Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa
File: a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa (raw, json)
Hash identifier: 7qGqHtmz9nXskFKvkcvvAEPjs8LOLhrhRSDPeQNkjXk=
Subject key identifier: 59:1D:B6:70:B2:84:4B:22:4A:16:DD:EC:92:F9:72:ED:26:24:3C:F1
Certificate issuer: /CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Certificate serial: 0D1812
Authority key identifier: 53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa
Signing time: Wed 24 Mar 2021 14:33:02 +0000
ROA not before: Wed 24 Mar 2021 14:33:02 +0000
ROA not after: Tue 24 Mar 2026 14:33:02 +0000
asID: 263824
IP address blocks: 138.185.76.0/22 maxlen: 24
170.254.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858130 (0xd1812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Validity
Not Before: Mar 24 14:33:02 2021 GMT
Not After : Mar 24 14:33:02 2026 GMT
Subject: CN=a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:7c:84:ee:97:96:95:35:3e:41:a2:57:6f:
df:05:c3:80:c0:95:4f:9f:60:66:25:6c:4d:67:96:
b0:0e:b2:f1:b2:b2:03:92:47:ba:4f:73:33:8f:b6:
a8:36:e3:c4:98:f0:d2:75:18:6a:80:22:e4:3d:9e:
01:7e:8f:0e:ca:d8:41:20:38:f7:65:70:c0:56:84:
32:9d:5b:48:12:56:8b:85:26:a4:b9:39:0d:45:9a:
a4:7f:7b:1d:d0:3c:81:9f:7d:19:6f:44:47:f0:99:
a5:56:9c:60:8a:52:8d:f4:86:7d:59:9a:d1:6b:04:
55:e1:35:75:27:27:54:9d:1f:61:08:18:3b:e2:7c:
e9:c7:76:53:72:fa:99:53:65:37:fe:b4:0b:8d:f7:
80:44:67:4a:5d:9b:72:4f:af:e3:b9:90:d2:5b:be:
3f:78:be:1e:6d:02:15:81:f3:17:af:43:f6:48:ec:
a2:26:19:f8:68:c5:2e:f8:ae:d3:a5:53:79:7c:4a:
fb:96:db:70:e2:c4:4d:c6:0d:6e:5c:9f:00:47:ae:
b8:76:04:38:38:30:40:7b:4a:b9:2e:a4:8d:04:5d:
84:22:30:51:5e:27:2f:76:50:dc:80:08:ab:e1:22:
49:cc:7a:e4:d0:27:ec:19:7b:c1:a0:c1:1e:34:67:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:B6:70:B2:84:4B:22:4A:16:DD:EC:92:F9:72:ED:26:24:3C:F1
X509v3 Authority Key Identifier:
keyid:53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/a4d6a3be6f60c88aa30462df5cd3ca5f3e8249b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/61678bdd44acebd11355abc32f79a39e0ab6e968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.76.0/22
170.254.16.0/22
Signature Algorithm: sha256WithRSAEncryption
11:cb:f7:e0:95:01:18:96:15:90:fe:a3:d6:26:aa:e9:3f:54:
31:ed:00:23:45:cb:20:97:0a:14:08:8c:17:21:8d:64:d0:97:
c4:34:33:30:90:89:c4:fa:32:83:de:e4:b0:23:2e:ff:8b:b8:
8b:80:39:81:96:67:46:f5:13:95:8f:91:fa:d9:f2:85:c7:cc:
2c:36:7a:a7:ac:ad:63:e7:43:f1:83:ec:b9:4b:c4:62:74:b6:
4b:4c:f4:ff:49:17:57:7d:d5:2d:80:f7:45:ee:3d:5e:bc:52:
d3:83:68:0c:c5:2c:3b:f6:22:6a:22:23:fb:1b:ab:58:30:0d:
54:f1:3b:cd:44:00:22:09:82:be:83:56:4b:a5:e6:fa:10:f8:
a7:ee:06:36:e8:60:7f:a3:8e:35:f4:74:17:f3:a2:2d:88:e1:
7b:35:c9:e0:7e:94:1b:bf:6a:0a:c2:19:8f:80:59:3b:5f:9e:
c6:f4:d0:80:20:89:d5:ab:e1:ee:05:81:d8:00:e0:b2:7b:bb:
8e:c2:5d:93:fe:10:6d:75:ce:bf:f3:1e:b8:c9:6a:37:ca:72:
b3:f0:d8:f5:a9:9a:41:48:f2:5f:83:37:6f:98:37:ed:ee:85:
c6:f2:fa:d5:91:62:3e:32:52:c1:8b:be:e2:f2:bc:cf:02:1c:
9a:1d:90:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org