Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/e21bafe8e0cd137bd261a3365c0dbfc881b270c6.roa
File: e21bafe8e0cd137bd261a3365c0dbfc881b270c6.roa (raw, json)
Hash identifier: Ysz2TFTOtmLmoogiNll9/BTpvOyi8PwLS3pEHW+Jp1M=
Subject key identifier: 8D:B8:D4:0D:63:6E:26:FE:4C:16:28:49:B4:C2:AF:A6:7F:9A:55:A8
Certificate issuer: /CN=bb249362b2b5e6169b9d9b8b997b473f12a6d82f
Certificate serial: 053F
Authority key identifier: AA:70:71:B4:9A:2B:61:48:2D:EE:A1:33:B3:6D:E5:1D:93:B4:38:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/e21bafe8e0cd137bd261a3365c0dbfc881b270c6.roa
Signing time: Thu 21 Oct 2021 17:39:20 +0000
ROA not before: Thu 21 Oct 2021 03:00:00 +0000
ROA not after: Sat 21 Oct 2023 03:00:00 +0000
asID: 52420
IP address blocks: 152.231.48.0/20 maxlen: 24
201.220.144.0/20 maxlen: 24
2803:a900::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1343 (0x53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb249362b2b5e6169b9d9b8b997b473f12a6d82f
Validity
Not Before: Oct 21 03:00:00 2021 GMT
Not After : Oct 21 03:00:00 2023 GMT
Subject: CN=e21bafe8e0cd137bd261a3365c0dbfc881b270c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:c0:98:b3:43:0a:af:f9:42:2f:08:a6:80:
cb:96:92:85:97:b6:c7:05:fb:4e:ee:6a:1e:eb:30:
17:ae:5e:35:4c:2d:5b:2a:de:fc:2c:5a:e5:27:96:
83:74:ba:58:d9:55:19:80:d3:69:f7:69:37:01:70:
9a:91:a6:99:38:d2:41:8d:c8:81:41:e4:20:95:81:
36:d8:a6:a7:e8:4d:92:da:71:9f:0a:9b:bf:dd:71:
7e:8b:9e:98:29:c7:11:24:60:8e:bf:17:a7:63:9a:
ef:08:67:97:a2:b3:99:7f:fc:64:9a:ac:b6:ee:6e:
14:68:21:0c:49:04:47:7a:80:b1:70:c3:b7:11:ba:
81:1e:c8:ab:23:4f:90:be:39:f9:c7:e1:21:18:8f:
fc:cc:c9:02:24:13:ef:ab:cd:c8:4f:2a:46:04:db:
3a:b5:a9:25:44:02:da:2a:bd:4c:20:3c:54:4b:d1:
38:28:be:57:91:48:ea:e0:89:d7:1e:f4:f4:96:ba:
96:33:a5:61:3a:e8:d6:a4:fd:1b:5c:6d:5f:e7:a0:
e0:62:e4:85:f4:19:f4:e9:da:5f:48:f0:cf:f3:00:
96:bf:70:14:18:ac:14:9a:7f:19:a2:49:fc:45:83:
7b:f8:cf:19:7c:52:b7:57:55:9e:ee:b5:3c:f6:6d:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B8:D4:0D:63:6E:26:FE:4C:16:28:49:B4:C2:AF:A6:7F:9A:55:A8
X509v3 Authority Key Identifier:
keyid:AA:70:71:B4:9A:2B:61:48:2D:EE:A1:33:B3:6D:E5:1D:93:B4:38:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/e21bafe8e0cd137bd261a3365c0dbfc881b270c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a599822-d8af-4376-b9db-aa3e6843c681/bb249362b2b5e6169b9d9b8b997b473f12a6d82f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.48.0/20
201.220.144.0/20
IPv6:
2803:a900::/32
Signature Algorithm: sha256WithRSAEncryption
2a:8a:38:3d:8f:e6:e4:20:ed:3f:7d:f3:86:34:ca:58:8e:6f:
ac:b0:f8:b1:be:c7:0c:ae:22:2f:d6:d1:7b:1a:7c:3d:74:8a:
bb:1b:fa:9f:cc:b0:51:3f:57:cb:1b:93:5c:f4:8f:ec:a0:1d:
dd:20:1f:ea:18:0f:88:a5:79:3b:80:6b:dd:7f:4e:f1:e1:55:
8f:5e:2c:ff:cf:14:97:34:b5:ad:f1:a1:f5:dd:cb:93:3a:c8:
cc:8d:73:05:d4:1e:f3:92:0b:c1:60:08:eb:51:97:34:ef:f9:
53:4a:e1:0f:4d:03:fd:31:15:9b:8d:23:90:c0:fd:df:01:ec:
df:e2:10:28:a3:13:16:1e:4b:3a:3c:17:9f:50:8a:0b:09:80:
1d:7f:df:9b:25:4f:b3:68:0c:bf:00:1c:bb:dd:41:7f:da:af:
b9:95:3a:04:5f:f9:6a:5b:c7:85:d3:97:ef:89:03:a9:fc:a9:
ed:3d:a4:82:91:07:6e:97:2d:44:2e:21:bc:dc:e0:5c:3e:2b:
b8:d9:0c:85:e2:74:7e:87:3a:66:5c:3a:1f:7f:9e:b8:80:9b:
5a:8a:ce:24:b3:2a:57:84:88:f5:b5:78:89:69:ce:df:6d:ce:
5f:a2:21:1c:67:90:a4:4e:55:00:cf:df:f3:30:b4:69:da:fe:
05:03:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org