Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/1d2701be00b6beeff69bf2f997d532741a4deed4.roa
File: 1d2701be00b6beeff69bf2f997d532741a4deed4.roa (raw, json)
Hash identifier: CafqeYXy+OBWpTKNlH2Rf4S1smQKxYny1ZU4vWmTzkA=
Subject key identifier: B1:64:60:B1:9B:F5:31:9B:0E:B8:A6:97:1E:AB:71:6E:12:EA:5A:82
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D8F38
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/1d2701be00b6beeff69bf2f997d532741a4deed4.roa
Signing time: Wed 24 Mar 2021 14:37:06 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 138.59.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888632 (0xd8f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=1d2701be00b6beeff69bf2f997d532741a4deed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:63:1e:52:72:54:18:32:b2:2e:8c:51:24:
6a:bb:b5:8f:da:60:59:bd:25:88:cd:43:69:49:ee:
5e:48:c8:00:58:e9:1d:55:e5:3a:4f:00:e0:17:2f:
88:24:78:4f:e0:b6:0c:3f:7f:a4:f5:51:e3:dc:40:
c0:a2:c0:45:f0:39:da:92:db:92:b2:91:8f:14:0e:
99:e4:02:57:03:e2:d4:ff:2b:de:ec:9c:e2:07:89:
d6:f1:fd:db:02:cb:29:27:65:79:f4:af:76:3c:83:
8b:1f:f2:e7:c6:aa:3b:bc:7d:9f:d6:1d:ca:37:ab:
d1:54:18:ac:fe:54:d2:b3:e8:b7:43:8a:22:75:91:
ae:1c:8c:78:bc:16:5a:74:fc:d8:31:ef:bd:24:e3:
b4:55:71:74:b7:85:3f:49:19:90:f6:3c:d8:9a:64:
9e:50:35:5b:2a:b4:c9:44:b5:8e:7d:2b:13:89:61:
0d:08:68:c8:07:32:94:9c:98:05:eb:bd:92:c4:39:
80:1f:b0:87:a7:64:78:16:66:cc:56:26:aa:99:9e:
94:28:fd:dc:0f:0d:98:2c:a1:4f:ff:5d:a0:44:79:
bf:9d:8e:ea:26:49:1a:63:47:c3:36:0f:a0:62:5e:
08:44:66:0d:64:0d:22:8f:b8:dd:5d:9c:bc:7e:38:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:60:B1:9B:F5:31:9B:0E:B8:A6:97:1E:AB:71:6E:12:EA:5A:82
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/1d2701be00b6beeff69bf2f997d532741a4deed4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.16.0/22
Signature Algorithm: sha256WithRSAEncryption
72:c8:f0:69:75:98:28:21:b9:35:08:19:d7:d6:4b:64:2d:8e:
42:e0:c3:0d:b7:09:c1:85:e0:46:04:fb:b4:f4:67:e6:2f:54:
ee:99:89:18:1c:a5:bd:ae:79:e6:fc:ba:06:49:d5:60:ec:d4:
75:94:e4:c2:80:61:b4:39:73:d1:69:63:38:97:3e:fb:e1:cd:
11:09:7f:65:bb:4b:58:9b:48:b8:5a:df:9a:d3:5a:b2:78:a3:
b7:27:c8:38:a9:e8:20:5b:76:4f:c6:9d:00:95:64:87:ad:4b:
c3:41:fa:0a:ea:1d:74:78:59:7d:55:80:d1:d6:72:27:8a:5f:
05:b7:fc:5a:88:7a:0d:a7:8a:60:22:85:2c:5d:f9:d0:ad:b3:
cd:fb:ac:c2:fd:05:dd:ac:bb:0b:66:6e:90:5d:73:40:69:6c:
0f:12:fa:4d:05:15:bf:be:b4:66:2c:8c:3c:84:ea:52:16:bd:
13:83:fd:98:73:3f:d3:a9:2d:be:76:80:d7:fc:ed:e8:c3:d7:
3f:b9:a9:f9:68:21:73:64:f8:81:d3:79:64:1e:fe:f1:06:43:
de:06:38:9a:45:48:7c:cf:92:4e:21:42:b4:43:c9:1d:40:36:
36:e4:67:7d:45:32:e6:8b:20:64:1c:8d:7a:2e:c5:6a:a8:c1:
2a:8c:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:18:15 2023 by rpki-client on console-fra.rpki-client.org