Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/cfd4a0b241901e2a46a3649c36d0bb6a0b5b1713.roa
File: cfd4a0b241901e2a46a3649c36d0bb6a0b5b1713.roa (raw, json)
Hash identifier: FWLrIl3uoJEdyFiKkBWAY6FHPkfrA/XZVAssQtYrt2c=
Subject key identifier: E1:B8:23:01:DA:BA:F0:85:38:21:37:C7:21:6E:81:49:FA:80:BA:3D
Certificate issuer: /CN=59310929980be7f876d3482fedcd45ce2c4f795e
Certificate serial: EEBF
Authority key identifier: 74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/cfd4a0b241901e2a46a3649c36d0bb6a0b5b1713.roa
Signing time: Wed 06 Oct 2021 15:13:46 +0000
ROA not before: Tue 31 Aug 2021 03:00:00 +0000
ROA not after: Thu 31 Aug 2023 03:00:00 +0000
asID: 263744
IP address blocks: 131.108.16.0/22 maxlen: 22
138.94.216.0/22 maxlen: 22
143.137.168.0/22 maxlen: 22
168.228.44.0/22 maxlen: 22
170.81.196.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61119 (0xeebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59310929980be7f876d3482fedcd45ce2c4f795e
Validity
Not Before: Aug 31 03:00:00 2021 GMT
Not After : Aug 31 03:00:00 2023 GMT
Subject: CN=cfd4a0b241901e2a46a3649c36d0bb6a0b5b1713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:e5:e1:9b:fe:17:b9:9a:6c:93:7b:fb:4d:
a1:3e:f0:fc:da:e7:44:ce:4d:2e:ed:d9:32:13:7f:
37:b0:fe:17:66:59:c7:f6:0c:6f:51:92:e4:b2:fb:
20:a7:07:4a:62:ca:0a:d8:00:b3:7d:9e:f8:fd:12:
44:5b:52:4e:77:c7:b5:ee:ba:ed:48:87:10:33:7a:
f5:af:66:63:38:b4:1c:dd:26:6d:c3:ff:11:f0:d1:
8c:88:5c:4c:b9:d4:32:dd:0b:48:de:b4:0b:1b:cb:
6b:9a:3e:ff:59:11:a6:39:5e:9a:cb:38:c3:de:eb:
fa:db:41:5d:f3:70:95:6f:61:05:b7:9b:0c:1e:aa:
2c:96:7e:28:c3:b4:3a:1d:86:20:0f:51:a9:f4:b3:
3b:55:d6:cd:d5:1c:82:2b:75:cd:4e:e6:1e:ab:4b:
e5:9e:fa:d4:f9:ce:00:b2:ca:5d:3b:ee:f9:53:2f:
d6:95:59:c2:be:64:30:c9:f1:5b:fb:47:e9:e8:fe:
8b:b0:f1:70:59:c4:f1:19:0a:09:bc:d1:8f:69:df:
a3:a5:d7:f5:5c:11:91:ca:da:d8:7f:3b:a4:c5:50:
f1:44:1f:24:a4:64:d6:54:3a:7b:fe:33:19:4d:f0:
bb:95:ea:62:4a:94:6e:10:d0:90:7a:ba:b7:34:b7:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:23:01:DA:BA:F0:85:38:21:37:C7:21:6E:81:49:FA:80:BA:3D
X509v3 Authority Key Identifier:
keyid:74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/cfd4a0b241901e2a46a3649c36d0bb6a0b5b1713.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/59310929980be7f876d3482fedcd45ce2c4f795e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.16.0/22
138.94.216.0/22
143.137.168.0/22
168.228.44.0/22
170.81.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:92:20:f4:fc:7c:cf:99:38:d7:bf:1c:2c:ea:42:f2:d8:87:
cb:78:bf:c2:2d:2f:ee:f3:23:ca:7c:00:e0:e8:78:29:fd:02:
39:b5:e6:4a:33:03:ac:4b:10:b3:48:be:20:6d:92:d6:8a:fa:
04:a3:32:71:01:f0:3b:45:50:38:19:e9:b3:37:a5:af:07:c6:
ff:1d:93:af:c3:c8:9b:05:16:05:6c:53:6a:58:ea:e6:5b:77:
34:7c:51:f4:74:a3:b2:d0:42:f3:31:99:53:7e:67:16:97:66:
8e:ec:25:02:91:8e:15:36:a2:55:00:cb:96:fd:ec:bd:19:88:
30:21:98:8a:da:e4:70:bd:ef:49:fb:66:5e:5c:31:2d:06:c2:
e3:e5:be:1b:1b:d9:15:87:e5:80:9d:2c:be:2a:05:86:e0:a2:
bf:02:80:50:2d:06:25:25:88:ed:0a:c7:36:54:c7:3c:74:d6:
5b:59:52:ba:60:4e:03:5f:60:5b:1a:34:be:57:61:5a:7d:f4:
ad:dc:72:7c:fb:1e:88:06:93:3b:a8:43:76:4b:ce:40:41:99:
67:c0:ee:14:48:aa:aa:b3:35:65:b2:64:04:9a:55:c1:14:d0:
bd:b9:d2:99:b1:dd:d0:fb:7c:0c:b2:32:1e:3b:47:ec:6d:4c:
dd:6a:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 09:01:39 2023 by rpki-client on console-fra.rpki-client.org