Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa
File: 6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa (raw, json)
Hash identifier: wi7NW1BoUbUJqPNFxXsUNofyi5FPk77teiQ2WihJm1c=
Subject key identifier: 58:2F:F8:3E:31:F5:41:1F:59:9B:01:BA:16:8B:3C:CE:A2:EC:91:8E
Certificate issuer: /CN=4245076a2cc4607485f913342504c58cdd14441f
Certificate serial: 0CC04E
Authority key identifier: AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa
Signing time: Wed 24 Mar 2021 14:34:22 +0000
ROA not before: Wed 24 Mar 2021 14:34:22 +0000
ROA not after: Tue 24 Mar 2026 14:34:22 +0000
asID: 269733
IP address blocks: 138.36.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835662 (0xcc04e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4245076a2cc4607485f913342504c58cdd14441f
Validity
Not Before: Mar 24 14:34:22 2021 GMT
Not After : Mar 24 14:34:22 2026 GMT
Subject: CN=6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:fe:a1:69:a4:a1:e2:c2:9e:5e:1e:83:1d:
6b:3b:4c:c8:a2:ed:80:1c:7d:59:7f:8f:73:d6:77:
50:b6:49:20:dd:e4:09:84:f6:c9:52:52:3b:0d:e2:
ae:4e:5e:2b:1f:e0:ea:35:0b:fd:98:aa:97:1f:2e:
13:fc:10:ce:fd:89:ee:ea:85:0e:84:74:84:be:a3:
ee:79:d1:71:8f:f7:66:76:23:cc:fa:c5:c2:31:84:
e8:17:6d:0e:37:20:03:21:99:ab:de:37:bb:02:10:
5e:38:22:7c:67:c5:8d:3b:c5:09:30:a7:e9:98:44:
2d:2c:92:51:38:68:8a:cd:ba:e9:d3:48:01:60:bb:
92:14:f7:c6:d3:46:08:69:29:b9:4a:c8:be:5b:ae:
81:73:a3:d3:11:57:62:42:45:c2:d7:44:dc:9e:40:
e3:1a:5f:e8:d4:28:44:17:8d:42:33:24:06:29:bd:
f8:a7:cf:77:9e:17:fc:f0:08:84:f3:d8:cf:4c:84:
a3:01:0f:24:0c:18:83:81:c9:96:cc:fe:4c:a6:68:
60:3d:f4:c9:9a:a1:90:d0:f2:5f:48:24:9b:9d:c7:
04:61:c2:b1:24:86:d7:57:55:bb:c6:10:1f:d4:16:
f4:35:df:64:bc:d8:ea:20:89:2b:57:0f:8d:50:15:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:F8:3E:31:F5:41:1F:59:9B:01:BA:16:8B:3C:CE:A2:EC:91:8E
X509v3 Authority Key Identifier:
keyid:AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/6f5bf004e86f6121ed2184fb649f7bcb6bf8a44f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:2b:03:cd:30:e0:70:55:ee:69:31:87:42:55:6a:d8:7a:26:
c7:8a:b4:7f:97:43:26:8c:e0:60:cc:10:1d:0b:56:28:98:b7:
78:d3:79:32:b9:87:7f:d6:94:9c:bd:68:61:24:fd:c0:be:8a:
4c:cc:6a:db:04:20:ca:91:da:53:22:45:71:fd:2a:50:44:b7:
58:a1:f6:db:41:f9:8b:0f:bc:2f:4c:76:58:71:e9:15:48:8f:
87:ae:13:7e:42:f6:76:d7:11:61:e7:d3:3b:23:49:62:b5:c2:
1a:c6:52:a4:63:8a:5c:0e:8b:50:49:47:8e:9c:4d:4f:85:9f:
00:12:57:26:3b:9e:ba:73:c2:77:08:21:40:02:5b:2b:e5:85:
a9:fc:b2:52:e3:4f:f2:02:36:89:0a:b5:2d:82:3c:26:8a:1a:
df:e6:d3:dd:0f:78:24:41:88:e7:c2:a8:41:f4:0e:a5:f0:2c:
8a:e8:ef:ba:8b:08:cb:02:46:95:76:32:c1:49:72:2c:b6:c3:
d2:5d:54:9c:0a:cf:bb:64:3c:80:c3:82:1a:0c:c1:0d:2e:71:
d6:01:41:39:85:71:c1:8f:39:87:0c:a2:dc:a9:5a:64:56:0d:
13:25:cf:2e:4c:43:aa:25:d8:c1:2c:b8:93:74:4e:11:13:8b:
c5:c4:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org