Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/f485977a4b49e94c4e6354bf05c6f25d6e871814.roa
File: f485977a4b49e94c4e6354bf05c6f25d6e871814.roa (raw, json)
Hash identifier: yozH8uKI5Z5zE1I+QloBUYmL89rfBpgVZOYh+TSvmT4=
Subject key identifier: D1:F3:F4:68:B9:48:F4:E3:32:85:FF:5A:2B:D9:D5:58:47:A9:4F:B5
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0D1F9A
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/f485977a4b49e94c4e6354bf05c6f25d6e871814.roa
Signing time: Wed 24 Mar 2021 14:29:20 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 64104
IP address blocks: 138.204.253.0/24 maxlen: 24
201.182.137.0/24 maxlen: 24
2001:13c7:601f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860058 (0xd1f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=f485977a4b49e94c4e6354bf05c6f25d6e871814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:b5:81:a9:6a:07:ac:a7:49:00:93:7d:c7:
89:01:65:30:f2:a4:e3:a6:69:8d:77:6d:14:4e:f1:
62:32:19:40:d9:20:f3:c1:35:c4:de:91:fa:7c:cd:
2d:44:2d:63:07:74:18:53:a3:9a:a6:b3:b1:f9:b3:
54:02:52:0c:ea:18:cc:41:30:85:ff:5c:30:9c:0c:
ee:f9:f7:26:2d:7f:b1:c4:8e:36:ef:26:17:a3:39:
8d:95:c4:5a:f7:01:5e:e7:a2:55:1a:e6:04:bb:bc:
8c:cc:dd:23:96:4e:70:45:7f:92:60:13:d5:85:68:
1e:75:dc:b7:59:8b:b8:34:d4:75:ae:29:a0:e4:4e:
0f:09:90:0b:4b:dd:27:ae:04:2c:2d:80:c8:08:3b:
c3:18:a7:79:01:49:4a:ed:8f:69:7b:9b:e6:b6:cf:
e9:af:d7:5b:72:65:31:4a:35:1c:08:08:be:da:0c:
7f:6c:e7:38:73:3f:fb:00:fa:08:2b:59:49:6e:8d:
6d:42:80:58:3f:62:d7:32:78:cf:b1:28:da:4e:50:
0b:63:05:e4:f5:f0:f4:d2:c9:d0:e5:f7:87:e4:d6:
a2:ff:6a:b4:b7:c1:c6:e4:b1:49:5c:fe:1f:2d:39:
fe:c3:29:d5:ad:d6:a0:42:a9:e8:39:e7:7f:e8:b3:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F3:F4:68:B9:48:F4:E3:32:85:FF:5A:2B:D9:D5:58:47:A9:4F:B5
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/f485977a4b49e94c4e6354bf05c6f25d6e871814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.253.0/24
201.182.137.0/24
IPv6:
2001:13c7:601f::/48
Signature Algorithm: sha256WithRSAEncryption
60:ac:15:0c:99:79:d7:6c:cd:6c:e2:06:6e:80:a2:b5:fb:eb:
21:bd:ff:52:1a:6d:37:8e:3b:33:a0:87:e3:d5:0c:67:ab:4e:
32:18:d5:4a:6b:30:78:26:46:4c:45:7b:89:e5:ac:d7:30:27:
bf:09:89:f5:35:8e:c5:29:95:fe:f0:d2:86:5b:fb:44:e4:33:
71:70:a4:06:fc:86:31:3d:5d:59:5c:3b:1a:b0:3a:47:35:77:
5c:66:f6:2d:f1:89:e5:78:43:c7:ba:78:9c:7b:60:c1:39:35:
e3:30:59:f2:8a:3d:88:5c:68:ef:00:f3:1d:81:83:d7:4e:4f:
07:64:1c:40:6a:09:c9:3c:7d:6d:9f:ca:e1:91:0a:c4:30:44:
ae:86:9a:d7:00:f6:33:2e:2d:56:6e:7c:e7:29:f2:a1:59:23:
61:1b:4f:16:eb:c4:cd:65:50:0c:74:cb:02:74:c8:72:82:ac:
43:2e:df:39:b9:89:31:c5:3a:fe:03:5d:ee:8e:b0:75:37:e4:
93:f9:06:fa:6f:ac:ba:6c:97:db:42:99:13:db:17:94:ad:db:
89:05:c6:93:64:bc:33:c4:58:77:08:36:18:81:0d:14:a5:b1:
ee:a4:97:da:da:ce:90:d3:d1:03:3f:ea:44:a5:50:3c:2f:64:
e0:48:43:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:51:51 2023 by rpki-client on console-fra.rpki-client.org