Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/050d091d600db3a5ba84015fa056cb1f2fb455f0.roa
File: 050d091d600db3a5ba84015fa056cb1f2fb455f0.roa (raw, json)
Hash identifier: RmAolqucnmHaNjUjpMsBIlCArshf3/y0MBP8KWGEkXo=
Subject key identifier: 38:3C:F8:D1:C6:4F:C6:67:69:BF:BB:08:1E:1F:08:60:9E:25:19:E3
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0D1F5B
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/050d091d600db3a5ba84015fa056cb1f2fb455f0.roa
Signing time: Wed 24 Mar 2021 14:29:20 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 61553
IP address blocks: 138.204.255.0/24 maxlen: 24
201.182.138.0/24 maxlen: 24
2801:168:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 859995 (0xd1f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=050d091d600db3a5ba84015fa056cb1f2fb455f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:c8:6f:fd:36:e4:40:51:86:a8:fd:1a:0b:
31:ff:d4:0f:cc:c0:88:7c:b7:e8:58:50:fe:b0:a3:
6e:6d:6d:41:43:d6:07:cb:99:78:20:53:bc:36:b0:
94:53:c6:e2:ca:a1:b1:8b:3f:5b:6b:61:b2:63:e8:
f9:e7:09:02:a0:c4:ac:43:f0:e5:79:89:07:67:0c:
97:9a:f7:26:90:38:26:1f:e0:f0:7a:d3:aa:d8:5a:
73:3a:55:9d:d0:cb:b8:94:c8:91:6f:8f:10:3d:99:
64:b7:81:cd:ae:05:63:39:9d:f1:76:41:4f:db:42:
3b:fc:4c:e4:7e:df:89:e8:96:a2:ba:1e:42:36:ce:
b0:16:7f:65:79:42:56:cb:b2:45:fd:82:23:a2:aa:
4a:41:9e:fa:92:ff:1b:62:5d:ff:9b:5b:85:17:6e:
45:41:3a:2b:4f:f5:72:d7:f8:39:4f:9b:01:c4:c6:
84:dc:4b:06:ad:f3:d6:a1:a7:d1:ad:96:d8:09:3d:
99:75:3e:5f:77:b9:35:ba:23:af:35:49:3a:92:87:
ab:76:3b:88:11:0c:1f:c9:56:ff:60:29:9e:8d:18:
0a:d7:18:fb:ca:c0:e8:71:b1:3c:f8:33:bd:f6:87:
fb:c3:2a:28:8b:43:d0:c3:9a:67:6d:6e:a0:4c:dd:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:F8:D1:C6:4F:C6:67:69:BF:BB:08:1E:1F:08:60:9E:25:19:E3
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/050d091d600db3a5ba84015fa056cb1f2fb455f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.255.0/24
201.182.138.0/24
IPv6:
2801:168:1::/48
Signature Algorithm: sha256WithRSAEncryption
92:67:a1:a7:e6:67:00:d6:52:b7:f9:e6:8f:1c:21:13:1e:9c:
52:0a:19:f7:0d:a4:b7:c2:25:31:5d:d9:30:1c:ef:0c:db:df:
68:b8:e2:a7:49:20:b9:47:b5:f9:7c:5e:58:4d:94:1b:f0:de:
30:1a:79:05:1b:63:bf:ac:56:d1:cd:46:46:5f:47:38:32:f9:
5e:1c:ca:22:98:e7:18:3d:dc:4c:10:1b:61:47:65:22:4d:87:
fd:aa:82:78:2c:33:3b:bb:61:37:32:14:bd:f5:09:40:5f:c4:
87:b9:a6:be:e0:52:2f:26:2c:f3:d9:b2:2d:13:b7:47:bd:e0:
f1:84:c7:61:73:52:49:7a:3a:e6:9e:f2:bd:c6:f4:28:f0:f4:
40:6b:4b:f9:b6:fb:eb:11:68:d8:51:0d:ae:ee:53:7c:0a:ac:
4d:2b:3a:5a:0e:8d:ae:b1:53:f2:9d:2c:f0:27:72:31:37:d4:
f8:75:ee:20:55:09:22:c1:8e:7c:47:26:3b:e9:a0:c7:4d:29:
8f:0b:d2:b2:19:ca:26:aa:d6:53:a9:92:81:2e:f5:e2:c5:f6:
c3:4e:64:fa:16:06:8f:11:13:29:c0:a1:73:08:a1:ec:38:49:
2e:0e:65:72:43:c0:0e:1b:b2:2b:de:c5:7d:00:62:a5:76:c6:
66:de:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:36:30 2023 by rpki-client on console-ams.rpki-client.org