Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/8b1ddd95874bcba067b4703e52d151bca280ae41.roa
File: 8b1ddd95874bcba067b4703e52d151bca280ae41.roa (raw, json)
Hash identifier: lMJJHTfTqiuuwbCtP43k4/UTBZershCFa2YTnYo8aFQ=
Subject key identifier: 5C:02:26:8E:F8:4E:E2:8A:B0:D7:80:EB:1B:D1:D3:57:B3:B8:28:F7
Certificate issuer: /CN=0736b876e6c976d927742fb22fc1d06c98292216
Certificate serial: 0D4859
Authority key identifier: E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0736b876e6c976d927742fb22fc1d06c98292216.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/8b1ddd95874bcba067b4703e52d151bca280ae41.roa
Signing time: Wed 24 Mar 2021 14:42:29 +0000
ROA not before: Wed 24 Mar 2021 14:42:29 +0000
ROA not after: Tue 24 Mar 2026 14:42:29 +0000
asID: 262262
IP address blocks: 138.204.180.0/22 maxlen: 24
170.231.52.0/22 maxlen: 24
170.247.84.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870489 (0xd4859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736b876e6c976d927742fb22fc1d06c98292216
Validity
Not Before: Mar 24 14:42:29 2021 GMT
Not After : Mar 24 14:42:29 2026 GMT
Subject: CN=8b1ddd95874bcba067b4703e52d151bca280ae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:99:d0:8b:43:a5:6d:f3:37:a9:62:ba:1a:
34:71:9e:b7:be:bf:10:cd:81:41:3d:d3:5b:b7:74:
44:08:5c:2b:7e:e3:18:9f:a8:56:dc:67:5a:5d:ba:
2a:30:83:fc:09:9d:f5:72:a7:30:cf:75:71:9a:52:
ae:16:df:c1:6d:db:ec:e2:d6:7d:a6:35:64:34:1e:
78:97:12:97:45:ec:f2:00:5c:47:d2:7d:e8:9b:57:
f3:30:c2:11:6a:9c:66:a8:44:a1:cf:5b:c4:07:c4:
6b:07:bb:c4:96:bb:29:63:68:93:fb:f7:9b:c2:98:
77:74:d6:4d:90:86:6c:32:9f:0b:19:e4:d2:ca:86:
af:63:41:f5:70:99:68:d8:b9:96:df:04:21:9f:21:
fd:08:b9:b7:b8:7c:de:49:c9:9f:ac:5c:f5:73:b5:
69:99:10:a9:82:72:63:1a:5a:0b:9e:25:56:f7:31:
8f:9a:18:de:00:78:a7:80:d7:13:85:7d:70:dc:32:
ba:4e:7d:d3:f1:14:b5:af:af:04:f5:94:6f:92:0f:
2e:9a:13:89:b3:1a:d2:9f:9d:67:70:c0:6f:b6:5a:
38:50:32:85:13:e0:a6:20:8f:4f:bc:a3:b2:73:0d:
0c:e4:e8:15:d5:cd:3c:4f:85:fa:20:03:c2:98:9d:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:26:8E:F8:4E:E2:8A:B0:D7:80:EB:1B:D1:D3:57:B3:B8:28:F7
X509v3 Authority Key Identifier:
keyid:E4:C8:26:B0:8C:18:BD:7F:97:7F:2B:35:5F:70:5D:26:C2:59:2A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0736b876e6c976d927742fb22fc1d06c98292216.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/8b1ddd95874bcba067b4703e52d151bca280ae41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/17732ba6-76d3-45ca-822e-802b54fc9800/0736b876e6c976d927742fb22fc1d06c98292216.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.180.0/22
170.231.52.0/22
170.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:41:42:7f:a0:72:1e:58:fc:bc:16:6f:35:fc:5d:75:74:46:
49:6c:23:9f:64:c8:17:f9:e0:c8:ad:83:d2:fb:a7:cc:09:89:
2c:f8:a4:a4:c9:6f:0c:32:f7:be:dd:25:85:08:45:ef:8d:4f:
e1:43:f9:5d:9d:4f:4d:85:7c:af:c9:6e:a0:d5:da:0d:ff:dd:
22:3e:4b:86:db:2d:e0:d1:ea:27:96:ac:c0:b0:0b:78:05:4f:
ab:64:b8:30:e1:7c:bd:2e:d6:e1:eb:4f:76:a7:80:2b:42:8e:
06:9b:fa:3f:3d:4c:45:28:88:ae:5c:f8:cf:54:46:77:97:9b:
4c:56:cf:e6:1b:6c:ff:5c:d5:66:92:73:24:ac:9b:f9:9f:ea:
61:2d:92:a2:52:56:27:54:e1:b5:41:01:92:df:5a:2b:97:ba:
12:35:6b:97:56:63:2e:02:a7:3e:62:9b:05:97:c7:da:d1:4e:
69:5a:ed:ea:65:b9:c9:a3:93:15:94:50:87:81:30:8d:ad:6b:
51:07:89:f8:8b:3a:a9:9b:42:09:4d:0d:7a:19:92:bb:d4:57:
44:6e:32:c5:1f:47:8a:2c:e3:2e:c1:c1:03:f6:65:42:9e:ae:
5c:ce:03:8c:4b:c6:aa:9a:d3:da:34:77:0b:56:9f:34:e7:43:
9f:5b:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 20:10:19 2023 by rpki-client on console-ams.rpki-client.org