Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/180ca2fa880cd1de00cc52f1bd541e11e1439e75.roa
File: 180ca2fa880cd1de00cc52f1bd541e11e1439e75.roa (raw, json)
Hash identifier: 6JzOuz2eEzYIxv75reVvfzned+xRMaekxlu2JYgvu4Y=
Subject key identifier: 7D:A8:9F:D4:0A:7C:FB:A1:68:F4:DE:47:63:95:7A:64:CE:79:9F:32
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D8D97
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/180ca2fa880cd1de00cc52f1bd541e11e1439e75.roa
Signing time: Wed 24 Mar 2021 14:37:05 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 138.59.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888215 (0xd8d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=180ca2fa880cd1de00cc52f1bd541e11e1439e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a6:46:10:87:20:60:02:9f:29:c8:7f:78:ec:
8e:04:04:15:1d:83:52:1c:2d:17:c2:8d:39:ff:bd:
da:d6:01:79:d8:ab:51:23:d1:ce:21:83:fe:aa:73:
d9:97:72:36:e5:f3:5a:03:dc:0c:28:e1:f8:f9:77:
42:01:fe:46:07:c3:0c:e5:52:1d:2f:1e:af:68:ba:
6c:88:52:e9:63:d1:ae:a0:df:35:fd:df:02:20:a7:
c6:56:99:f9:ba:57:cb:8b:7e:1a:11:97:25:16:f4:
37:bc:79:2e:57:6b:e3:38:53:8c:32:d8:7c:1f:2c:
f5:c4:ec:f2:11:47:20:07:7e:de:3b:de:20:c9:38:
45:b1:99:68:a7:e6:df:11:46:c2:25:36:9b:0b:0f:
ab:0f:50:d3:14:b4:b7:2c:b7:c2:3d:d2:a2:72:dc:
46:ec:d6:d7:d1:ee:e1:8a:1b:fe:f9:f1:42:8d:e7:
a7:43:28:59:67:0c:41:1b:ba:2d:b5:5b:ba:d8:ac:
1e:d3:ee:47:04:26:48:14:26:a8:6f:53:bd:19:b5:
b9:b9:84:a1:b3:66:36:40:fe:96:fc:ec:ff:7f:60:
04:b2:33:da:08:3e:4c:1b:fa:3d:93:ea:3d:da:48:
c4:ad:b6:16:ae:3b:3a:e4:fe:ec:ee:43:f6:15:7c:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:9F:D4:0A:7C:FB:A1:68:F4:DE:47:63:95:7A:64:CE:79:9F:32
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/180ca2fa880cd1de00cc52f1bd541e11e1439e75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.18.0/24
Signature Algorithm: sha256WithRSAEncryption
39:74:01:5e:2e:ea:1f:94:54:61:10:fc:5d:ad:2f:75:99:41:
91:f3:4d:3c:1c:7c:40:cc:f8:f6:b2:11:0e:e8:8e:4d:91:15:
ca:db:db:1f:1c:67:85:1c:ab:96:0e:fc:99:74:76:ed:40:30:
30:27:cd:93:5f:85:17:50:b6:26:cc:ba:40:82:84:e0:b4:dd:
ea:68:c6:00:57:76:80:1e:eb:3d:c7:5a:d5:ca:40:a2:69:6d:
99:e6:08:ec:dc:14:60:1a:d7:0b:cb:44:e2:e9:04:8c:86:b8:
64:1e:b9:58:63:6c:21:6a:60:8f:c3:a2:a9:59:7c:80:6a:f6:
e3:28:a8:11:b4:e1:a4:b9:a9:42:b8:be:14:5e:57:f7:e5:fa:
36:b7:0d:bf:ff:b1:f1:63:dd:86:80:33:d5:76:a7:8d:0a:1b:
5a:fd:87:c4:07:95:99:2e:29:00:5e:e8:e0:60:48:46:4f:cc:
dc:52:87:0a:e6:ed:a2:b7:4b:21:5b:b0:76:49:50:15:98:43:
55:2f:5f:da:e7:74:32:6d:ec:87:13:2d:d1:f3:ff:9d:bf:85:
f4:47:53:48:81:a7:fb:e7:84:0a:65:34:8c:bc:74:ab:af:44:
86:c0:12:ef:02:f2:1b:c1:10:a8:80:2f:7e:ab:98:44:8e:b9:
62:9a:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:22:13 2023 by rpki-client on console-ams.rpki-client.org