Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/a9103e6ea5f3020df002a0d0e04827cb9c0c7772.roa
File: a9103e6ea5f3020df002a0d0e04827cb9c0c7772.roa (raw, json)
Hash identifier: 4ox7F9zISCUvueYOE6A1+R5Wtx+c5dAa5jqMW/a/0iw=
Subject key identifier: 8F:80:50:E0:4A:43:56:02:0D:B0:9D:81:38:74:51:7C:18:75:C6:C7
Certificate issuer: /CN=59310929980be7f876d3482fedcd45ce2c4f795e
Certificate serial: 121FE8
Authority key identifier: 74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/a9103e6ea5f3020df002a0d0e04827cb9c0c7772.roa
Signing time: Wed 30 Aug 2023 08:30:02 +0000
ROA not before: Tue 29 Aug 2023 08:30:02 +0000
ROA not after: Thu 28 Aug 2025 08:30:02 +0000
asID: 263744
IP address blocks: 131.108.16.0/22 maxlen: 22
138.94.216.0/22 maxlen: 22
143.137.168.0/22 maxlen: 22
168.228.44.0/22 maxlen: 22
170.81.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Feb 2024 16:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187816 (0x121fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59310929980be7f876d3482fedcd45ce2c4f795e
Validity
Not Before: Aug 29 08:30:02 2023 GMT
Not After : Aug 28 08:30:02 2025 GMT
Subject: CN=a9103e6ea5f3020df002a0d0e04827cb9c0c7772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:35:d0:6f:1e:0d:cd:16:b1:57:7e:a7:cf:
61:a9:b8:05:4e:6c:61:d8:ed:cb:0a:e0:98:fa:e7:
a0:d2:37:07:9e:7a:2f:dd:c9:80:e5:db:57:2c:34:
79:c1:bb:72:0b:94:bf:a7:b8:b5:88:e9:f5:4a:58:
d5:0e:6c:2d:79:83:7f:c4:86:7c:c8:14:9a:f6:ca:
74:e5:9b:c6:87:eb:38:7b:02:86:35:8a:57:ce:cb:
64:e7:d9:e5:80:be:1d:63:4b:ef:d0:df:16:4d:80:
72:27:0c:82:fa:72:e3:41:10:0c:8f:22:15:85:74:
a1:7a:e1:a9:68:fe:40:9c:1e:f7:6d:66:99:82:fa:
1f:1f:43:97:83:64:54:58:27:af:60:b9:5d:35:6a:
9e:49:a4:49:66:16:af:fa:8b:59:1e:b4:7e:79:63:
aa:d0:a7:f5:36:04:6c:68:bb:3e:8c:db:10:28:40:
de:2d:3d:f7:bf:6c:b5:a0:27:83:70:76:52:e1:11:
5d:94:85:94:96:42:be:8e:56:e5:97:af:46:b9:bf:
d9:d3:36:f3:1f:47:15:fc:86:bb:9e:53:95:9b:a8:
ac:0f:25:97:cb:e4:09:9f:6b:92:41:8d:84:85:b7:
6d:f4:7a:cd:df:c6:5f:00:cd:7b:e7:87:c9:a1:b2:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:50:E0:4A:43:56:02:0D:B0:9D:81:38:74:51:7C:18:75:C6:C7
X509v3 Authority Key Identifier:
keyid:74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/a9103e6ea5f3020df002a0d0e04827cb9c0c7772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/59310929980be7f876d3482fedcd45ce2c4f795e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.16.0/22
138.94.216.0/22
143.137.168.0/22
168.228.44.0/22
170.81.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b7:f6:ce:55:ea:99:6f:c4:b9:8e:b0:b3:5f:4d:0b:03:d8:
e3:dd:05:0a:99:30:86:f3:1e:ad:35:90:e4:aa:44:51:3f:77:
23:65:f5:e3:b1:3e:d1:08:34:50:dd:3b:1b:39:18:44:8a:61:
72:06:7c:eb:9c:3f:00:ee:0d:8d:ef:ec:94:95:86:d2:98:8a:
4c:23:b5:58:59:f3:c6:31:54:8c:04:e3:f8:cf:d1:f5:2b:b6:
de:6d:2e:33:45:f5:3b:02:61:db:aa:a7:85:57:67:e0:44:02:
da:c3:47:35:d0:22:82:f8:71:83:00:e4:20:c4:1a:ce:20:79:
7a:f9:e7:80:f7:f2:86:c8:0b:7a:b8:dc:93:09:5c:4b:1e:30:
e0:f9:c3:b6:aa:ce:23:60:dd:15:38:5f:49:d9:b6:49:c5:f4:
a8:f4:06:56:e5:9c:18:81:8c:12:f6:5f:9f:f7:23:48:98:26:
3f:df:79:a1:07:09:5d:17:e5:b7:d0:71:2b:0c:f8:7e:fb:13:
b1:10:96:5e:d4:24:3b:70:63:9c:45:13:ec:12:ca:13:54:88:
cf:8f:32:76:3e:6f:43:5b:14:1c:e5:46:7f:b1:40:1e:20:a0:
29:92:e4:cb:aa:f1:24:ea:c4:6f:b5:92:f1:17:0e:4f:cd:92:
5e:98:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:52 2024 by rpki-client on console-ams.rpki-client.org