Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/24b903bd9b5dfed2f709826524b3446a5453bdc4.roa
File: 24b903bd9b5dfed2f709826524b3446a5453bdc4.roa (raw, json)
Hash identifier: 9jCrn/na9I51vq1gLiJHZMcT2U8v7f5mp80gaOMEBxE=
Subject key identifier: 4C:06:E7:14:66:98:D9:03:82:BC:36:B3:00:7C:38:16:58:59:E0:9B
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D9399
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/24b903bd9b5dfed2f709826524b3446a5453bdc4.roa
Signing time: Wed 24 Mar 2021 14:37:06 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 138.59.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889753 (0xd9399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=24b903bd9b5dfed2f709826524b3446a5453bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8d:12:58:80:c1:d0:b1:66:2d:cd:7c:d8:37:
82:d3:54:c3:b9:73:89:f4:e2:68:5a:74:0a:af:07:
d1:00:d7:62:be:db:cf:75:32:b6:a0:53:3b:6c:61:
40:86:4e:5f:9d:0f:de:dd:78:11:60:0e:a6:9e:bb:
e2:cd:37:85:13:18:d5:a1:fe:27:8f:55:2b:e8:bc:
17:5c:f4:58:3b:35:f0:24:af:f5:cd:a9:17:d3:72:
2f:41:dc:63:1a:8e:e2:75:d6:33:7b:d5:dc:08:03:
a6:77:4a:f4:24:8f:11:b9:82:76:6a:d0:e7:a5:8c:
1e:2e:d5:d9:e6:73:ed:9f:8d:97:f5:89:8e:bf:cc:
d6:90:0d:98:f3:b1:47:a9:f1:b2:56:bf:33:20:f4:
09:3f:59:cb:3e:f7:85:b0:62:8f:f2:69:83:75:ba:
35:8d:56:65:5f:c8:2b:85:18:ce:56:c4:f3:22:a1:
30:70:68:91:5f:f6:57:4f:28:98:27:bf:97:0f:e9:
ff:06:08:cc:e7:f6:42:37:1f:5d:70:b1:6f:16:cc:
14:ee:4e:8a:98:c3:e7:31:40:0a:44:4a:e6:56:ca:
7e:05:15:e5:e7:59:52:53:cc:82:2a:33:c4:db:d8:
7e:6e:51:71:5b:c3:4f:26:ee:4d:b7:a5:36:63:34:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:E7:14:66:98:D9:03:82:BC:36:B3:00:7C:38:16:58:59:E0:9B
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/24b903bd9b5dfed2f709826524b3446a5453bdc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.16.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1e:04:3d:66:bf:9f:a2:56:a2:fd:32:40:de:81:e6:bb:ff:
3e:d3:30:68:22:48:67:1b:af:ef:e1:9c:24:ac:99:b9:9b:b4:
6f:69:e7:d9:52:f6:7e:fe:c9:1f:22:48:82:e7:68:ee:09:0c:
ab:2c:87:01:60:e3:de:03:e9:e4:ed:32:e3:f0:83:00:d7:66:
15:28:f5:54:11:35:92:77:67:ab:13:e0:0c:fa:d6:60:37:91:
41:05:70:93:4c:90:0b:c5:f2:de:91:1c:52:48:f8:0d:62:0f:
20:ca:03:ef:f3:90:8e:d7:60:44:c0:27:3a:c7:dd:f7:48:26:
f0:1a:d6:cb:c0:43:62:72:69:58:ab:08:11:57:f5:3b:3b:8a:
e6:92:40:c0:37:dc:53:a2:98:c8:d5:3c:06:c1:cf:f7:64:16:
6f:01:b8:02:e4:8a:e5:9d:a6:72:29:8e:1b:92:c0:79:06:60:
3a:bb:96:75:eb:43:36:b5:8e:f7:d3:5b:ca:f8:ca:4c:a6:79:
0d:a7:d9:91:1d:2d:a8:90:74:1d:58:d3:e1:b8:5e:30:ac:ba:
29:4a:86:51:ce:5b:25:6b:4a:10:d6:30:cc:5f:8d:81:ee:e6:
84:5f:9f:0b:5d:56:e4:48:cf:e5:16:70:a4:3d:10:4c:cd:54:
db:83:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:18:15 2023 by rpki-client on console-fra.rpki-client.org