Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/19471d970a79e131846a0781b9b6bf7b219746cd.roa
File: 19471d970a79e131846a0781b9b6bf7b219746cd.roa (raw, json)
Hash identifier: QgjZCztWajABVoC6XOsGM6d4LELUceOMmPSs6c8as2g=
Subject key identifier: 6A:41:99:FF:1A:5E:76:FE:84:04:56:B6:D7:90:4D:41:FA:C0:E5:A4
Certificate issuer: /CN=c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11
Certificate serial: 0D68E3
Authority key identifier: 5F:E9:8E:F4:F3:28:B8:D0:2F:3A:D1:D1:73:A9:27:4E:0D:25:FB:21
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/19471d970a79e131846a0781b9b6bf7b219746cd.roa
Signing time: Wed 24 Mar 2021 14:38:12 +0000
ROA not before: Wed 24 Mar 2021 14:38:12 +0000
ROA not after: Tue 24 Mar 2026 14:38:12 +0000
asID: 264821
IP address blocks: 138.97.248.0/22 maxlen: 24
168.196.124.0/22 maxlen: 24
2803:9040::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 25 Mar 2024 23:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878819 (0xd68e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11
Validity
Not Before: Mar 24 14:38:12 2021 GMT
Not After : Mar 24 14:38:12 2026 GMT
Subject: CN=19471d970a79e131846a0781b9b6bf7b219746cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:ee:85:de:12:4f:3f:37:2c:dc:4b:79:3f:
c9:dc:5a:eb:92:5e:70:aa:6f:ff:ab:0a:55:d0:ea:
49:90:99:64:ce:58:db:2d:53:a7:8a:04:85:8e:7d:
bc:e7:3f:f4:25:93:df:97:c0:32:72:cc:85:8d:23:
09:95:3d:3b:fb:75:dd:b0:17:15:63:56:96:bc:15:
a5:4c:44:d8:df:78:08:aa:26:ae:4c:db:fe:16:ba:
28:d1:e8:d8:fb:58:04:85:11:7a:6f:2b:62:31:95:
e9:f0:4e:75:29:55:ae:e0:04:f1:30:d7:d0:0b:7b:
ac:de:81:2b:e0:0d:80:99:c2:fc:6f:80:99:5b:26:
81:60:ce:d2:1d:16:cb:0b:6e:33:71:7c:71:07:43:
33:4a:c0:8e:54:8e:03:56:dc:e8:73:b5:b4:36:25:
89:02:ad:b8:50:59:84:aa:e9:be:00:a8:e7:a8:be:
71:77:8b:c5:18:2d:2c:79:38:c3:71:ea:25:1c:7d:
49:da:df:b8:a7:52:80:46:2a:77:ee:42:fc:25:fa:
98:24:cc:20:81:ab:08:05:d1:c7:5a:c2:70:b9:38:
3b:a3:72:fd:c1:32:3a:30:98:15:41:e5:5e:4b:29:
ea:4a:a8:17:be:db:1d:ef:d1:61:cc:2d:be:69:b4:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:99:FF:1A:5E:76:FE:84:04:56:B6:D7:90:4D:41:FA:C0:E5:A4
X509v3 Authority Key Identifier:
keyid:5F:E9:8E:F4:F3:28:B8:D0:2F:3A:D1:D1:73:A9:27:4E:0D:25:FB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/19471d970a79e131846a0781b9b6bf7b219746cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5a9f9b0e-e1a1-44ba-a052-69417edbb2bb/c14b2462ab22dc8e57ca4d1a2a86de6762dbdb11.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.248.0/22
168.196.124.0/22
IPv6:
2803:9040::/32
Signature Algorithm: sha256WithRSAEncryption
31:cb:da:af:2d:7f:36:b5:2f:a9:93:42:d5:88:16:94:d2:50:
ca:35:46:56:b9:fe:a1:d7:ad:b8:57:f2:7d:b4:05:06:3a:e7:
02:9e:58:2f:25:9d:72:ed:aa:a7:04:b5:27:66:80:22:3e:1a:
ed:cc:24:ce:71:67:c3:62:ec:11:1a:36:2e:f3:96:fc:15:9b:
d5:11:9f:ed:7c:2d:bf:71:50:13:0e:96:17:91:c9:5b:9d:09:
29:49:d7:87:90:5d:af:d1:c6:1c:6c:4d:98:4b:04:57:05:f3:
1f:2f:d7:83:09:25:1b:b5:c4:84:88:0f:ea:b2:57:80:3a:67:
29:46:2f:ef:8e:9c:f8:eb:cd:ff:9d:86:b5:d6:3a:7d:d7:2c:
15:99:5b:7c:f9:e1:54:75:4f:e0:28:ad:2a:eb:15:97:af:80:
ac:be:52:be:60:b7:65:ae:94:b7:8b:da:03:e1:c5:ba:7d:14:
65:c4:46:32:eb:67:52:6b:87:67:6f:84:7a:48:65:bb:ba:c1:
41:62:9a:b1:41:ff:9c:67:01:5d:8b:1a:dc:13:6b:9e:71:24:
2a:86:ef:46:ee:8f:0b:fb:03:34:4d:96:2f:04:98:0a:79:58:
b8:57:b4:e9:91:76:64:44:ba:a3:82:a3:96:3b:31:7c:3e:58:
9a:f2:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 02:41:27 2024 by rpki-client on console-fra.rpki-client.org