Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/f9911d738e5360e76b4f95fd0f355706a66b0f4d.roa
File: f9911d738e5360e76b4f95fd0f355706a66b0f4d.roa (raw, json)
Hash identifier: 5dvDiwV5e8nYl5KAvDX+jsAYpxNR+nXu2YlVLE9Tn8s=
Subject key identifier: 96:04:1D:0B:6A:3F:D5:B8:DD:CB:9A:13:F2:EB:D1:CD:56:EF:DD:97
Certificate issuer: /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial: 0836B3
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/f9911d738e5360e76b4f95fd0f355706a66b0f4d.roa
Signing time: Fri 01 Apr 2022 13:46:31 +0000
ROA not before: Fri 01 Apr 2022 03:00:00 +0000
ROA not after: Mon 01 Apr 2024 03:00:00 +0000
asID: 265772
IP address blocks: 131.196.80.0/24 maxlen: 24
131.196.83.0/24 maxlen: 24
2803:37c0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538291 (0x836b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Validity
Not Before: Apr 1 03:00:00 2022 GMT
Not After : Apr 1 03:00:00 2024 GMT
Subject: CN=f9911d738e5360e76b4f95fd0f355706a66b0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:b3:d8:68:6d:e0:fd:01:88:dc:cc:85:55:
f5:ba:bf:76:80:fe:f7:54:dc:02:c6:75:a8:c2:46:
f1:f4:e0:8f:2e:c5:75:b0:3f:52:95:9a:38:d2:ce:
80:fa:dc:4f:c2:eb:4a:13:b8:df:8d:3d:51:27:f4:
4c:54:20:7d:b3:5f:97:8b:c8:84:2c:e0:15:d3:54:
59:ce:e9:ff:79:e3:96:5a:b6:91:31:89:29:6e:cf:
36:a5:c5:85:8e:99:fb:17:0a:0d:4e:f7:73:a0:86:
10:4f:84:df:59:45:3b:a8:30:80:12:4b:b2:1b:31:
89:37:d9:59:67:e6:2d:ac:49:ff:50:35:b1:1e:bc:
dc:b9:2a:7c:36:ec:ad:4a:b9:e2:c6:3f:42:1f:f8:
b4:e1:05:c8:ec:38:5b:1a:83:cc:76:69:ec:30:10:
31:15:31:49:b5:e7:e6:c5:13:e0:7e:31:d3:42:ed:
fb:8d:e2:3b:47:83:03:19:57:55:a3:14:ad:83:21:
0a:5f:3f:ef:82:24:0a:f6:38:eb:5d:5c:67:87:ca:
19:0e:8a:d6:a8:56:08:ee:7d:1f:83:9c:1c:39:56:
99:b9:f8:fd:d4:c2:49:e8:bd:62:b5:1b:5b:c4:0f:
91:6c:78:78:05:8f:bb:be:73:9f:86:35:57:aa:39:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:1D:0B:6A:3F:D5:B8:DD:CB:9A:13:F2:EB:D1:CD:56:EF:DD:97
X509v3 Authority Key Identifier:
keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/f9911d738e5360e76b4f95fd0f355706a66b0f4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.80.0/24
131.196.83.0/24
IPv6:
2803:37c0::/32
Signature Algorithm: sha256WithRSAEncryption
68:11:c1:5a:97:e8:34:e9:09:b3:ef:8d:10:82:30:e9:dd:b7:
e9:64:9f:2b:b5:e4:39:47:dd:6b:17:d5:0a:6b:8a:b8:03:05:
dd:00:ae:92:84:bb:03:c7:ff:f8:19:c6:88:b7:0d:bd:41:1b:
8c:85:69:21:bf:83:ec:9a:a1:e6:ae:d9:17:76:95:3f:7d:a7:
79:0b:5a:4c:75:af:1e:0b:45:e0:40:e6:c1:a0:38:2b:9c:e0:
28:05:ef:10:4e:2e:b0:26:d3:5c:e4:4f:df:3a:a8:a9:a9:92:
9a:79:ed:1e:a6:3b:3f:cd:9a:21:11:98:aa:19:86:95:0d:6c:
38:54:b7:09:e8:e3:14:0e:30:ee:6c:4b:2a:72:6b:bf:36:dd:
6b:fe:d2:c8:aa:b4:7e:4c:f8:40:7a:bc:73:46:7e:1c:df:c1:
a4:28:8e:34:57:fc:5f:2b:04:03:a6:34:d2:27:2e:93:36:1c:
1d:f3:3a:a8:62:b0:aa:59:15:1d:9b:eb:e7:61:e2:f5:94:7c:
78:77:5b:e7:29:e4:70:8e:eb:ab:41:48:4b:11:3d:5d:b3:87:
a8:2f:a4:da:d8:6e:85:4e:0b:33:8e:9b:f6:aa:0c:cf:e9:0b:
98:63:b4:a6:b5:d6:4b:d5:bb:ae:0e:74:2b:71:72:ae:18:78:
4b:e1:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org