Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/eef926d21a974e917e9683e543f4e618f2255fb7.roa
File: eef926d21a974e917e9683e543f4e618f2255fb7.roa (raw, json)
Hash identifier: 1W/CBkwFXlCnwdq1ZrVyYWK/p+mXyB0tgaVJDrlN2WU=
Subject key identifier: E7:C2:68:D2:45:72:D6:A6:8E:42:7C:C4:D8:6D:0E:F5:62:3A:EE:9E
Certificate issuer: /CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
Certificate serial: 1AA9BF
Authority key identifier: F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/eef926d21a974e917e9683e543f4e618f2255fb7.roa
Signing time: Sat 22 Apr 2023 08:30:02 +0000
ROA not before: Fri 21 Apr 2023 08:30:02 +0000
ROA not after: Sun 20 Apr 2025 08:30:02 +0000
asID: 263814
IP address blocks: 138.219.16.0/24 maxlen: 24
138.219.17.0/24 maxlen: 24
138.219.18.0/24 maxlen: 24
138.219.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747391 (0x1aa9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
Validity
Not Before: Apr 21 08:30:02 2023 GMT
Not After : Apr 20 08:30:02 2025 GMT
Subject: CN=eef926d21a974e917e9683e543f4e618f2255fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:27:e9:1c:73:e0:d5:5d:d4:6e:e4:9c:07:
47:ea:8d:9e:88:0c:f9:18:ac:94:06:e9:98:2f:57:
27:7c:ed:e2:d5:b9:80:f5:68:80:f1:97:cf:66:08:
26:6f:ae:7c:e4:7a:a3:d0:0e:2a:04:8d:50:91:7a:
98:36:57:ba:65:f6:36:0e:51:43:1e:b9:24:21:19:
80:78:94:38:64:ce:f4:2b:3f:c7:8a:0f:3a:1e:ac:
ad:33:87:cc:fc:16:8d:bb:52:15:d0:a0:9e:fe:46:
ed:8c:a9:2d:a4:33:49:a8:dd:0f:74:66:a4:0d:e3:
87:11:4a:07:25:13:26:34:0a:00:d1:98:8f:da:4d:
3f:93:13:b5:0f:df:dc:df:96:4a:e8:07:8f:ca:ab:
46:f9:00:cb:37:93:a8:25:21:bc:21:01:97:70:31:
ec:49:63:b5:8f:c1:9d:11:20:cb:92:0d:15:d1:2b:
a7:6d:96:a4:6e:d5:b2:f8:13:0e:4d:c0:1f:fa:0f:
7d:4e:15:71:c3:31:4a:9f:ab:73:51:b1:72:8a:15:
4f:e6:f3:19:1e:6e:45:65:27:2c:b4:a3:57:4a:c4:
ae:01:6f:94:05:99:01:ad:c9:67:62:d5:46:70:c9:
2f:f8:47:b1:b8:08:c1:4c:af:74:f5:3f:fd:20:8c:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C2:68:D2:45:72:D6:A6:8E:42:7C:C4:D8:6D:0E:F5:62:3A:EE:9E
X509v3 Authority Key Identifier:
keyid:F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/eef926d21a974e917e9683e543f4e618f2255fb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.16.0/22
Signature Algorithm: sha256WithRSAEncryption
57:c4:05:5b:97:d9:1a:2f:17:71:fd:91:1b:03:ec:6c:2d:df:
12:40:1e:67:98:19:1d:2c:2e:57:1c:e4:f1:83:a1:5d:6a:63:
88:3a:a3:df:93:ca:63:fa:a9:b8:71:2a:42:35:51:28:45:93:
9e:fd:fb:86:61:ae:3e:ca:d6:b4:46:38:c9:d3:3a:3e:24:e4:
19:6c:e7:7d:25:67:17:dd:25:15:f6:12:04:e7:46:d3:eb:d4:
f2:df:96:9d:f0:a3:59:d6:a5:a3:17:51:39:64:4e:49:e3:f7:
4f:cf:32:82:a8:14:0a:1f:fb:9a:f0:02:9d:c9:bb:59:dc:d1:
20:c2:c3:dd:75:3c:5c:ed:fb:df:78:3b:e4:b0:ca:62:b5:be:
af:65:e9:05:8f:02:90:0d:ca:84:22:20:2f:e6:6a:51:eb:dd:
e9:d5:eb:c9:fe:59:11:3c:cb:95:77:34:50:c0:6a:45:13:f8:
6a:b8:22:e3:f1:ec:bb:51:3f:8c:3a:93:b4:65:cc:ea:ca:3f:
39:2e:2c:a5:b3:81:05:0f:c4:18:bc:1d:c4:72:be:86:a3:dd:
7a:dc:b2:0b:f7:18:d3:7b:ba:66:f4:d3:67:8a:dd:d9:c0:88:
1e:35:30:d3:67:e8:8e:3e:00:12:da:db:4a:99:78:f7:83:4c:
31:69:ce:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGqm/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
Y2M1ZTMxZmYxZmQ4YmZkNDQ5YjAxMzc4NTg5ODdmNmRiMDNkNGMwHhcNMjMwNDIx
MDgzMDAyWhcNMjUwNDIwMDgzMDAyWjAzMTEwLwYDVQQDEyhlZWY5MjZkMjFhOTc0
ZTkxN2U5NjgzZTU0M2Y0ZTYxOGYyMjU1ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4Vwn6Rxz4NVd1G7knAdH6o2eiAz5GKyUBumYL1cnfO3i1bmA
9WiA8ZfPZggmb6585Hqj0A4qBI1QkXqYNle6ZfY2DlFDHrkkIRmAeJQ4ZM70Kz/H
ig86HqytM4fM/BaNu1IV0KCe/kbtjKktpDNJqN0PdGakDeOHEUoHJRMmNAoA0ZiP
2k0/kxO1D9/c35ZK6AePyqtG+QDLN5OoJSG8IQGXcDHsSWO1j8GdESDLkg0V0Sun
bZakbtWy+BMOTcAf+g99ThVxwzFKn6tzUbFyihVP5vMZHm5FZScstKNXSsSuAW+U
BZkBrclnYtVGcMkv+EexuAjBTK909T/9IIx3pwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOfCaNJFctamjkJ8xNhtDvViOu6eMB8GA1UdIwQYMBaAFPnemvAbqJHf88g9
N9pAJmTfWzZ3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVjYzVl
MzFmZjFmZDhiZmQ0NDliMDEzNzg1ODk4N2Y2ZGIwM2Q0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjRiY2EyNmQtM2QyNC00NWI2LTg3YTEtYThiZTcy
ZjBhZjVhL2VlZjkyNmQyMWE5NzRlOTE3ZTk2ODNlNTQzZjRlNjE4ZjIyNTVmYjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNGJjYTI2ZC0zZDI0LTQ1YjYtODdhMS1hOGJl
NzJmMGFmNWEvMTVjYzVlMzFmZjFmZDhiZmQ0NDliMDEzNzg1ODk4N2Y2ZGIwM2Q0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAorbEDANBgkqhkiG9w0BAQsFAAOCAQEAV8QFW5fZGi8Xcf2R
GwPsbC3fEkAeZ5gZHSwuVxzk8YOhXWpjiDqj35PKY/qpuHEqQjVRKEWTnv37hmGu
PsrWtEY4ydM6PiTkGWznfSVnF90lFfYSBOdG0+vU8t+WnfCjWdaloxdROWROSeP3
T88ygqgUCh/7mvACncm7WdzRIMLD3XU8XO3733g75LDKYrW+r2XpBY8CkA3KhCIg
L+ZqUevd6dXryf5ZETzLlXc0UMBqRRP4argi4/Hsu1E/jDqTtGXM6so/OS4spbOB
BQ/EGLwdxHK+hqPdetyyC/cY03u6ZvTTZ4rd2cCIHjUw02fojj4AEtrbSpl494NM
MWnO7A==
-----END CERTIFICATE-----
Generated at Mon Oct 2 15:55:12 2023 by rpki-client on console-fra.rpki-client.org