Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/6a3e179ad27013ae027f05afaa6c245720f18700.roa
File: 6a3e179ad27013ae027f05afaa6c245720f18700.roa (raw, json)
Hash identifier: D5PqD5csmKBP0XLVL1z2cqHFbXQmexyRF3wmt9/t0Nw=
Subject key identifier: A8:A9:83:2B:F3:DB:31:AF:04:98:6E:C9:EA:53:59:DA:9D:8F:79:4F
Certificate issuer: /CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
Certificate serial: 0D0F1B
Authority key identifier: 15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/6a3e179ad27013ae027f05afaa6c245720f18700.roa
Signing time: Wed 24 Mar 2021 22:50:32 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 263728
IP address blocks: 131.72.232.0/24 maxlen: 24
131.72.233.0/24 maxlen: 24
131.72.234.0/24 maxlen: 24
131.72.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855835 (0xd0f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=6a3e179ad27013ae027f05afaa6c245720f18700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:87:70:8d:00:ad:1d:0e:e2:83:bc:94:2d:da:
e2:d6:a4:c2:ae:04:a9:be:4e:c9:f6:37:4b:04:68:
c9:8c:b3:a7:b7:79:2d:eb:3a:09:4b:4a:cc:fe:a7:
a9:e0:cc:9e:88:17:17:d6:90:37:ad:75:67:a4:4e:
f6:35:2f:81:cd:c3:cf:27:db:d0:38:1d:db:e4:9a:
a1:f0:eb:c8:62:ee:f5:78:4f:d9:c4:ea:8b:42:e4:
7a:43:19:33:14:a5:be:ca:b9:01:6c:41:27:a2:4b:
b4:4d:36:c3:2c:2d:39:f6:4c:84:f9:e7:c0:f4:d5:
ff:51:46:3f:fd:a0:78:43:36:08:c0:07:7d:1e:d9:
eb:40:84:c6:12:06:99:b4:d2:78:bc:c2:e6:51:b7:
1c:ac:9c:25:13:4e:35:44:e6:81:13:88:01:99:b6:
77:5d:8d:61:0d:fd:10:fd:f0:a8:8a:00:dc:2f:9e:
60:1b:fe:42:60:21:ee:c3:e8:76:d5:9f:7f:db:66:
29:2f:a3:84:78:b6:f8:99:12:86:e1:59:c0:3d:19:
c2:d6:49:d0:96:09:35:81:3d:97:7d:32:7f:71:8a:
5d:7c:e3:4b:e3:4c:9a:57:eb:9f:ae:7c:43:c7:bb:
91:ce:22:14:39:54:7b:98:c1:2d:80:71:4e:86:f4:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:83:2B:F3:DB:31:AF:04:98:6E:C9:EA:53:59:DA:9D:8F:79:4F
X509v3 Authority Key Identifier:
keyid:15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/6a3e179ad27013ae027f05afaa6c245720f18700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.232.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a2:4a:6b:80:cf:4d:c5:c6:64:94:52:0f:b0:04:45:63:e0:
ec:12:de:15:5c:c6:a1:c6:0f:b6:45:75:84:c7:43:4f:6e:9f:
5d:0e:ec:92:6b:a9:7e:5c:b3:b9:3a:1b:fd:33:fa:8f:aa:c5:
86:52:6a:c9:04:81:b0:db:57:63:7b:1a:08:92:4a:88:61:cc:
2f:3b:3a:bc:3a:77:56:08:49:7a:fc:80:65:25:4f:16:cc:81:
68:08:e2:9b:f7:14:e1:89:fc:13:a7:1d:98:bc:17:b4:65:4c:
6f:f7:b0:b8:b8:12:11:b9:21:fd:95:94:55:49:5c:2b:70:55:
ae:bd:7b:5b:76:45:fc:8d:07:2b:c8:3f:24:71:f0:d7:d8:e0:
79:f5:6e:59:ac:f0:a9:fa:e0:8e:a6:ce:9d:51:83:68:5a:fd:
ad:cf:92:3c:0b:a6:d2:80:ac:f2:3f:34:db:a7:dc:7a:e8:57:
a4:1e:75:9c:10:af:5f:b4:9a:02:59:a0:5b:42:67:0f:2f:65:
3a:20:33:8d:d6:89:d6:22:ac:e4:db:e3:87:38:34:a7:a9:38:
e3:ff:05:3f:aa:45:33:b1:6c:63:21:d3:66:64:7a:46:76:aa:
77:cb:13:e2:48:84:cf:62:07:f6:34:5b:dc:bf:e8:65:15:ce:
0c:3a:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org