Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/97b49a4dd68a00e5475b77db10799ef01085e64f.roa
File: 97b49a4dd68a00e5475b77db10799ef01085e64f.roa (raw, json)
Hash identifier: WQFn40g3n6M4sGx5QJA/j2DkKk0e4mh1kh7hnU9upGM=
Subject key identifier: 07:11:92:F2:2D:D9:6D:46:ED:19:06:1A:2E:4D:4C:71:41:02:C5:2D
Certificate issuer: /CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
Certificate serial: 22211F
Authority key identifier: 73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/97b49a4dd68a00e5475b77db10799ef01085e64f.roa
Signing time: Wed 05 Jul 2023 01:48:52 +0000
ROA not before: Tue 04 Jul 2023 01:48:52 +0000
ROA not after: Sat 05 Jul 2025 01:48:52 +0000
asID: 52468
IP address blocks: 131.196.12.0/23 maxlen: 23
131.196.14.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236703 (0x22211f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
Validity
Not Before: Jul 4 01:48:52 2023 GMT
Not After : Jul 5 01:48:52 2025 GMT
Subject: CN=97b49a4dd68a00e5475b77db10799ef01085e64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:8b:58:01:09:7f:ba:b0:77:40:c5:70:20:
f8:ee:76:79:b9:c6:50:7a:79:e3:73:7d:ae:f1:9c:
09:6d:ff:a1:05:0b:a5:19:fe:e6:77:90:e3:3d:ba:
9e:5e:21:13:1e:eb:d3:dc:cd:bd:27:5e:06:05:9a:
ca:3a:c7:42:ab:cc:82:e4:75:ff:4e:0f:a7:5f:25:
72:bb:e8:42:5f:27:3e:a7:db:5f:42:09:6f:17:50:
35:ec:26:94:78:12:79:5c:49:d2:c9:5c:a3:80:72:
02:4b:0b:f8:a8:c3:3a:2b:b2:f0:f8:6e:4a:47:d8:
93:a6:64:02:00:00:95:c2:fa:f3:70:e9:da:c0:04:
97:8e:9e:87:99:e3:f7:77:5a:c7:77:03:d4:59:71:
4c:a0:38:2d:4f:bc:99:f8:28:75:85:2e:f3:c2:43:
8a:69:ee:d1:29:2c:09:9b:d6:7f:1c:48:4a:18:2b:
90:5f:8d:fa:0d:4a:ce:55:cb:43:90:78:52:e5:f0:
3c:7d:7b:61:f6:68:f2:62:ce:da:4f:76:4b:8f:84:
e7:85:3d:de:7e:86:3b:64:a7:b0:08:c8:9e:c4:c2:
b2:db:d7:6b:95:a1:16:47:1f:ff:47:dd:0b:ee:bd:
2a:66:b9:4f:d6:89:50:3b:85:92:09:03:51:3d:2e:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:92:F2:2D:D9:6D:46:ED:19:06:1A:2E:4D:4C:71:41:02:C5:2D
X509v3 Authority Key Identifier:
keyid:73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/97b49a4dd68a00e5475b77db10799ef01085e64f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.12.0/22
Signature Algorithm: sha256WithRSAEncryption
29:4c:b4:26:de:8f:6a:4a:4d:b3:67:cf:0b:7b:a5:d7:f4:d5:
f3:5f:11:fd:2b:2a:94:eb:0b:0e:20:09:9f:05:b1:df:5b:5d:
83:e2:45:9d:5f:ab:14:ec:11:9a:46:18:9b:7a:50:e2:42:bd:
4f:bc:a7:8f:31:0c:cf:4e:ea:0e:77:84:fe:d0:d3:15:85:af:
05:fb:a0:d8:9c:d9:73:88:68:ae:64:93:98:6c:2a:4b:0b:6a:
de:3a:c1:db:2e:b7:e5:ba:19:2b:7b:78:1f:45:07:c9:7d:dc:
53:31:6c:0d:e4:49:8b:76:be:c6:9d:48:16:db:b5:8d:12:08:
71:e5:25:c7:45:9d:02:d0:78:4f:74:4b:ef:ef:31:1f:b0:5b:
0a:ae:7d:12:c4:8b:5f:fe:48:e1:c9:6d:de:94:f7:9c:cf:e1:
d6:49:7b:fb:6a:3f:c3:c1:fa:5a:78:bf:2a:9b:35:33:b1:16:
94:ef:1d:8e:4e:16:71:75:ed:3a:b2:c8:86:6c:32:02:3a:4f:
b0:97:6e:a8:80:51:84:ab:ff:70:f2:4b:bd:27:c9:c6:26:ff:
c5:3c:47:52:03:d2:33:88:92:29:71:3c:d2:9e:05:77:eb:15:
3b:98:a8:bb:a7:67:25:75:fd:23:47:ee:8c:53:b3:68:69:6c:
b5:a1:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org