Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/98b09c6ebbfa3c978c67736ca36660ee6716c6fe.roa
File: 98b09c6ebbfa3c978c67736ca36660ee6716c6fe.roa (raw, json)
Hash identifier: 4obtdXioJWsFQUV7mUepvmiLWmBEzNeNvQQdW9rkzEg=
Subject key identifier: 27:E0:82:31:FF:6F:C0:66:2A:F7:22:DF:7E:2A:B5:06:00:3B:AD:C3
Certificate issuer: /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial: 0D60BF
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/98b09c6ebbfa3c978c67736ca36660ee6716c6fe.roa
Signing time: Wed 24 Mar 2021 14:28:40 +0000
ROA not before: Wed 24 Mar 2021 14:28:39 +0000
ROA not after: Tue 24 Mar 2026 14:28:39 +0000
asID: 52308
IP address blocks: 138.118.36.0/22 maxlen: 22
170.84.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876735 (0xd60bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
Validity
Not Before: Mar 24 14:28:39 2021 GMT
Not After : Mar 24 14:28:39 2026 GMT
Subject: CN=98b09c6ebbfa3c978c67736ca36660ee6716c6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:16:46:79:1c:d5:7b:3c:39:bb:7b:f3:f9:
7b:2c:b3:79:13:f1:cd:48:b1:ac:28:19:33:df:b4:
4a:79:80:f8:80:3b:40:fb:92:fc:95:11:e2:d5:d5:
b0:4e:43:da:d1:22:20:e6:45:a0:b5:4d:29:4a:97:
4d:61:b4:f7:0d:f7:be:20:06:1a:bd:4d:64:37:b9:
11:49:4e:a5:2f:24:21:bc:07:ca:e7:b1:2d:77:d9:
9e:dc:e3:be:78:9f:2e:49:a2:7b:57:b6:ee:f3:6f:
73:cf:b4:9c:83:15:9c:43:9e:3b:a2:fa:a7:da:c8:
fc:40:7f:5a:bd:09:70:d4:54:34:16:07:b9:0a:31:
41:50:c9:4a:ce:54:db:20:da:6a:96:ff:14:85:95:
18:8b:10:54:10:6c:a1:f0:23:97:80:3a:a3:7d:eb:
5b:4a:e1:b3:4f:d3:5a:a7:8e:59:0f:56:fb:0b:65:
a2:aa:67:59:4d:11:8d:c5:75:3b:bf:9c:21:d1:59:
89:7d:44:98:36:d9:58:4b:9f:ae:62:e2:89:02:94:
41:92:9c:33:d0:ca:4c:81:6e:e4:74:7e:81:9f:20:
9a:69:f6:d7:92:dd:af:6f:d7:ce:a8:3c:9f:be:b3:
f2:ae:79:17:c4:d3:e7:5e:48:51:54:f7:ba:d7:b8:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:82:31:FF:6F:C0:66:2A:F7:22:DF:7E:2A:B5:06:00:3B:AD:C3
X509v3 Authority Key Identifier:
keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/98b09c6ebbfa3c978c67736ca36660ee6716c6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.36.0/22
170.84.168.0/22
Signature Algorithm: sha256WithRSAEncryption
17:31:94:46:11:e2:a9:64:3a:00:4e:aa:13:77:70:2c:51:21:
1f:89:57:74:b7:65:ca:1b:5b:92:64:aa:e3:50:b9:1a:a3:39:
6e:5e:23:77:46:51:69:dc:d5:2e:32:d9:f4:da:d0:6b:88:1e:
11:22:23:6b:5e:d1:a4:95:a4:35:29:7c:fb:6d:ac:43:29:c4:
70:5f:c5:fb:6a:cd:82:fa:47:a0:8e:32:43:b2:1b:5b:31:67:
82:d0:ec:45:c2:96:fe:7a:1c:2f:b5:eb:6e:7c:89:b7:81:3f:
fe:d8:20:3c:4b:32:96:d8:ed:17:cc:98:d3:8f:1d:94:24:f0:
c8:0f:2a:82:f7:b6:11:43:a2:96:d5:c6:c9:0e:38:b3:cf:a3:
fa:bf:be:e2:b2:94:1d:54:3f:ce:3c:ff:b7:77:59:99:85:44:
da:9a:c0:2e:3b:66:dc:6e:2a:cb:c6:28:be:10:89:c0:b3:b0:
e9:f7:c1:f9:e5:af:c0:ee:4f:1e:07:ec:2a:14:8f:11:64:2a:
ed:d1:0b:db:19:37:b2:92:d0:be:39:8f:36:a7:a8:b0:77:42:
5f:10:7e:7a:24:c7:da:83:3c:c0:ca:d6:3a:89:4c:fb:eb:6b:
9c:4d:4c:d9:b5:74:54:f7:1a:31:bc:b8:92:e0:8b:a7:9f:28:
12:b6:08:ab
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDWC/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYy
Y2JiYjc5MmZmNDJmYTcxODYxOTUwN2E1MDY2Mzc5ODA1NTY0M2IwHhcNMjEwMzI0
MTQyODM5WhcNMjYwMzI0MTQyODM5WjAzMTEwLwYDVQQDEyg5OGIwOWM2ZWJiZmEz
Yzk3OGM2NzczNmNhMzY2NjBlZTY3MTZjNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlRYWRnkc1Xs8Obt78/l7LLN5E/HNSLGsKBkz37RKeYD4gDtA
+5L8lRHi1dWwTkPa0SIg5kWgtU0pSpdNYbT3Dfe+IAYavU1kN7kRSU6lLyQhvAfK
57Etd9me3OO+eJ8uSaJ7V7bu829zz7ScgxWcQ547ovqn2sj8QH9avQlw1FQ0Fge5
CjFBUMlKzlTbINpqlv8UhZUYixBUEGyh8COXgDqjfetbSuGzT9Nap45ZD1b7C2Wi
qmdZTRGNxXU7v5wh0VmJfUSYNtlYS5+uYuKJApRBkpwz0MpMgW7kdH6BnyCaafbX
kt2vb9fOqDyfvrPyrnkXxNPnXkhRVPe617hPiQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFCfggjH/b8BmKvci334qtQYAO63DMB8GA1UdIwQYMBaAFKt00w42eMWmB2hG
rqvQGqMNq4HuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjJjYmJi
NzkyZmY0MmZhNzE4NjE5NTA3YTUwNjYzNzk4MDU1NjQzYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjY4MmY3Y2EtNjZlNy00N2U0LWFiYjktNTExZmMx
YzEzNGM4Lzk4YjA5YzZlYmJmYTNjOTc4YzY3NzM2Y2EzNjY2MGVlNjcxNmM2ZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNjgyZjdjYS02NmU3LTQ3ZTQtYWJiOS01MTFm
YzFjMTM0YzgvZjJjYmJiNzkyZmY0MmZhNzE4NjE5NTA3YTUwNjYzNzk4MDU1NjQz
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAop2JAMEAqpUqDANBgkqhkiG9w0BAQsFAAOCAQEAFzGURhHi
qWQ6AE6qE3dwLFEhH4lXdLdlyhtbkmSq41C5GqM5bl4jd0ZRadzVLjLZ9NrQa4ge
ESIja17RpJWkNSl8+22sQynEcF/F+2rNgvpHoI4yQ7IbWzFngtDsRcKW/nocL7Xr
bnyJt4E//tggPEsyltjtF8yY048dlCTwyA8qgve2EUOiltXGyQ44s8+j+r++4rKU
HVQ/zjz/t3dZmYVE2prALjtm3G4qy8YovhCJwLOw6ffB+eWvwO5PHgfsKhSPEWQq
7dEL2xk3spLQvjmPNqeosHdCXxB+eiTH2oM8wMrWOolM++trnE1M2bV0VPcaMby4
kuCLp58oErYIqw==
-----END CERTIFICATE-----
Generated at Thu Dec 7 16:03:50 2023 by rpki-client on console-fra.rpki-client.org