Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/afd67e7bd0e69f3641d327d94399ed4080e5b62e.roa
File: afd67e7bd0e69f3641d327d94399ed4080e5b62e.roa (raw, json)
Hash identifier: x1mrLzN5a7ZiG1AL5a3dehAtTqSLWQsnCSKAM5/5Y0A=
Subject key identifier: 84:66:2D:DA:9C:FE:8D:50:F4:DD:FC:2E:1D:1C:C2:61:4C:0E:7A:A8
Certificate issuer: /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial: 118981
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/afd67e7bd0e69f3641d327d94399ed4080e5b62e.roa
Signing time: Mon 02 Aug 2021 22:26:50 +0000
ROA not before: Mon 02 Aug 2021 03:00:00 +0000
ROA not after: Sun 02 Aug 2026 03:00:00 +0000
asID: 61449
IP address blocks: 138.186.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149313 (0x118981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Validity
Not Before: Aug 2 03:00:00 2021 GMT
Not After : Aug 2 03:00:00 2026 GMT
Subject: CN=afd67e7bd0e69f3641d327d94399ed4080e5b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:6e:2a:ef:90:b2:72:05:74:ac:67:68:0c:
59:5d:65:87:c7:3c:b6:7f:8a:dc:20:71:6e:c1:ca:
b8:b6:9a:e8:56:79:10:0e:1f:bd:2c:1b:1a:9b:1a:
ee:8d:28:b0:43:9c:b3:95:35:ed:54:41:b3:de:20:
9a:22:47:b2:84:c9:63:b6:e2:7b:1d:0e:bf:5c:4f:
a7:b2:fd:6e:fb:3f:1d:72:9a:ff:eb:0c:92:7e:09:
0a:7a:cf:89:96:74:06:26:bd:f3:3a:ac:d3:fe:15:
1c:4e:a3:01:ba:a4:b6:e1:04:a4:79:0b:15:f9:ad:
09:65:a7:22:cf:23:8c:ec:dd:dc:81:0b:95:d8:11:
26:9b:dc:6e:f1:8d:a6:49:17:27:3f:31:2e:0d:e4:
29:95:74:2b:06:84:82:28:a5:3c:b4:ef:3a:87:72:
3f:e6:23:43:66:35:fe:55:49:da:0b:35:40:6e:47:
56:53:7a:1c:11:a3:5d:39:75:21:cd:b5:e0:91:58:
a4:e4:54:de:0e:af:33:93:8c:be:1a:11:1d:c7:3f:
c0:02:f1:cc:12:9b:41:21:c4:af:d7:11:2a:d4:1d:
4a:ff:f2:1b:7c:18:77:e1:0c:67:53:03:e1:0e:b0:
af:ae:1c:e9:cd:2c:89:21:0c:89:de:8b:67:86:6e:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:66:2D:DA:9C:FE:8D:50:F4:DD:FC:2E:1D:1C:C2:61:4C:0E:7A:A8
X509v3 Authority Key Identifier:
keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/afd67e7bd0e69f3641d327d94399ed4080e5b62e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:49:37:e1:5f:7e:7c:83:38:37:5c:03:70:2e:f7:0e:ae:dd:
5e:9a:3f:d3:95:70:2b:28:6b:c5:98:cf:97:ce:3c:2e:9f:c8:
36:47:5e:87:94:bd:98:63:aa:b7:e4:2b:7b:e1:e9:be:ae:a9:
48:5b:07:87:90:b1:91:ca:c8:fe:33:d5:77:ce:0a:33:d3:60:
5d:7b:18:fc:98:61:93:9c:54:9c:e3:f1:58:8a:a5:ed:74:55:
54:c5:1a:b2:55:07:e0:62:82:8d:2f:e7:d1:cf:ee:25:9c:5c:
6c:11:d9:25:34:b8:b3:77:0f:6b:9a:81:df:70:67:22:e4:0a:
5f:1f:35:75:c1:c6:50:94:c8:a8:4d:20:13:e8:69:88:63:20:
9d:9a:83:31:af:cb:17:fc:ef:2b:4b:0d:45:c4:76:a9:c5:a3:
71:5c:9e:e2:9e:b8:9a:32:ab:26:ac:73:c6:d0:fe:ab:7d:6c:
f0:26:1b:b7:2d:05:9c:16:76:77:6d:b7:c5:c1:fd:d8:70:d8:
91:15:ca:be:c2:57:e4:64:53:10:63:f2:07:de:3b:b1:09:78:
f6:0e:65:5c:10:51:14:c2:2b:1e:81:2d:5c:96:0e:bc:e0:65:
e3:a0:85:90:1f:6b:2c:5a:4a:1b:2d:a9:a0:ed:4d:f0:a1:22:
c0:a4:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org