Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/8ac362280c9f8844551cb93759c3cb41d4511c22.roa
File: 8ac362280c9f8844551cb93759c3cb41d4511c22.roa (raw, json)
Hash identifier: uB2AXeuKgP4k/Fn9wI9+NFZ+GKFamDl/C9/Cr3CM2hk=
Subject key identifier: 2F:0A:CA:9E:9E:7D:CE:B4:93:AC:55:AF:22:63:EC:FF:26:79:2B:DF
Certificate issuer: /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial: 11ADA7
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/8ac362280c9f8844551cb93759c3cb41d4511c22.roa
Signing time: Mon 02 Aug 2021 22:31:34 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 61449
IP address blocks: 201.139.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158567 (0x11ada7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=8ac362280c9f8844551cb93759c3cb41d4511c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:8b:b1:dd:61:13:85:ae:45:60:c1:69:a4:
6c:f5:d4:a2:d4:e8:6f:e3:3f:01:8f:fe:95:31:0f:
60:d7:1b:a0:a5:14:8c:4a:9c:aa:e2:f0:43:49:d6:
85:d5:6c:2f:64:66:31:c3:47:8c:60:28:18:99:68:
fc:40:05:4e:e6:8f:d9:da:30:d7:af:c6:a9:46:2d:
ca:1a:38:91:36:9e:93:f7:2b:b4:f3:dd:00:35:bf:
75:d0:9e:29:8c:a2:5f:69:c6:0c:d2:c1:97:87:cd:
90:3a:9f:b5:1f:99:f7:5b:dc:3c:f6:26:9a:8d:c0:
6e:b1:54:35:73:98:43:05:41:54:a2:36:d6:c3:47:
c7:d2:2e:62:e6:7a:4a:52:42:3f:12:1a:67:bf:63:
06:e8:bb:0a:83:6c:cb:1f:4f:23:c0:1c:ce:9b:9b:
58:d9:6e:8d:86:03:df:76:83:d9:bc:27:18:70:e3:
e3:f5:ab:f0:21:7e:21:ce:49:65:84:9a:0d:36:8c:
32:89:bf:8a:95:a0:16:8a:63:89:12:52:d3:3d:04:
3c:ce:99:dc:1a:6f:2c:5a:55:77:6b:ae:f8:3f:39:
b9:7c:58:1b:fd:97:e2:49:53:7e:1e:76:72:b2:2e:
2e:06:f6:25:3a:6e:9a:f0:5e:be:06:27:73:0d:f1:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0A:CA:9E:9E:7D:CE:B4:93:AC:55:AF:22:63:EC:FF:26:79:2B:DF
X509v3 Authority Key Identifier:
keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/8ac362280c9f8844551cb93759c3cb41d4511c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.139.82.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c6:08:dc:cf:e0:52:d1:00:71:15:6e:a2:3e:fb:20:8b:4a:
30:20:6c:8d:29:af:3b:4d:70:78:a9:83:6c:62:36:e5:34:4d:
74:ce:e4:86:22:b6:de:10:64:ab:fd:e3:a9:95:ec:d0:53:f4:
e7:f8:c1:f2:9b:f1:c9:f4:4b:53:7b:a6:17:66:9a:7c:e1:c5:
fe:bb:6f:45:93:b5:03:a7:19:04:d6:0e:d8:a8:de:38:fb:7d:
f9:53:4e:cd:36:b4:63:c7:3d:66:9a:d5:f6:34:c0:d3:36:46:
0d:22:4b:b0:15:90:df:78:49:74:86:ee:03:b5:9c:13:e5:89:
5b:da:1f:37:1e:85:4f:9c:0a:fc:38:65:e6:fe:02:8f:4a:ac:
65:da:1d:64:9c:12:01:a6:cb:31:63:74:d4:94:6a:72:ce:b7:
ab:73:9e:78:d8:4f:07:fa:e8:04:37:60:1b:4b:54:ca:7e:f3:
5a:f6:12:17:a6:94:a7:95:05:9f:68:5e:27:62:cc:50:f2:17:
bb:8f:0c:49:e4:32:81:0f:8e:ef:bb:93:aa:4d:3c:d4:7f:15:
01:6a:d9:4d:ec:b2:0e:e9:9c:80:3d:1a:c0:e3:46:d5:45:99:
19:80:01:e2:bb:2e:d3:15:a1:c9:6b:0f:1d:b6:a1:61:40:19:
5b:a7:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org