Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/7247ed48912ca94c320268a6beac42d8973135a5.roa
File: 7247ed48912ca94c320268a6beac42d8973135a5.roa (raw, json)
Hash identifier: sOjpMpYDqsHoHxDThhBrjel6jOFKLxXpVNUOL9CKjIE=
Subject key identifier: CE:1B:90:74:14:E5:16:53:FD:A3:B6:1A:A5:3C:83:B8:FC:29:BA:96
Certificate issuer: /CN=905680316617a29b241d379e0113b16e54308042
Certificate serial: 210533
Authority key identifier: 89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/7247ed48912ca94c320268a6beac42d8973135a5.roa
Signing time: Thu 24 Aug 2023 15:42:40 +0000
ROA not before: Wed 23 Aug 2023 15:42:40 +0000
ROA not after: Sun 24 Aug 2025 15:42:40 +0000
asID: 264651
IP address blocks: 138.186.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164019 (0x210533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905680316617a29b241d379e0113b16e54308042
Validity
Not Before: Aug 23 15:42:40 2023 GMT
Not After : Aug 24 15:42:40 2025 GMT
Subject: CN=7247ed48912ca94c320268a6beac42d8973135a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:8a:e9:ad:66:48:7e:20:d4:e6:e6:ae:b7:
36:9b:ad:5e:f0:cf:b9:48:eb:1e:56:7b:76:c6:dc:
80:46:a8:6c:96:37:07:7b:e7:81:53:ba:0f:dc:18:
51:c2:3a:c3:77:b1:a8:e5:13:eb:3d:60:c4:73:f8:
a4:42:5b:8e:df:2d:2d:05:30:a2:be:2b:02:94:6f:
ca:ff:09:74:ba:8d:eb:79:f5:3c:bc:33:62:cc:53:
bf:c5:92:61:78:b7:75:20:d7:a6:33:f6:38:78:a7:
09:a7:65:68:e0:6d:ef:2e:67:36:a3:a7:c5:99:17:
c5:c2:16:f9:1a:ed:5f:9a:9a:65:51:6f:4c:c7:23:
72:a4:07:28:9a:28:c5:5d:ca:f9:0b:20:e6:00:88:
da:7c:d9:61:69:6a:ef:ce:98:07:4c:08:a3:7b:74:
05:ea:1d:c1:ea:dc:2c:b5:ef:74:c9:9b:42:6c:14:
49:3d:2f:9f:f8:1f:ff:93:fd:9f:c5:2c:aa:12:ad:
67:d5:09:ce:fb:01:87:ca:6e:7a:4a:d8:c5:11:37:
94:99:22:9e:b5:81:84:38:21:56:63:bc:29:76:0a:
82:d8:a1:da:e4:97:78:7e:b9:cc:e0:09:58:01:7a:
b4:50:01:47:b8:59:62:08:60:c5:fa:ad:76:c9:86:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1B:90:74:14:E5:16:53:FD:A3:B6:1A:A5:3C:83:B8:FC:29:BA:96
X509v3 Authority Key Identifier:
keyid:89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/7247ed48912ca94c320268a6beac42d8973135a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/905680316617a29b241d379e0113b16e54308042.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.148.0/22
Signature Algorithm: sha256WithRSAEncryption
29:69:e4:34:81:e3:45:8b:24:7a:b2:42:e3:75:2a:6f:d2:44:
bb:68:58:45:5a:be:f5:f3:e7:52:d9:28:00:3a:7e:9f:0f:4a:
1d:4e:3b:1d:2d:04:29:dd:bf:fa:21:f1:81:7d:a1:e5:31:d7:
90:0d:d4:36:6c:b4:0d:fc:dc:d7:30:b8:c2:96:b4:79:8b:01:
9d:84:29:75:bb:40:d0:23:a3:bd:be:c3:50:42:d3:0f:3c:13:
90:35:41:e9:d1:4b:90:2c:cc:8f:65:39:87:ec:d2:65:f4:80:
7b:d1:d0:38:eb:da:4c:df:1c:ed:24:3b:13:61:ce:7c:d4:9d:
11:5d:0d:37:2c:fd:32:92:1e:42:70:b5:78:5e:3f:b4:3c:4a:
ce:68:6f:7a:e3:33:48:6e:6c:d1:5f:09:d4:24:1c:97:5f:a7:
3c:d7:d8:d1:c8:da:1f:c2:0d:96:af:2d:f9:31:07:61:67:95:
a6:1b:ca:23:d3:5a:27:84:75:6f:cf:61:45:3b:7d:af:cd:f0:
b4:3b:e9:5a:7d:67:ac:83:3a:eb:6b:c5:5b:e6:b5:7c:8b:9d:
3f:ae:b1:c6:2a:79:2f:2a:63:fb:c6:bd:6f:29:bd:12:d9:16:
fd:77:95:65:49:a9:3d:cf:a7:57:59:f0:4a:65:62:18:ca:63:
e7:0f:c1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 19:36:37 2023 by rpki-client on console-fra.rpki-client.org