Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/c919b3564c8e6f90981885ad32534b57bd4430ec.roa
File: c919b3564c8e6f90981885ad32534b57bd4430ec.roa (raw, json)
Hash identifier: C986+SQnBqDDgnceEQrVjIozmAMSD6psbTO5uzS5aSA=
Subject key identifier: 90:5A:C7:AE:06:BD:B1:58:64:B5:6C:AF:0E:DC:ED:DB:A8:B7:EF:06
Certificate issuer: /CN=994ac353c748a2f51e9444d8c85de8cb43085110
Certificate serial: 1659B8
Authority key identifier: 23:3B:A5:B4:FD:E8:7E:D5:1F:DB:9F:C7:5B:10:4A:05:95:02:0A:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/994ac353c748a2f51e9444d8c85de8cb43085110.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/c919b3564c8e6f90981885ad32534b57bd4430ec.roa
Signing time: Fri 11 Mar 2022 13:20:23 +0000
ROA not before: Fri 11 Mar 2022 03:00:00 +0000
ROA not after: Mon 11 Mar 2024 03:00:00 +0000
asID: 263756
IP address blocks: 138.204.40.0/22 maxlen: 24
2803:ba40::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Mar 2024 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1464760 (0x1659b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994ac353c748a2f51e9444d8c85de8cb43085110
Validity
Not Before: Mar 11 03:00:00 2022 GMT
Not After : Mar 11 03:00:00 2024 GMT
Subject: CN=c919b3564c8e6f90981885ad32534b57bd4430ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:db:b0:52:81:55:4f:8a:32:94:12:97:31:
03:91:ba:88:31:ce:31:d7:e0:48:ba:e6:99:cd:60:
c1:db:b4:cf:58:ce:a5:5a:1f:7d:b5:e4:ca:82:44:
33:79:2a:b7:93:25:ec:03:ab:22:f2:b7:96:e7:60:
31:f9:36:a5:6d:c8:34:aa:a2:17:a8:92:4f:b9:68:
7e:e2:b5:80:78:09:45:f7:7b:e2:0f:67:a7:64:db:
75:bf:53:8f:2b:72:56:ca:60:97:d8:3a:12:4c:10:
1a:bb:e6:cd:8d:f7:69:25:d4:15:be:45:a6:4b:83:
cb:ca:d4:b8:95:a6:6b:86:05:d0:f4:26:9a:e6:9c:
35:55:7c:e5:2a:65:41:f0:be:de:c7:c2:0b:ff:92:
90:c4:5c:2e:76:4b:ca:76:27:b7:65:de:7c:1c:71:
bd:3b:0f:dc:9c:dc:6f:78:d0:8c:46:70:82:32:79:
59:10:d9:51:a4:3c:e0:b4:4f:d3:2d:b3:ad:0d:6b:
5e:26:3c:39:ca:22:85:aa:60:7e:b8:7d:b9:b3:fb:
1c:89:29:c1:76:1a:52:40:54:a3:e0:67:bc:e8:5d:
c8:2b:49:f7:df:82:f5:33:b1:76:c6:e3:6a:78:98:
ad:f6:32:95:6c:9a:a2:aa:28:48:b8:49:99:89:a7:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5A:C7:AE:06:BD:B1:58:64:B5:6C:AF:0E:DC:ED:DB:A8:B7:EF:06
X509v3 Authority Key Identifier:
keyid:23:3B:A5:B4:FD:E8:7E:D5:1F:DB:9F:C7:5B:10:4A:05:95:02:0A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/994ac353c748a2f51e9444d8c85de8cb43085110.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/c919b3564c8e6f90981885ad32534b57bd4430ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/994ac353c748a2f51e9444d8c85de8cb43085110.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.40.0/22
IPv6:
2803:ba40::/32
Signature Algorithm: sha256WithRSAEncryption
1c:16:93:da:89:c1:b8:10:09:62:f6:ea:77:12:12:84:44:04:
d7:49:53:4a:99:4b:07:6d:69:82:f5:07:4f:53:2d:17:88:62:
52:bf:0b:ea:60:73:d6:5e:ae:ab:81:cd:80:ac:0f:94:e4:69:
54:bb:66:e5:69:0e:8b:78:30:e6:e6:58:9e:ee:a1:d6:9d:92:
14:7e:fa:01:e5:86:4b:1e:44:3f:98:67:c8:35:29:ed:20:de:
25:e9:a6:59:bb:0f:71:b0:80:97:06:ee:61:7c:af:b7:5b:c5:
17:2c:d8:9b:32:59:e0:fb:cb:05:40:01:e0:41:be:42:2b:e8:
6c:22:86:a8:43:08:cf:c0:ea:83:97:58:3a:9f:f0:26:49:eb:
52:55:02:af:a5:ec:68:5b:31:d1:05:8a:2a:b7:39:57:ed:18:
35:fa:3b:79:b3:4e:fc:f0:c4:2b:ee:12:8c:5f:de:e3:15:e0:
0f:56:c9:9d:6b:4c:8f:c5:d9:93:ba:66:0f:aa:69:b5:2b:71:
78:2c:e9:1a:71:fe:7e:69:56:0a:79:17:c9:94:56:01:e6:14:
12:b8:49:c9:27:65:ef:2a:c7:ee:a8:96:c9:ae:d7:24:6b:78:
08:4e:34:2b:61:15:b7:2c:be:76:ac:34:20:5a:f8:57:96:ec:
b9:2f:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 09:21:45 2024 by rpki-client on console-ams.rpki-client.org