Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/4c01450625cb94e0d939de0366f8223a8b9a40d7.roa
File: 4c01450625cb94e0d939de0366f8223a8b9a40d7.roa (raw, json)
Hash identifier: X5zjPesd7Ryp7i+74vYhVh0WhDYa8mTffuuoI8Pd7Gw=
Subject key identifier: 65:3C:AB:41:BA:46:1D:D8:3C:97:AC:F8:36:6A:65:C7:F5:40:60:1E
Certificate issuer: /CN=905680316617a29b241d379e0113b16e54308042
Certificate serial: 217374
Authority key identifier: 89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/4c01450625cb94e0d939de0366f8223a8b9a40d7.roa
Signing time: Thu 07 Sep 2023 19:04:03 +0000
ROA not before: Wed 06 Sep 2023 19:04:03 +0000
ROA not after: Sun 07 Sep 2025 19:04:03 +0000
asID: 264651
IP address blocks: 138.186.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192244 (0x217374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905680316617a29b241d379e0113b16e54308042
Validity
Not Before: Sep 6 19:04:03 2023 GMT
Not After : Sep 7 19:04:03 2025 GMT
Subject: CN=4c01450625cb94e0d939de0366f8223a8b9a40d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:ce:65:a6:b9:6d:25:bc:6e:2b:f4:bf:5e:
d7:ae:b5:c5:5d:dc:1d:8d:5d:16:ea:87:96:ba:0a:
84:51:d6:50:59:1d:94:0e:47:4a:f7:73:d5:26:93:
f4:5b:60:88:08:6a:05:7f:bc:10:d9:8f:ea:66:73:
6d:9b:6d:f5:9f:e0:49:f3:0f:8d:d2:27:3b:8f:cf:
cd:ee:53:90:3a:d8:c1:60:08:45:ad:20:16:ec:95:
ce:3d:f5:16:44:ee:4a:1c:c1:58:9f:fa:2d:63:09:
c1:f9:47:a4:85:8a:96:11:8c:c0:66:ed:1e:44:3c:
c0:f3:d1:73:75:03:67:48:b7:84:75:09:34:5e:92:
16:c9:87:d0:7d:8c:7c:59:46:eb:6e:b3:52:63:eb:
63:49:9e:b4:cf:fb:43:f8:ed:b7:f4:ff:ec:0a:08:
b4:46:b1:25:1c:2d:86:e8:5c:00:7a:14:19:03:22:
8a:7e:ea:d6:54:22:12:a6:61:8e:95:1e:df:08:38:
3f:19:41:9c:2d:28:47:a2:75:69:8e:69:bb:c4:c1:
90:82:05:fe:4a:37:52:19:bc:4a:d4:9e:5e:1e:5c:
f9:96:e3:91:4d:0b:c1:6e:ed:d4:0c:44:a0:f2:ba:
f3:6d:15:3e:8d:82:db:71:0b:59:89:18:0c:17:55:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:AB:41:BA:46:1D:D8:3C:97:AC:F8:36:6A:65:C7:F5:40:60:1E
X509v3 Authority Key Identifier:
keyid:89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/4c01450625cb94e0d939de0366f8223a8b9a40d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/905680316617a29b241d379e0113b16e54308042.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.148.0/22
Signature Algorithm: sha256WithRSAEncryption
58:00:4e:4c:2b:24:87:44:9f:05:26:b1:60:e2:1e:df:7b:ca:
82:c6:ec:46:28:d0:7c:4c:f6:03:5e:22:3f:ac:f3:09:1d:aa:
fe:36:50:69:75:b2:66:19:d5:fc:6b:22:fe:93:01:a3:5e:ba:
6b:66:d4:bf:f6:99:d1:2a:49:45:96:b3:31:73:05:13:41:a5:
f6:24:93:7b:b7:f8:3f:3d:63:1a:4f:29:21:63:e1:d7:c1:91:
b8:0b:24:78:90:7b:8d:20:58:fa:5d:7e:77:5f:b8:28:22:88:
f9:8d:f7:b7:a9:43:c4:8e:26:41:a7:5b:75:89:c4:f6:2c:66:
a2:ec:4c:5a:b3:93:0d:90:e4:0e:75:6e:eb:43:e6:0a:74:be:
f8:e3:bf:a1:90:8b:84:39:4c:ad:d0:60:8a:42:b4:84:ac:73:
6e:4e:cf:d0:ea:b5:89:64:0b:52:06:b6:3a:73:7c:9d:6c:de:
f2:22:b5:b6:22:bc:1d:7b:38:92:3f:5d:ca:9a:cc:25:9f:a5:
5e:86:3c:19:22:4e:cd:0a:97:12:4a:0f:79:7f:cd:18:4e:5a:
e3:aa:5d:58:75:94:31:58:ba:56:7e:8c:5d:87:1d:92:d8:82:
52:9f:18:c8:26:0e:c4:0c:48:b0:c6:f8:42:b3:ff:12:ab:e4:
3f:72:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 15:10:37 2023 by rpki-client on console-ams.rpki-client.org