Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/3c853c0d97ff984e182a8dbe0fd4ce6b2ae434bd.roa
File: 3c853c0d97ff984e182a8dbe0fd4ce6b2ae434bd.roa (raw, json)
Hash identifier: u55+PdcsTTDbArBNCyvGCDsbuXfwEy3RFiXEcKRVWkY=
Subject key identifier: BA:0C:9C:69:1E:AB:04:FB:AB:3F:71:8E:35:19:9E:A8:61:A4:AD:36
Certificate issuer: /CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Certificate serial: 0588
Authority key identifier: 0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/3c853c0d97ff984e182a8dbe0fd4ce6b2ae434bd.roa
Signing time: Tue 31 Aug 2021 17:30:38 +0000
ROA not before: Tue 31 Aug 2021 03:00:00 +0000
ROA not after: Thu 31 Aug 2023 03:00:00 +0000
asID: 264850
IP address blocks: 138.0.240.0/22 maxlen: 22
138.186.136.0/22 maxlen: 22
168.90.196.0/22 maxlen: 22
170.83.176.0/22 maxlen: 22
200.10.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1416 (0x588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Validity
Not Before: Aug 31 03:00:00 2021 GMT
Not After : Aug 31 03:00:00 2023 GMT
Subject: CN=3c853c0d97ff984e182a8dbe0fd4ce6b2ae434bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:1f:80:83:ad:27:de:e0:1a:23:ae:a0:c6:
a5:22:49:b8:49:de:32:f5:96:ea:9b:e6:cd:b9:14:
1c:f6:06:e3:de:ea:63:2f:3c:08:47:3d:1e:9e:cb:
0e:f3:ce:02:59:ec:24:2f:a8:53:7a:da:b7:e4:bd:
be:81:3c:94:69:92:34:55:8a:8b:b0:c5:0c:b6:1b:
1d:51:06:fc:b0:41:7b:62:70:75:71:e4:f3:0a:ae:
85:30:63:13:68:e7:b5:ee:d4:51:d7:21:fe:63:b8:
51:67:60:b8:0f:6d:08:c3:31:fd:50:cf:55:41:98:
ae:a8:ae:28:2f:bf:b9:64:4d:e4:8d:dc:3a:a3:29:
b1:ae:0d:27:55:68:80:69:31:3a:2a:7a:5c:c0:92:
59:4f:5a:99:26:ee:27:81:43:58:2d:a7:51:eb:c5:
df:1d:2f:4a:d5:07:41:d4:ef:40:ae:91:88:ed:8f:
f8:70:eb:3f:67:a9:07:62:79:2a:29:9a:bb:d0:7c:
28:59:8d:06:fd:d2:ad:13:47:73:fc:8a:1d:85:9f:
af:68:b5:65:cf:7b:6a:be:62:e7:c0:a5:3b:cc:e8:
52:58:9d:3b:03:ea:2d:43:3f:4a:8a:3c:cd:68:26:
ba:09:5a:75:b9:08:88:ad:bc:e0:a1:35:e8:96:c0:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:9C:69:1E:AB:04:FB:AB:3F:71:8E:35:19:9E:A8:61:A4:AD:36
X509v3 Authority Key Identifier:
keyid:0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/3c853c0d97ff984e182a8dbe0fd4ce6b2ae434bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.240.0/22
138.186.136.0/22
168.90.196.0/22
170.83.176.0/22
200.10.32.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:a3:71:5c:16:ca:7d:87:bf:7f:2b:6c:62:74:8f:bc:b0:04:
f9:92:42:be:fc:7b:87:53:dd:be:6d:f6:e1:1c:f6:69:7b:1b:
14:99:9c:46:0b:c0:b6:aa:34:51:bd:a1:81:ae:db:f2:f9:7f:
3d:76:11:0a:fc:c3:b3:fa:e3:75:e1:57:82:31:7a:bc:3b:8c:
4d:e4:20:9a:a2:80:ab:f7:d7:03:41:b8:3b:47:46:ac:8d:f0:
7a:aa:9e:a4:f5:05:e8:d2:73:70:7c:3e:12:b8:a4:d4:fa:c8:
d3:03:28:1b:ed:f5:2d:bc:fc:0c:70:6f:07:a5:b5:b9:93:43:
ac:55:ba:3d:6a:b1:91:3a:b7:0c:8b:45:b1:5d:eb:fc:a4:50:
61:04:7a:68:28:8d:af:a5:11:8c:ab:32:ac:4d:4c:37:0e:59:
f6:02:2a:cc:ce:b4:9b:8a:3e:6a:0f:41:a2:9a:5e:0c:76:77:
71:ee:46:c3:75:4c:da:1c:a6:f6:a9:df:6c:b4:10:30:00:31:
7e:4d:55:9d:97:2e:db:4d:c5:27:9d:86:f6:ed:cd:e9:66:d9:
47:b6:25:0b:40:78:cf:23:5a:3c:a6:c7:95:27:0d:b5:b4:73:
81:89:30:34:35:f2:6b:7d:d4:14:92:cf:5f:f9:3f:dc:0f:d2:
60:af:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 09:20:59 2023 by rpki-client on console-ams.rpki-client.org