Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa
File: a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa (raw, json)
Hash identifier: hYMsEY3hctY9zFLdJqw76EWOaSTR1079UxRR3pd6JcY=
Subject key identifier: 79:45:C6:F4:A1:FD:1D:2E:C2:62:D7:6A:7C:47:16:57:31:04:E0:DE
Certificate issuer: /CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Certificate serial: 185A99
Authority key identifier: 9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa
Signing time: Thu 07 Jul 2022 03:51:03 +0000
ROA not before: Fri 01 Jul 2022 03:00:00 +0000
ROA not after: Sun 07 Jul 2024 03:00:00 +0000
asID: 263795
IP address blocks: 138.204.108.0/24 maxlen: 24
138.204.109.0/24 maxlen: 24
138.204.110.0/24 maxlen: 24
190.105.168.0/22 maxlen: 22
2803:ac40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596057 (0x185a99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Validity
Not Before: Jul 1 03:00:00 2022 GMT
Not After : Jul 7 03:00:00 2024 GMT
Subject: CN=a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:46:8e:9c:b5:a0:3d:5f:eb:e0:08:a8:83:
28:81:65:55:76:ba:31:32:ce:2a:74:a9:8e:d6:86:
be:53:5a:8f:03:e6:f7:bd:e0:06:68:12:63:c3:ce:
53:34:30:5e:0c:39:1e:72:6b:bc:74:a0:c1:2e:91:
01:a9:97:c6:5c:12:ec:93:f9:8d:d3:58:cf:ca:bc:
55:30:de:29:eb:a0:16:83:bf:0b:cd:61:03:1a:ab:
fb:88:03:e9:54:80:63:a2:f4:ca:19:a5:e8:5a:02:
2a:21:c7:f9:75:49:d8:28:99:ef:44:e9:5e:db:40:
c0:3e:9d:16:1b:3a:13:3f:27:4d:96:da:7c:7f:cc:
36:be:e0:c8:8c:34:8c:11:3c:c4:31:0e:56:7d:a6:
f4:71:7c:6d:b6:a2:e4:89:ba:26:73:f7:d9:9f:a4:
6a:34:4d:fb:79:7f:48:04:bc:a4:b1:60:3f:85:7a:
08:14:46:ae:01:cc:78:0e:f2:0c:bc:3a:e5:1a:89:
90:6a:86:ad:f0:06:40:90:c0:06:4f:3d:ff:0f:c3:
60:1e:e6:2d:24:ab:82:51:ce:e4:17:62:83:52:b2:
fe:14:e8:6f:c8:61:09:0b:d5:4c:d6:39:17:35:58:
79:a8:6b:80:73:1e:1f:9d:f2:68:af:de:c9:b6:18:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:C6:F4:A1:FD:1D:2E:C2:62:D7:6A:7C:47:16:57:31:04:E0:DE
X509v3 Authority Key Identifier:
keyid:9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/a53b08e0b68ea9a3b2dcbf543154dbf3b6f4885b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.108.0-138.204.110.255
190.105.168.0/22
IPv6:
2803:ac40::/32
Signature Algorithm: sha256WithRSAEncryption
88:7a:c9:bb:c4:8b:f4:be:71:58:c2:6e:70:7d:29:a5:13:1e:
61:79:30:02:6e:9a:69:91:c6:18:39:7b:00:3c:67:89:4e:47:
7d:99:0f:56:3f:ca:ea:1a:2b:c7:a1:5b:25:4d:d1:ac:4d:6c:
07:4c:80:55:36:8a:f8:87:5e:b9:c5:fd:32:6d:4f:c2:fa:78:
f9:09:35:eb:81:1d:0a:6d:bb:f1:4d:4d:91:b5:c7:4e:dd:54:
20:d7:89:1f:5f:6b:ec:10:19:91:66:cb:ef:7b:df:91:f5:d9:
d5:dd:1c:19:98:04:1d:46:7f:16:88:e4:2f:38:25:20:db:7c:
16:19:b1:29:59:42:74:19:f4:b3:e6:0c:78:df:e4:ea:29:e4:
f4:de:90:95:71:8d:03:33:f8:97:36:ae:80:ac:69:80:50:0a:
c8:d6:e0:c1:f3:47:bf:15:5f:d8:66:7b:0c:96:fd:b2:26:53:
7b:31:6f:10:b6:84:2f:74:c7:23:4e:46:42:6d:75:ca:34:b1:
a4:04:a5:52:c6:29:6a:36:a8:56:24:02:eb:12:84:01:c6:b8:
4d:34:13:8c:66:9e:ee:ce:ae:59:00:47:22:45:3c:41:c2:1a:
f2:3a:8a:ee:20:cc:f8:8e:49:c0:e3:12:59:4c:ea:f3:37:df:
6c:1c:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org