Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/62148c6acc8b9f7778224b40b08404b156a26739.roa
File: 62148c6acc8b9f7778224b40b08404b156a26739.roa (raw, json)
Hash identifier: M8p4BRXVE5WYx6Eq5cFvwkNGiW1iXuf1QpdUZxcaCUo=
Subject key identifier: B3:22:89:73:2E:ED:DD:26:24:62:7A:22:77:DB:A4:01:A0:A1:AF:56
Certificate issuer: /CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Certificate serial: 03E9AA
Authority key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/62148c6acc8b9f7778224b40b08404b156a26739.roa
Signing time: Wed 24 Mar 2021 14:37:13 +0000
ROA not before: Wed 24 Mar 2021 14:37:13 +0000
ROA not after: Tue 24 Mar 2026 14:37:13 +0000
asID: 28110
IP address blocks: 138.59.132.0/22 maxlen: 24
181.174.168.0/22 maxlen: 24
190.124.248.0/22 maxlen: 24
190.184.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 16:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256426 (0x3e9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Validity
Not Before: Mar 24 14:37:13 2021 GMT
Not After : Mar 24 14:37:13 2026 GMT
Subject: CN=62148c6acc8b9f7778224b40b08404b156a26739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:66:67:6d:c2:ea:3b:35:9b:bc:74:91:1b:
b6:23:02:87:a1:ad:0c:2e:cd:35:c8:26:00:a7:93:
a7:fe:fa:02:ae:a6:88:42:ff:cc:98:45:05:61:59:
3a:6a:8a:5c:85:b6:b6:8f:f9:58:87:ca:aa:b2:ef:
48:b4:ba:15:6f:47:1d:e5:9d:dd:5c:cf:82:ca:55:
26:b7:e9:09:6f:ef:c4:77:f7:c6:35:ec:91:ad:b6:
6c:07:8b:9a:1a:5f:92:c2:7b:04:7b:25:1d:c6:ba:
a2:be:52:67:2a:fc:ef:73:15:3f:3c:c8:0a:2a:08:
a3:8c:70:3f:b5:4e:04:f6:94:43:e2:52:bd:fa:3c:
e6:54:1a:65:3a:a4:b6:7b:92:f2:6d:a3:f2:49:7d:
04:93:87:86:d2:9a:00:b5:52:b8:1d:77:72:84:d3:
ef:49:f4:2d:ef:b7:00:a1:ab:79:6c:5c:3c:3c:38:
a1:1c:bd:93:b2:be:f1:4e:15:3c:a3:4a:3a:16:d0:
fe:fd:aa:57:3f:b0:87:27:0d:79:ec:36:7b:b4:9b:
87:94:9e:da:cc:cc:a3:df:c4:2d:19:1b:5d:bf:0e:
5b:57:5b:2b:52:8d:24:83:76:a8:a4:90:08:7b:c0:
16:ac:14:d7:7e:92:83:e3:fb:60:ae:f2:9d:2b:f5:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:89:73:2E:ED:DD:26:24:62:7A:22:77:DB:A4:01:A0:A1:AF:56
X509v3 Authority Key Identifier:
keyid:0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/62148c6acc8b9f7778224b40b08404b156a26739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.132.0/22
181.174.168.0/22
190.124.248.0/22
190.184.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:91:37:30:5c:aa:69:c0:60:95:a3:89:56:22:63:d9:e1:07:
45:07:e4:60:60:10:a8:4d:75:1b:2c:bb:d6:1e:1d:88:32:86:
23:bb:ce:9a:1d:97:97:65:c0:3c:14:eb:a0:c5:b1:84:db:8e:
b7:0d:09:41:6e:e5:ae:43:6f:4f:d2:75:f2:40:73:dc:bc:95:
7f:b1:20:c9:ed:61:c0:1a:2a:d8:d9:61:8a:a3:ea:58:09:a5:
b0:1e:e9:c0:13:ae:1f:29:e0:28:b3:41:a5:c6:dc:f6:6e:8b:
1b:b2:f0:6b:8f:a7:83:81:25:2e:99:e6:dc:d6:bf:69:e0:2a:
d8:88:3e:51:e2:f2:c9:05:8a:a5:7b:f4:b5:22:f9:43:6d:45:
95:0f:e8:61:e4:14:4b:d4:b0:99:96:7a:4c:66:ac:d3:ae:70:
fe:7f:61:71:0f:a2:d4:b9:b0:bb:c2:b0:25:a2:40:62:87:b3:
1c:c1:4e:3a:32:98:eb:3c:19:9e:86:f3:ba:4f:14:1d:a3:b9:
47:7e:29:57:77:27:ed:58:4f:b9:e3:53:71:9a:81:a3:f4:60:
5e:94:62:a7:94:c3:a4:da:56:74:3d:c7:23:87:14:18:06:a1:
4c:84:46:e4:ad:c9:d5:3c:e1:08:e7:16:8c:e0:d6:45:e9:72:
4f:59:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 19:25:55 2024 by rpki-client on console-fra.rpki-client.org