Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa
File: 9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa (raw, json)
Hash identifier: p3Rcbu/sSDZRj/24FSPffbS6E6AByIL3qfcGFfiDtXs=
Subject key identifier: 0E:40:47:F9:20:A7:60:49:C1:57:5F:0A:D6:46:A7:CA:84:40:78:F6
Certificate issuer: /CN=d802d1f4519aab3e5793a16a3c9971a640951720
Certificate serial: 24CB90
Authority key identifier: 07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa
Signing time: Thu 19 Oct 2023 07:30:01 +0000
ROA not before: Wed 18 Oct 2023 07:30:01 +0000
ROA not after: Fri 17 Oct 2025 07:30:01 +0000
asID: 263693
IP address blocks: 138.121.160.0/22 maxlen: 24
179.60.232.0/22 maxlen: 24
2803:3880::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 15 Feb 2024 23:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2411408 (0x24cb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d802d1f4519aab3e5793a16a3c9971a640951720
Validity
Not Before: Oct 18 07:30:01 2023 GMT
Not After : Oct 17 07:30:01 2025 GMT
Subject: CN=9ca3fa3aaedfa7b033c70cd503cfff22e5117022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:02:4f:cf:5b:c8:8a:d2:ab:0b:6e:61:41:
2b:d8:66:7f:6a:84:01:dd:0e:3d:2f:2d:9f:4d:46:
09:78:cd:0b:22:db:c7:20:65:7d:9e:1a:4c:8e:6d:
fb:d5:7f:8c:82:82:95:21:53:00:07:9a:d7:3f:71:
1a:02:33:68:34:e1:91:dd:89:a1:9d:28:8c:c7:31:
84:24:8b:4d:06:b3:49:73:06:ba:18:a1:91:5e:10:
e0:d6:51:d5:a0:f3:16:cc:be:50:8e:37:d9:b6:2f:
5d:63:eb:57:4f:bd:72:1d:17:39:3e:b8:f0:81:5e:
33:77:32:ac:26:6a:c6:49:b9:0d:e2:a2:df:2e:63:
72:4c:56:03:60:d8:5d:da:41:12:6f:d0:7a:c3:21:
e9:50:e1:aa:8b:58:e1:32:dc:fb:a6:2f:66:86:cf:
ab:38:e3:a9:f6:93:dd:a3:89:8f:a1:d7:15:7e:7e:
bb:c9:84:22:39:51:0b:8d:4f:fb:6a:0b:54:91:69:
33:d1:35:0d:0e:41:dd:25:a6:0b:47:4c:da:92:04:
2b:c6:3b:d9:bc:91:61:99:af:4c:30:7d:29:bd:39:
e5:b5:4d:f8:7a:60:d5:b4:ce:2f:9d:2b:36:45:00:
ff:f4:21:80:e3:74:35:0e:78:d0:df:c1:c0:21:b4:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:47:F9:20:A7:60:49:C1:57:5F:0A:D6:46:A7:CA:84:40:78:F6
X509v3 Authority Key Identifier:
keyid:07:D9:8A:D9:50:01:E8:23:10:71:BF:BD:6B:25:1E:14:9A:A4:DD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d802d1f4519aab3e5793a16a3c9971a640951720.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/9ca3fa3aaedfa7b033c70cd503cfff22e5117022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/418f55f8-ab57-44fb-ab06-623928fa1045/d802d1f4519aab3e5793a16a3c9971a640951720.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.160.0/22
179.60.232.0/22
IPv6:
2803:3880::/32
Signature Algorithm: sha256WithRSAEncryption
22:a2:b3:ab:f7:c8:b5:8d:67:a9:cb:0a:75:6e:6b:0e:4a:7c:
86:eb:03:35:ef:0a:4c:53:74:c7:de:a9:1f:cc:9b:f8:e1:f4:
4d:77:bf:49:f3:68:74:54:b6:31:8f:b2:28:cc:65:23:49:e4:
b7:a6:e5:5e:cb:41:9d:2b:0b:e7:53:9b:88:6b:8f:dd:e5:7b:
ae:0b:c6:db:46:16:4d:ec:61:a2:32:39:e4:9b:11:1a:4a:b5:
b4:c1:d5:c1:c8:40:96:b2:51:ab:97:9e:6e:a0:b4:04:70:45:
bd:2e:83:62:41:5e:97:34:5d:a9:e4:9d:70:4c:06:18:82:f4:
76:08:bc:a4:10:c5:de:b2:ff:4a:2e:be:19:cd:07:46:3f:62:
c8:02:f5:81:eb:9e:8c:8f:67:f8:c4:93:09:72:5a:f4:ab:70:
b4:b3:7f:8e:45:d0:13:0d:6c:68:a6:42:8a:d4:d2:e3:f7:64:
34:85:b2:b4:f4:a8:d2:08:93:ec:58:50:ae:56:3e:f8:f9:fe:
32:de:44:92:ac:c1:c5:ba:3c:dc:8a:c2:7c:5d:0f:86:4f:60:
a6:76:a3:f7:3a:20:63:0a:1f:bb:bf:ed:21:e9:b6:dc:ab:3e:
51:5d:f3:fc:91:60:72:61:70:69:b4:84:f1:3a:1e:b1:a0:23:
e8:2a:73:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 03:13:41 2024 by rpki-client on console-ams.rpki-client.org