Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5c7b8397799ef2ef022e6376a482107e4641d57b.roa
File: 5c7b8397799ef2ef022e6376a482107e4641d57b.roa (raw, json)
Hash identifier: 5B41IjHzDgJXY04lx2mD82owOchFy3IX3JlYVnK/CTo=
Subject key identifier: 3C:4E:3D:76:C2:FA:63:9F:D7:D6:28:B2:78:1E:3F:89:CE:C2:6B:27
Certificate issuer: /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial: 05AC40
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5c7b8397799ef2ef022e6376a482107e4641d57b.roa
Signing time: Thu 06 Jul 2023 14:53:22 +0000
ROA not before: Wed 05 Jul 2023 14:53:21 +0000
ROA not after: Sun 06 Jul 2025 14:53:21 +0000
asID: 7418
IP address blocks: 152.172.0.0/16 maxlen: 24
181.172.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371776 (0x5ac40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Validity
Not Before: Jul 5 14:53:21 2023 GMT
Not After : Jul 6 14:53:21 2025 GMT
Subject: CN=5c7b8397799ef2ef022e6376a482107e4641d57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:3e:32:63:49:37:8b:f5:9d:d9:11:7b:5c:
af:d7:23:82:6c:38:b8:89:cd:de:ef:ec:77:d3:77:
b8:16:66:92:87:d0:c0:6d:e0:ed:c0:e4:1f:9e:a2:
24:ec:e5:28:f9:93:1c:28:2b:cf:0a:b7:56:6d:c2:
b1:4b:65:79:df:90:76:35:9e:69:95:4b:f4:06:d9:
f0:2e:06:f6:84:fd:47:c9:08:19:70:d2:d5:30:6e:
0a:0f:87:83:ea:91:7f:ac:f5:44:8d:b1:93:7d:c3:
ba:f8:e2:e0:cb:98:5e:ec:1b:8a:d6:a0:bd:a5:e4:
fc:76:02:26:f6:c5:47:55:30:ef:d1:21:b1:d5:63:
09:2e:d4:8f:7c:60:29:b1:79:7a:c4:b4:18:ee:a5:
bc:11:4d:20:3e:9e:6e:39:c0:1c:cf:a4:d0:92:e3:
0d:bf:fa:e5:19:c5:77:7e:56:7d:a7:c7:8c:d7:1d:
92:c8:6a:50:c6:b4:43:01:9f:0f:c5:67:12:bb:fa:
2a:7b:9a:0f:a7:cf:3f:42:89:29:07:fc:3a:71:99:
fd:a6:f8:93:c4:67:8e:e3:ce:a1:9d:2e:18:32:99:
01:93:e4:96:fd:87:27:5f:b5:a0:b9:38:34:f8:2b:
73:4c:d3:b8:85:7e:90:56:32:c1:33:85:d0:75:dc:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:3D:76:C2:FA:63:9F:D7:D6:28:B2:78:1E:3F:89:CE:C2:6B:27
X509v3 Authority Key Identifier:
keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5c7b8397799ef2ef022e6376a482107e4641d57b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.172.0.0/16
181.172.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8d:63:ec:bb:09:c7:01:d2:8a:17:19:4a:3f:1d:7b:80:05:80:
f5:2e:5e:b4:29:5b:fb:00:90:8c:8e:1b:5d:5a:58:4e:c5:a0:
d5:a7:a0:37:c0:02:53:9c:f8:5b:f9:d5:6e:83:9a:b6:2b:f1:
19:bb:a5:4d:9c:eb:96:47:c4:ae:95:4e:8c:57:83:3f:2b:78:
aa:54:92:10:f5:35:84:92:70:57:30:ff:7b:c9:2d:82:c7:13:
ab:cb:6c:94:df:d2:7c:8e:9c:e6:07:06:c2:fc:3f:47:6e:e4:
f0:1e:c5:e9:f3:52:d3:88:ba:28:d0:7e:d3:8a:b3:d2:50:7e:
25:39:18:ed:89:52:ef:fe:5e:dd:4b:df:0f:d1:5a:2f:46:30:
52:02:cc:eb:21:bf:7e:a4:ff:52:02:65:a9:17:8c:83:71:4b:
1a:be:9f:d9:b5:ac:28:47:41:b7:24:9f:c7:16:21:18:95:f7:
1e:f3:c9:02:61:06:f2:29:df:04:ed:70:55:b3:59:59:f2:2d:
8b:e7:77:b3:e7:b2:17:e4:d5:92:d8:e3:a7:38:13:c0:22:40:
be:cc:b7:dc:07:49:fc:4a:6d:ea:dc:14:b4:da:46:95:cc:b6:
31:15:69:be:c1:f8:60:2d:54:99:f9:26:0f:07:46:dd:64:47:
53:d3:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org