8:61:69:cc:a0:ee:0e:e9:2a:
22:e2:47:4c:40:52:07:51:72:ef:7e:19:4c:07:9a:
87:69:36:c8:c3:b8:e4:55:f4:e4:0a:bf:fe:6e:a0:
fc:bf:ca:4d:88:0e:2d:3d:7f:11:c4:3e:dd:4d:d6:
b0:14:70:bf:ad:dd:94:2c:b5:dd:21:2e:69:be:71:
1f:c6:1a:24:d1:70:5d:e3:2f:1c:21:06:db:34:c9:
b0:fd:17:81:34:97:70:a9:16:16:9d:09:f5:c3:53:
91:62:aa:5c:58:03:e2:dd:0e:bd:7c:0a:b6:8d:1b:
bb:03:1d:71:c7:74:48:8f:32:f7:ca:fc:73:3b:1a:
f7:86:e3:a2:c4:e6:63:14:e9:09:c4:de:4d:e9:99:
47:42:78:dc:86:69:d0:7c:87:14:60:06:37:eb:70:
1a:a3:9b:69:5f:ed:55:9f:90:65:df:5a:0b:ef:9a:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8F:E8:A0:B1:24:9A:FE:A9:89:FB:96:AB:89:63:ED:F2:CF:1D:7E
X509v3 Authority Key Identifier:
keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/b5a37fe9c05f6373d59b3baae65f2226a16c8749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.104.0/22
Signature Algorithm: sha256WithRSAEncryption
44:25:14:9d:9d:9d:32:f7:e6:40:e2:36:36:00:ce:6d:3e:4d:
60:f2:a4:ce:54:46:fd:2c:32:bb:2e:e2:22:74:49:b3:cb:86:
4f:4e:97:05:fe:ee:f5:77:20:8e:60:cf:38:2b:a9:61:d8:51:
5b:47:8c:89:b7:53:19:a5:a3:2d:2d:ed:3b:4e:67:38:26:90:
81:21:5f:ac:b6:0e:73:23:eb:c5:4d:58:40:67:69:93:94:78:
02:aa:37:41:54:d9:d8:d9:8a:9f:e8:eb:03:65:66:54:93:b3:
70:bf:a3:1c:6e:87:b7:4f:05:0f:e9:fc:c8:f0:cc:1b:f8:22:
43:21:fa:7f:7e:73:8a:62:14:3a:58:a4:ec:58:86:18:d2:18:
6a:86:e3:44:e7:6e:e7:c6:d7:c5:8f:d7:35:53:ef:30:8d:49:
b8:64:29:e4:c8:6e:65:b8:94:c7:b6:6d:1c:25:af:28:18:85:
d5:5a:0f:65:81:eb:03:54:a1:e0:ec:64:a9:fd:33:5a:86:8b:
8f:eb:59:09:fe:8a:ed:5c:21:be:c2:3d:65:ba:01:9c:50:e5:
09:46:8e:5c:c1:31:27:32:09:1d:cd:ce:1f:7f:b3:35:d5:fb:
83:a1:6f:9e:a1:33:aa:0d:2c:06:28:c5:ee:cd:1b:a9:dc:be:
45:52:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 19:29:40 2023 by rpki-client on console-ams.rpki-client.org