Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/f5c5bbb1dbcbae695a1eeb206a63ffcee847cee5.roa
File: f5c5bbb1dbcbae695a1eeb206a63ffcee847cee5.roa (raw, json)
Hash identifier: HcCf81IkMgG/bbrVmLCNL2lrsWKilubuOvxnY2V20u4=
Subject key identifier: 23:CD:70:4B:A4:FD:51:00:DE:79:D0:9F:88:9F:43:F1:05:7A:18:D1
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 27A86E
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/f5c5bbb1dbcbae695a1eeb206a63ffcee847cee5.roa
Signing time: Mon 29 Jan 2024 17:39:04 +0000
ROA not before: Mon 29 Jan 2024 17:39:04 +0000
ROA not after: Thu 29 Jan 2026 17:39:04 +0000
asID: 52228
IP address blocks: 152.231.130.0/24 maxlen: 30
152.231.131.0/24 maxlen: 30
152.231.132.0/24 maxlen: 30
152.231.133.0/24 maxlen: 30
152.231.134.0/24 maxlen: 30
152.231.135.0/24 maxlen: 30
Validation: Failed, certificate revoked on Wed 31 Jan 2024 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599022 (0x27a86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Jan 29 17:39:04 2024 GMT
Not After : Jan 29 17:39:04 2026 GMT
Subject: CN=f5c5bbb1dbcbae695a1eeb206a63ffcee847cee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:ce:86:e0:09:18:1d:35:4c:2b:4c:9d:fe:
5b:18:37:43:b0:42:78:07:73:92:59:56:ba:bc:f8:
9b:51:5a:9e:e0:09:36:9e:3b:73:94:3e:e8:3f:92:
f0:51:70:91:16:d4:0d:4c:be:6f:c4:1c:33:7f:56:
6b:71:e4:ce:f4:9d:bb:57:85:1d:d0:fd:74:ac:f5:
26:77:6c:99:a5:a4:9c:ad:f3:91:9b:77:31:c2:b3:
cb:89:a7:a1:cd:be:48:39:07:7e:52:92:46:d9:d7:
5d:c2:fd:4d:d8:28:08:3d:10:8f:ba:fd:4a:b4:19:
b7:4e:93:b4:e4:51:fe:6e:5b:9d:cb:b8:c3:f1:1f:
a3:61:9f:02:07:24:f7:02:ab:92:be:e7:f5:eb:e8:
7d:83:2e:8c:05:e0:0d:27:f6:5e:57:41:18:68:99:
83:50:4a:eb:64:56:c1:a3:ef:0a:bc:af:68:3b:6c:
5e:2b:10:4a:ae:13:7d:c4:f1:4a:98:a5:5d:b5:51:
51:45:fe:cb:3b:8f:82:3c:ff:e1:a3:91:04:6c:a1:
ac:1e:7b:f8:00:cc:fb:1c:19:5d:e4:f5:87:ab:3e:
2f:33:51:86:ed:a6:79:8d:0f:55:50:18:e8:4a:07:
9f:99:81:10:d8:b5:a9:9f:fe:ef:3e:20:c7:bb:0d:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:70:4B:A4:FD:51:00:DE:79:D0:9F:88:9F:43:F1:05:7A:18:D1
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/f5c5bbb1dbcbae695a1eeb206a63ffcee847cee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.130.0-152.231.135.255
Signature Algorithm: sha256WithRSAEncryption
53:85:d6:84:5d:da:a9:19:a9:04:86:13:22:1d:59:83:7e:36:
50:55:cb:7e:a0:df:34:39:43:48:41:b1:a0:d2:da:ff:16:bf:
68:d0:98:b6:56:e3:70:e7:7b:70:d8:7e:ad:30:c4:8e:79:c6:
da:0d:ff:9f:20:75:f7:f2:a0:ff:6b:11:f8:8b:47:cd:5e:3a:
34:ed:81:2a:52:e2:e6:6f:15:3a:21:fb:8d:43:cc:f6:4b:02:
74:62:39:dd:fd:42:ca:f0:eb:37:e8:93:46:52:9d:63:85:2e:
bf:67:24:09:61:1e:da:d4:08:35:71:b4:77:f2:1d:fb:c8:6c:
c0:2d:b5:96:80:68:47:0e:57:65:65:0c:5f:bb:28:1e:e8:a1:
85:f9:37:04:ec:55:ec:b8:f3:07:66:99:7c:76:b9:72:da:31:
00:64:31:f7:ec:e9:96:1e:d2:23:16:5c:9d:ce:fb:90:9f:cf:
ad:69:9b:4b:83:3c:26:d4:49:ba:ab:3f:1b:43:94:78:e2:50:
9e:e6:be:33:84:f6:ec:34:dd:f1:3e:21:dc:19:f5:b8:c2:5c:
fd:92:86:43:f0:b9:3b:a6:14:82:81:fe:d1:c8:12:7c:da:a8:
54:0f:3f:51:ee:ee:c7:10:59:e9:e4:b2:28:0f:5f:d9:e2:b5:
cd:4b:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:16:36 2024 by rpki-client on console-fra.rpki-client.org