Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/72297581e1b222aca5d6fefb0260491fd8f5039d.roa
File: 72297581e1b222aca5d6fefb0260491fd8f5039d.roa (raw, json)
Hash identifier: f7NVO8dW+MPYW1IktfACgPsgHDv9AlkUqWcCBTzgg6g=
Subject key identifier: 02:CE:A2:CE:99:78:20:A0:4B:77:5D:CA:8C:93:58:2F:86:FC:A6:CC
Certificate issuer: /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial: 0EC477
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/72297581e1b222aca5d6fefb0260491fd8f5039d.roa
Signing time: Fri 28 May 2021 23:15:05 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 23520
IP address blocks: 138.121.12.0/22 maxlen: 22
190.131.193.0/24 maxlen: 24
190.131.209.0/24 maxlen: 24
190.131.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967799 (0xec477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=72297581e1b222aca5d6fefb0260491fd8f5039d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:61:6e:2b:0f:c1:6c:c5:64:30:6a:d0:40:
a3:f7:55:dc:06:85:a1:40:59:2c:99:be:40:3b:09:
24:7b:aa:43:97:5d:75:ae:fb:34:37:b8:6f:01:07:
ef:09:50:9b:e0:a0:60:01:1d:c0:88:03:64:be:2b:
54:09:2e:77:b6:f2:47:b7:80:71:a5:21:10:cb:92:
a2:a1:80:da:95:69:2e:b4:19:1f:b2:67:1a:fc:66:
eb:fd:9d:5b:6a:0e:bd:61:56:9c:56:0a:a0:6d:7a:
5d:9d:17:0d:00:5e:c8:a4:af:75:d2:2d:62:59:64:
06:af:a8:a1:25:8d:26:6e:fe:53:06:f0:d7:c3:17:
8b:3d:f4:3d:6a:3b:85:fa:c2:7e:19:43:b8:00:73:
d0:48:55:93:f8:4f:bb:a3:71:07:8f:5b:17:65:4c:
56:b2:a3:8c:c0:a5:61:4d:20:4f:76:31:2a:ef:a8:
f8:b3:4c:d6:ee:fc:7a:5c:b1:da:fb:86:ca:7b:97:
8f:7d:9d:7b:d1:db:9b:ac:c3:fb:b3:2e:2a:0a:a8:
1c:21:9e:e4:29:38:bd:73:61:99:25:de:be:40:93:
e5:c3:9a:fa:03:a5:d4:83:e6:95:7e:14:2c:d2:8c:
c6:01:99:69:42:54:97:bb:df:52:1d:c0:80:d7:af:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:A2:CE:99:78:20:A0:4B:77:5D:CA:8C:93:58:2F:86:FC:A6:CC
X509v3 Authority Key Identifier:
keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/72297581e1b222aca5d6fefb0260491fd8f5039d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.12.0/22
190.131.193.0/24
190.131.209.0/24
190.131.224.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:ea:b5:54:fb:34:72:e0:08:a4:9a:6f:f7:33:34:68:b6:33:
92:37:16:40:b8:d3:07:c6:8f:4f:21:62:bd:a4:a8:b5:4c:62:
65:e1:51:66:77:3e:b2:41:ea:da:fc:d8:fc:c5:71:92:d4:1f:
81:50:cb:f2:96:bd:ed:a1:d1:b1:4e:e7:32:54:81:44:03:46:
3e:e8:f0:8f:a8:75:8d:99:2c:c7:e2:99:15:34:1a:64:96:d2:
05:45:8b:fe:69:f1:df:4f:ee:ea:db:ed:2f:bd:90:e4:43:4a:
61:dd:59:14:3b:a3:c4:b9:1f:44:1e:b3:98:39:3f:36:44:c1:
7c:72:49:0b:7d:79:d3:f0:60:15:97:86:01:75:21:42:45:5b:
04:a4:63:15:6b:68:ab:0c:0b:97:f6:83:45:f2:90:29:a7:69:
3e:2b:f0:c5:93:64:9e:d7:6b:08:b5:11:c5:97:c1:ae:fb:4a:
dc:41:62:34:31:a6:6a:24:af:b6:8a:c7:0b:13:9b:0c:74:fe:
22:6a:d6:b2:45:e3:9f:26:55:dd:7d:d9:8b:d2:c2:3c:db:b6:
27:7f:2f:b9:0e:b0:15:e4:45:2a:80:80:28:9f:9c:0c:75:a6:
fd:5c:96:07:06:d6:92:86:6d:ce:76:50:f4:48:2d:4d:78:9a:
dd:5b:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org