Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/636aaa13c654bd8c9b361ea9a9d047918face3b8.roa
File: 636aaa13c654bd8c9b361ea9a9d047918face3b8.roa (raw, json)
Hash identifier: P1fFVv3oZmA5JivOs0y95+CLgkA7q8WfxFv1BYCcPrc=
Subject key identifier: F1:EE:F7:3C:3A:51:08:13:09:68:36:D7:32:4C:49:21:A5:D3:1A:2D
Certificate issuer: /CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b
Certificate serial: 0337
Authority key identifier: F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/636aaa13c654bd8c9b361ea9a9d047918face3b8.roa
Signing time: Tue 31 Aug 2021 17:33:19 +0000
ROA not before: Tue 31 Aug 2021 03:00:00 +0000
ROA not after: Thu 31 Aug 2023 03:00:00 +0000
asID: 263821
IP address blocks: 138.59.4.0/22 maxlen: 22
138.219.120.0/22 maxlen: 22
161.0.68.0/22 maxlen: 22
168.181.52.0/22 maxlen: 22
170.244.144.0/22 maxlen: 22
177.234.136.0/21 maxlen: 21
200.0.60.0/23 maxlen: 23
200.71.124.0/22 maxlen: 22
200.189.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b
Validity
Not Before: Aug 31 03:00:00 2021 GMT
Not After : Aug 31 03:00:00 2023 GMT
Subject: CN=636aaa13c654bd8c9b361ea9a9d047918face3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:78:44:51:de:e1:0b:90:ef:80:31:a7:82:
25:8b:ac:8f:6d:2d:a1:42:ea:7c:7d:9b:39:9c:0c:
ab:2f:11:cf:35:ba:74:a3:7d:3c:04:f0:41:aa:71:
fe:e8:74:81:57:b1:d2:91:79:05:b3:2d:25:15:4d:
c3:6d:56:c5:92:6c:57:ec:5b:ff:9d:77:26:30:a9:
05:7b:a6:c7:bc:bb:0e:ad:74:25:cd:cb:c6:0d:22:
75:e3:72:56:39:70:d2:f2:c3:84:c7:2d:a8:7c:64:
cf:12:d0:17:52:a7:38:fd:63:b8:d2:d9:fc:7b:34:
0e:8e:61:86:32:4f:05:91:d6:c6:89:11:19:83:47:
15:ac:1b:34:75:6c:a5:8c:3b:ea:de:9c:5b:57:ac:
b0:e6:cf:ff:2c:54:c5:3e:51:3e:b2:01:e1:71:41:
43:bc:87:ca:c6:75:63:11:ca:99:29:a7:71:af:66:
6a:b4:49:52:19:4f:76:cf:5e:76:68:3b:a9:aa:69:
17:28:bc:b7:71:20:a5:36:30:6f:c2:c5:cf:8b:9a:
a6:c2:29:7f:b0:db:04:8f:06:b1:e1:d6:98:5b:45:
a2:12:01:70:1c:36:d3:b8:e8:e5:7e:d5:03:b8:76:
b6:06:16:e4:02:f1:7f:ac:ee:95:ce:1e:76:84:16:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:F7:3C:3A:51:08:13:09:68:36:D7:32:4C:49:21:A5:D3:1A:2D
X509v3 Authority Key Identifier:
keyid:F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/636aaa13c654bd8c9b361ea9a9d047918face3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.4.0/22
138.219.120.0/22
161.0.68.0/22
168.181.52.0/22
170.244.144.0/22
177.234.136.0/21
200.0.60.0/23
200.71.124.0/22
200.189.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:13:a2:4f:7d:2a:da:0e:fd:b7:25:57:46:4b:f6:44:1f:bc:
f7:5b:10:69:5a:c2:c9:55:eb:43:fa:91:6e:43:0b:8d:fc:2a:
52:a3:22:5b:88:55:98:1f:8e:a6:de:0a:c0:1b:2d:0e:24:1f:
bd:18:9f:db:d0:71:b7:c2:d2:6d:49:d7:76:0d:20:85:87:dc:
a3:97:d5:41:a0:e4:96:b9:5d:f4:d5:5b:b8:1d:4c:f6:d3:7f:
fe:5f:9a:8e:51:75:82:a8:81:c1:10:f9:64:8c:45:10:6e:01:
e9:8d:91:52:73:9e:5b:74:38:31:aa:9f:0f:e5:d5:c8:eb:4a:
11:ba:24:24:86:23:7a:7f:a8:09:a6:52:da:72:2e:e0:25:d5:
65:aa:0b:a0:6e:22:66:64:bf:1a:f0:87:6d:cf:f5:6f:f6:58:
d9:16:3f:55:72:94:78:76:00:08:28:66:c7:db:0b:62:c0:30:
eb:04:ea:cf:8a:da:a7:d7:35:43:d7:51:24:29:6a:65:89:d3:
da:21:3f:c6:bf:18:7d:f7:e9:c9:af:9d:9b:08:02:cd:27:73:
63:32:aa:f4:22:90:2d:66:c3:c1:93:c8:5a:d0:d4:6a:ec:c6:
4d:1e:45:19:93:ff:3b:e2:fa:77:b0:fb:04:bc:e8:15:59:af:
18:95:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 09:01:39 2023 by rpki-client on console-fra.rpki-client.org