Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/89402169a156ce9e2cedf74fed554d4a413e1e1e.roa
File: 89402169a156ce9e2cedf74fed554d4a413e1e1e.roa (raw, json)
Hash identifier: XsSSqAe8QFlw1Zz9Bg3Ciq0lAW+qgAdcLCmwGCR7NNc=
Subject key identifier: 6E:86:B5:AD:B8:D9:F8:A9:88:6F:F1:B6:C2:C1:3B:3B:63:3E:30:A9
Certificate issuer: /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial: 089C36
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/89402169a156ce9e2cedf74fed554d4a413e1e1e.roa
Signing time: Mon 14 Mar 2022 22:10:12 +0000
ROA not before: Mon 14 Mar 2022 03:00:00 +0000
ROA not after: Wed 14 Mar 2029 03:00:00 +0000
asID: 14593
IP address blocks: 138.84.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564278 (0x89c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
Validity
Not Before: Mar 14 03:00:00 2022 GMT
Not After : Mar 14 03:00:00 2029 GMT
Subject: CN=89402169a156ce9e2cedf74fed554d4a413e1e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:be:8e:17:ff:c4:7e:67:55:b1:16:e0:8d:
5f:5f:74:0e:1b:76:c0:cb:ef:7d:c6:f2:4c:22:dc:
37:62:98:ac:c9:ba:03:9f:20:61:b4:3b:e0:df:e8:
78:e4:0b:1f:40:f2:39:72:0c:af:92:dc:dc:19:5d:
24:0e:0f:ed:af:23:65:f0:26:a6:00:0f:6f:de:b1:
8b:90:73:76:57:01:12:88:81:5c:ce:34:61:33:40:
7e:a3:ea:cb:2e:e3:20:79:db:eb:e1:29:0f:ee:30:
c5:b1:b3:0b:91:ae:f8:4d:ba:10:bf:45:e2:c7:5b:
1a:55:a5:a2:cb:e1:c0:ca:ef:fb:94:00:2f:91:1d:
96:2f:33:09:63:a5:3a:70:32:47:a8:61:55:29:40:
63:e8:6f:86:62:07:a5:41:4a:dc:54:35:9a:f6:ad:
a1:bc:8a:db:f8:32:1d:e1:1c:e1:c4:33:b3:59:21:
b5:2e:73:55:ed:aa:a4:b4:a0:d4:48:b8:c4:2e:e5:
7c:80:61:bb:1a:c2:78:a3:10:6b:61:bb:0f:50:87:
51:cc:26:7a:12:a5:04:a8:1d:b4:a0:e4:6d:10:fe:
9e:d0:28:12:9f:3a:c6:c2:9f:3b:8f:79:cc:4c:c4:
08:a5:57:cd:45:a5:eb:f5:fd:62:72:ff:7d:5f:e1:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:B5:AD:B8:D9:F8:A9:88:6F:F1:B6:C2:C1:3B:3B:63:3E:30:A9
X509v3 Authority Key Identifier:
keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/89402169a156ce9e2cedf74fed554d4a413e1e1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.84.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:1b:e6:ae:8f:07:f6:c5:70:73:4c:8f:0a:91:40:98:cd:68:
43:30:1d:cf:d4:03:e0:d5:14:47:be:3b:5d:a7:0f:1d:cf:db:
83:e7:a2:6a:42:81:b8:bd:b8:f9:18:4d:2c:a3:43:07:6f:f1:
eb:7c:e0:fd:62:72:09:7c:06:4a:23:fd:d1:ee:0e:b9:8b:c4:
20:52:28:47:39:39:21:ef:c3:04:27:a3:d9:9f:84:dc:c6:71:
a4:87:01:7a:1c:44:d3:f6:9d:d3:0e:49:04:1a:1f:29:06:24:
46:46:bd:df:d8:94:61:22:b0:ee:13:d2:23:8d:a3:44:09:2f:
bd:c5:8d:90:6f:83:96:1d:dd:d8:63:2a:9f:81:51:6f:86:6b:
cc:be:36:be:52:03:66:fe:47:99:75:46:8e:f9:31:f7:f9:77:
16:62:e3:4e:2d:05:de:29:24:6e:8f:7a:ba:9a:0c:4b:22:31:
bf:a7:64:e3:a0:06:4c:f6:ad:eb:93:9b:b4:01:e8:4f:9a:e8:
ad:69:f0:2d:0c:d7:5b:45:f3:70:b0:56:cf:78:8c:4d:eb:88:
1d:91:e1:cf:e0:70:f1:e9:04:f7:8c:ae:3d:a3:47:d7:e3:a8:
8a:4c:38:e2:2f:e0:46:b3:c5:b2:05:36:70:9b:48:7b:fe:a1:
5a:14:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org