Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/8860ed788ac8a2847bb833583a48a5ccccc0946a.roa
File: 8860ed788ac8a2847bb833583a48a5ccccc0946a.roa (raw, json)
Hash identifier: SwccZ49Qg3cPDPMqeV2TtKspyVgGC4pcF5WLY5pdXSI=
Subject key identifier: D9:E8:35:C9:DF:7A:2F:3E:40:42:08:BB:15:8D:61:6D:B2:F6:9F:CC
Certificate issuer: /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial: 21A1BC
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/8860ed788ac8a2847bb833583a48a5ccccc0946a.roa
Signing time: Tue 13 Jun 2023 23:34:41 +0000
ROA not before: Mon 12 Jun 2023 23:34:41 +0000
ROA not after: Fri 13 Jun 2025 23:34:41 +0000
asID: 263244
IP address blocks: 138.99.184.0/22 maxlen: 24
170.247.140.0/22 maxlen: 24
190.106.32.0/21 maxlen: 24
131.72.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204092 (0x21a1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Validity
Not Before: Jun 12 23:34:41 2023 GMT
Not After : Jun 13 23:34:41 2025 GMT
Subject: CN=8860ed788ac8a2847bb833583a48a5ccccc0946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:0c:7b:25:ae:f5:9e:16:8d:a7:7b:97:a6:
ac:b6:89:58:1f:e0:d1:a9:18:22:53:48:33:9c:f7:
8b:37:5e:08:d9:df:96:74:00:26:26:a0:d4:cc:2b:
3c:fc:07:ca:eb:69:18:2a:87:3c:09:e6:63:b4:93:
44:10:02:11:72:08:02:ee:4a:34:30:b7:d2:09:a5:
12:26:8f:bd:33:ef:56:0a:bd:ec:fa:30:2e:43:f1:
a4:10:26:43:83:d9:e2:bf:5d:ab:64:6b:bf:c2:a6:
71:ec:4e:b9:02:18:1d:89:ef:02:ec:5a:03:4d:3c:
e2:cc:92:df:71:4a:99:3a:f3:86:63:49:2b:67:f5:
89:82:16:1c:7a:a9:a1:92:99:87:29:e2:12:3a:a4:
89:f8:dd:b0:3a:fc:23:c1:2e:63:89:a2:98:d6:4e:
8a:de:4e:b6:5a:31:49:d2:d5:cf:7a:69:5e:e7:b1:
c3:65:b7:ca:2c:d3:0c:13:d7:14:8f:d1:fe:1b:a0:
ba:a3:3d:80:86:c9:1a:e3:f4:19:e4:06:c6:58:4b:
fd:d8:6e:f2:28:9a:da:14:bf:04:61:a6:fa:1b:af:
cd:ef:a0:c6:38:11:cf:4b:9c:fd:88:35:d9:b1:04:
3c:72:33:e4:73:42:40:58:dc:1f:71:5f:54:8f:60:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:35:C9:DF:7A:2F:3E:40:42:08:BB:15:8D:61:6D:B2:F6:9F:CC
X509v3 Authority Key Identifier:
keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/8860ed788ac8a2847bb833583a48a5ccccc0946a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.132.0/22
138.99.184.0/22
170.247.140.0/22
190.106.32.0/21
Signature Algorithm: sha256WithRSAEncryption
38:22:e8:f0:3b:34:6f:f6:b5:de:80:82:3c:78:39:4a:95:ff:
4f:9b:3d:79:f9:83:e5:c0:17:c4:f6:22:1d:18:8d:25:8c:74:
84:d2:16:1b:f6:22:4e:04:27:8b:d7:92:a6:c4:ff:bd:5c:83:
61:ec:4f:42:66:c0:35:59:6d:1e:82:53:7d:c5:4d:67:f8:a4:
4a:52:51:fc:05:a7:df:ed:d3:73:a2:42:52:7b:0e:05:39:dc:
82:f6:f8:3a:61:cd:2e:8f:77:5a:b0:bf:2b:bb:ca:80:12:70:
fc:c2:4a:61:84:90:14:c5:2e:4e:6d:47:fc:b5:37:a3:00:56:
1e:2f:fd:53:9c:92:20:58:5c:c5:45:13:5c:a5:7f:63:b3:5f:
60:fc:58:a4:bb:d3:9a:24:81:91:67:c9:08:d9:23:fa:0b:17:
7f:f9:82:b1:ec:67:bf:ed:53:a4:4b:09:4c:b7:17:61:3d:34:
c0:d7:6c:12:e6:47:97:9d:b2:5c:c7:24:e8:58:cf:1f:e9:7e:
f8:c6:87:47:c6:9b:8d:1f:34:0a:d6:61:d2:08:9c:c9:50:1a:
b3:cc:53:46:dd:2c:8d:1f:04:ec:8c:8e:01:6e:e2:1a:67:ac:
6f:31:17:25:7c:23:81:2d:13:5c:aa:52:24:86:02:d6:d5:76:
e5:59:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 17:26:34 2023 by rpki-client on console-ams.rpki-client.org