Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/b49f08a0700ed02f5afde81c07b6177a6f1c3bcd.roa
File: b49f08a0700ed02f5afde81c07b6177a6f1c3bcd.roa (raw, json)
Hash identifier: S146GIjEceN/lg/IcS6vHNHz6E0g7nVdiZcYFRY8EA8=
Subject key identifier: 3C:79:07:54:03:92:67:5E:72:36:7B:05:C6:A4:69:9F:FE:87:48:F7
Certificate issuer: /CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Certificate serial: 184B67
Authority key identifier: AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/b49f08a0700ed02f5afde81c07b6177a6f1c3bcd.roa
Signing time: Tue 07 Jun 2022 14:32:06 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 20207
IP address blocks: 138.0.152.0/22 maxlen: 22
138.0.152.0/23 maxlen: 23
138.0.154.0/23 maxlen: 23
138.0.152.0/24 maxlen: 24
138.0.153.0/24 maxlen: 24
138.0.154.0/24 maxlen: 24
138.0.155.0/24 maxlen: 24
143.202.16.0/22 maxlen: 24
170.78.192.0/22 maxlen: 24
190.7.0.0/18 maxlen: 24
190.57.224.0/19 maxlen: 24
190.183.0.0/16 maxlen: 24
200.229.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592167 (0x184b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=b49f08a0700ed02f5afde81c07b6177a6f1c3bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:7b:87:36:a5:61:78:43:99:c8:d2:3c:d1:
6e:3d:73:28:45:c0:ab:82:bd:13:96:92:f4:ae:23:
af:d8:d1:63:51:ad:8c:3d:70:09:a7:55:bf:91:81:
33:a8:94:f7:0f:8f:36:47:86:54:28:2a:ce:66:de:
ce:6d:a2:e5:d9:db:03:31:a1:2d:15:3d:c4:1c:eb:
b2:37:88:31:a4:2c:3d:f6:cd:d2:18:bd:c9:19:a7:
db:e4:29:23:eb:0b:b6:52:38:13:34:db:56:a1:65:
e9:45:90:d4:f0:bf:42:2c:fc:9e:c5:18:b5:27:33:
cb:96:d2:6b:d7:2b:fe:09:c5:5b:0b:bf:42:cd:df:
16:b1:ea:58:a9:cc:2a:b7:e4:d2:1f:fa:61:db:38:
03:05:8d:7e:c4:4a:03:98:08:58:0a:55:7d:a3:3a:
5c:e4:89:a1:81:5e:1b:97:6e:d1:96:e4:11:ed:4e:
a1:7a:47:bc:a6:73:c1:03:68:71:0d:65:70:bb:17:
73:ec:b7:31:eb:5e:eb:b2:fd:05:dc:bb:16:c0:72:
8c:49:af:28:24:36:05:f6:e8:a1:59:b7:ce:8b:39:
a1:f0:76:e2:4f:76:37:01:04:83:ff:b2:fa:e2:3f:
5c:3e:fd:90:c9:99:9e:3c:d8:a7:41:56:50:27:be:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:07:54:03:92:67:5E:72:36:7B:05:C6:A4:69:9F:FE:87:48:F7
X509v3 Authority Key Identifier:
keyid:AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/b49f08a0700ed02f5afde81c07b6177a6f1c3bcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.152.0/22
143.202.16.0/22
170.78.192.0/22
190.7.0.0/18
190.57.224.0/19
190.183.0.0/16
200.229.148.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:bb:ae:56:56:fa:63:04:30:c5:e4:fa:c6:9a:6b:e6:a5:59:
de:f4:6c:2d:63:0e:63:dc:9e:9e:70:0a:68:ac:67:d1:77:3d:
26:a5:d2:f7:d1:a2:9a:33:c3:ed:ef:ff:24:12:ab:c1:bf:8a:
29:c4:87:4c:76:b1:79:92:5c:46:96:74:7e:55:05:08:f7:ee:
78:3c:6b:4f:cc:06:7a:2f:d4:63:f5:69:27:60:44:a6:58:cc:
ff:e5:8e:73:b9:5f:d9:48:ba:b5:2b:fc:82:7d:45:6c:fd:58:
59:9f:a3:5a:c6:f6:7a:2e:95:88:17:65:55:69:ea:1e:bd:4e:
a4:8b:a1:72:19:33:de:f9:2a:5c:05:c4:30:d2:28:a1:a7:2d:
6d:d0:24:fa:47:34:4a:91:9b:0d:2b:28:6b:43:ff:f6:43:e3:
41:11:c7:d9:ae:9b:b4:ee:0b:66:29:16:0b:06:29:51:80:bf:
b4:b7:6c:2e:65:c2:96:ec:d8:9a:80:97:a3:7b:1b:35:a3:d8:
1c:10:c3:f4:77:a0:7f:b2:7f:09:bd:29:4c:ab:6f:7f:f0:e3:
91:21:4c:65:be:34:ab:a1:fd:1e:a2:41:56:23:45:93:47:b6:
04:5b:4a:12:81:b9:71:ab:5c:77:39:71:55:c6:78:0a:90:4b:
ae:bb:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org