Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/3c8ffb7db64d054551b3093f7cf47fac125ce30d.roa
File: 3c8ffb7db64d054551b3093f7cf47fac125ce30d.roa (raw, json)
Hash identifier: ruj53AQ2XEDN64ZCxo4r3u0fMtBHu4qqR8WUppjgNpo=
Subject key identifier: E3:C0:B3:59:12:4D:B9:09:1D:89:B4:17:92:31:15:7E:16:71:9A:06
Certificate issuer: /CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
Certificate serial: 02DCBE
Authority key identifier: 33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/3c8ffb7db64d054551b3093f7cf47fac125ce30d.roa
Signing time: Sat 13 May 2023 19:49:54 +0000
ROA not before: Fri 12 May 2023 19:49:54 +0000
ROA not after: Tue 13 May 2025 19:49:54 +0000
asID: 28432
IP address blocks: 201.131.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187582 (0x2dcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
Validity
Not Before: May 12 19:49:54 2023 GMT
Not After : May 13 19:49:54 2025 GMT
Subject: CN=3c8ffb7db64d054551b3093f7cf47fac125ce30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:1c:38:4f:bd:35:41:f1:e5:61:4d:d8:8b:
fe:fb:d9:60:c6:1a:cd:a8:62:f0:3b:98:30:b4:a3:
f2:bd:e5:19:c4:f7:57:e2:c0:9f:c0:ff:1f:ed:a4:
ae:a8:15:fe:85:54:ea:f8:f5:7f:cb:84:35:17:79:
c3:24:70:66:d9:8c:3d:34:6c:8c:62:f5:c1:03:c4:
bd:53:1e:49:69:25:4a:9e:08:8b:b0:42:ba:2e:ae:
d3:a0:0a:4f:86:97:90:21:0a:ae:bd:ff:e0:1f:6d:
da:38:69:d1:ac:92:61:07:e3:4b:8e:80:4b:92:93:
b5:df:8f:b1:2b:c1:30:a5:e0:20:ed:d8:c0:87:6a:
99:04:73:cf:da:51:89:7a:28:9a:ec:5f:71:00:03:
7e:73:2f:e8:f4:49:18:a2:03:fc:f3:e8:4f:4d:45:
8a:e2:82:20:07:85:88:63:25:9c:a7:47:f8:40:09:
a8:5b:a0:05:a3:1b:b9:b9:e2:82:61:7a:8e:80:79:
88:e4:8a:6b:c8:ad:c9:55:f0:fa:b9:34:90:65:5d:
74:e5:35:54:b4:55:e4:79:50:85:f0:b5:4c:0c:ac:
30:30:44:a8:f8:2f:c3:06:b8:d2:10:ae:7e:10:45:
90:25:94:ae:0c:44:a4:cd:22:94:8b:80:c5:29:10:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:B3:59:12:4D:B9:09:1D:89:B4:17:92:31:15:7E:16:71:9A:06
X509v3 Authority Key Identifier:
keyid:33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/3c8ffb7db64d054551b3093f7cf47fac125ce30d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.236.0/22
Signature Algorithm: sha256WithRSAEncryption
39:6b:87:69:da:8c:10:55:a1:06:56:01:e3:74:dc:60:69:d4:
fe:17:35:11:33:e0:a1:34:79:9e:a8:c7:78:58:57:3d:9d:fb:
41:39:57:91:dc:3a:1b:f0:99:8e:83:c4:29:e9:8a:89:32:31:
8d:97:df:9f:f6:3e:b3:2c:16:4d:9a:cf:76:f9:55:0c:f5:85:
c7:1f:bb:f0:c7:a7:ba:46:97:1e:95:59:c9:54:9a:87:45:b0:
b2:10:34:98:35:e8:64:75:e2:e2:0d:7e:61:4f:cb:8a:b8:11:
af:0e:34:cd:1d:46:b1:8e:f0:a9:4e:cf:e0:12:84:4d:e3:46:
aa:9a:ee:c7:b3:4d:f5:87:4e:b3:55:76:c7:e1:e1:30:dd:3a:
73:c9:5f:d0:a4:74:15:d3:9f:44:e0:f5:c3:23:9f:06:19:96:
e9:8d:da:01:d9:d1:39:ba:c1:78:e0:84:47:21:4a:4a:25:cb:
bf:31:15:26:c2:88:bc:24:26:74:8f:37:93:fc:de:eb:3c:fd:
47:1c:a0:40:af:fb:7f:af:ac:25:67:1c:4b:59:6b:00:74:69:
a5:17:e0:72:e2:e4:29:3b:9b:87:27:be:b2:23:db:03:54:11:
ef:e0:e6:f8:08:af:3a:c8:86:58:43:6d:9b:43:00:16:c4:11:
d9:ff:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org