Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/bcc9e02f8c1eb7a13affda32ff86c791a0b06b2d.roa
File: bcc9e02f8c1eb7a13affda32ff86c791a0b06b2d.roa (raw, json)
Hash identifier: SkWoEs00O0G/LFHdnr2cL4upagCDhGqb193ghnTxleY=
Subject key identifier: 12:85:C8:28:9E:A0:6C:F3:C7:B8:1E:FF:57:A7:31:85:D0:53:CB:68
Certificate issuer: /CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Certificate serial: 03E3E8
Authority key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/bcc9e02f8c1eb7a13affda32ff86c791a0b06b2d.roa
Signing time: Wed 24 Mar 2021 14:37:13 +0000
ROA not before: Wed 24 Mar 2021 14:37:13 +0000
ROA not after: Tue 24 Mar 2026 14:37:13 +0000
asID: 28317
IP address blocks: 138.121.140.0/24 maxlen: 24
138.121.141.0/24 maxlen: 24
138.121.142.0/24 maxlen: 24
138.121.143.0/24 maxlen: 24
170.81.32.0/22 maxlen: 24
191.102.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 16:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254952 (0x3e3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Validity
Not Before: Mar 24 14:37:13 2021 GMT
Not After : Mar 24 14:37:13 2026 GMT
Subject: CN=bcc9e02f8c1eb7a13affda32ff86c791a0b06b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:92:b9:6a:61:eb:90:6e:4c:50:d9:10:07:
44:c7:18:9d:fa:44:7b:13:da:fb:af:f7:88:9e:70:
c9:63:13:e8:5b:06:3c:8d:6a:91:68:28:0a:50:46:
db:64:78:f3:bd:2f:5c:58:23:5d:e4:3e:44:b9:27:
19:3e:2a:67:13:c9:55:12:84:37:8f:ea:06:5b:ab:
d5:a2:c7:7c:51:95:96:37:af:e9:bb:32:e5:14:2b:
51:d5:8a:23:98:c3:a4:78:fc:9c:81:da:02:a2:02:
22:ba:81:3b:82:0d:e6:ff:2f:d6:3a:c1:44:2a:a2:
10:b0:80:f6:70:92:e1:ee:f2:b3:66:cf:f8:48:09:
8e:8a:b0:41:5c:25:b1:14:05:06:eb:ea:8a:cf:fb:
7e:47:cd:87:c0:3a:48:6e:ec:e5:a9:89:7b:09:21:
19:3c:63:19:36:56:ac:88:0c:15:0e:c1:5d:38:1b:
c5:bb:12:cd:51:50:a0:79:e4:d9:e6:2c:fa:02:cb:
1c:55:52:c9:26:4d:02:46:fc:6c:6a:95:22:f0:7a:
0e:9a:41:35:7f:0d:e4:da:d3:01:76:14:a5:e2:27:
62:b0:9e:93:a9:95:3a:e0:c9:9f:ab:36:38:fc:c1:
d7:f6:23:01:dd:73:25:06:ad:39:7a:c9:fa:ad:a8:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:C8:28:9E:A0:6C:F3:C7:B8:1E:FF:57:A7:31:85:D0:53:CB:68
X509v3 Authority Key Identifier:
keyid:0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/bcc9e02f8c1eb7a13affda32ff86c791a0b06b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.140.0/22
170.81.32.0/22
191.102.56.0/22
Signature Algorithm: sha256WithRSAEncryption
98:c1:b1:00:b2:96:53:88:97:6f:a6:53:7b:a6:b8:6b:9b:a4:
ec:aa:cd:6f:18:0a:69:ea:f7:98:88:3c:1f:d8:b5:0c:63:2b:
b0:53:d6:09:cc:96:2b:76:63:ae:ff:64:c1:99:97:9c:5e:e5:
4f:af:58:81:11:83:a3:cd:19:71:b5:a2:72:01:ac:d3:98:a1:
d1:9f:54:3c:5d:d3:fa:91:53:ab:c7:10:3c:76:50:f6:bd:a8:
00:25:e5:3a:f3:02:8e:12:11:98:a0:2b:bc:84:60:af:f6:a6:
0f:7b:d7:9a:e8:e8:c4:2e:0f:94:ca:78:79:27:dd:45:c6:dd:
b5:b0:c3:46:00:57:77:10:ca:d6:2e:07:ca:ea:29:1c:45:04:
48:bc:34:2c:6e:7c:0c:97:03:57:fd:49:7e:75:4d:a5:f0:74:
09:fc:d6:c9:d6:4b:cf:9d:57:a8:15:7a:90:c4:7a:69:27:3b:
03:80:0a:80:2c:ee:ef:2b:e8:b7:41:37:6b:6b:1e:a8:bb:7e:
9c:90:4c:99:20:4e:4a:05:07:f7:d2:a7:26:51:c2:a7:b6:26:
16:e9:60:e6:4e:8c:39:e8:2a:0f:99:e5:56:48:34:44:03:59:
2b:d0:99:25:98:77:ca:b6:64:d0:45:1a:0d:96:7b:52:4d:29:
b0:03:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 19:38:36 2024 by rpki-client on console-ams.rpki-client.org