Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233312e302f32342d3234203d3e203538333439.roa
File: 3133382e3132312e3233312e302f32342d3234203d3e203538333439.roa (raw, json)
Hash identifier: 5qexvCM5pfRmspYlEYuK7KqTiZvJUDPMAT59VWL83Mg=
Subject key identifier: A2:7A:82:39:09:04:B5:F2:29:14:BE:57:58:19:6B:5E:46:1F:A7:C7
Certificate issuer: /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial: 58923007B83AAC6A3B0A46635A15CE53556A0B43
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233312e302f32342d3234203d3e203538333439.roa
Signing time: Thu 15 Aug 2024 14:10:00 +0000
ROA not before: Thu 15 Aug 2024 14:05:00 +0000
ROA not after: Thu 14 Aug 2025 14:10:00 +0000
asID: 58349
IP address blocks: 138.121.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 13:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:92:30:07:b8:3a:ac:6a:3b:0a:46:63:5a:15:ce:53:55:6a:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
Validity
Not Before: Aug 15 14:05:00 2024 GMT
Not After : Aug 14 14:10:00 2025 GMT
Subject: CN=A27A82390904B5F22914BE5758196B5E461FA7C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:83:0b:6b:a0:9d:49:da:be:34:50:cc:c4:
50:ad:c1:64:37:c1:c4:50:1b:4d:51:7a:76:66:61:
0c:17:c3:79:16:d4:e2:67:8c:69:b6:04:ab:18:68:
24:8e:c1:ee:4a:e1:ab:d9:8d:70:a9:49:7c:a1:e0:
b6:6b:68:fd:1b:1f:1c:da:e9:e4:ee:62:34:c5:a6:
1c:5b:85:45:e1:12:fb:c8:5b:cc:67:11:ce:62:57:
23:fb:56:b1:54:40:f8:61:fd:a5:23:c8:f3:87:76:
06:74:be:a7:9c:48:d7:99:be:8f:bd:cc:63:62:d3:
be:15:f7:20:e8:2c:25:4c:9d:7e:43:21:b2:64:5e:
e5:ef:29:e3:f4:84:6b:85:e0:60:ae:97:fe:9e:ec:
3e:10:a9:5e:b7:52:41:d9:f8:04:0c:47:fb:f6:4e:
fc:aa:e4:f3:0d:39:8a:cb:4f:d7:40:9a:55:33:79:
47:2f:aa:b2:c5:06:61:11:d8:46:e5:b6:f3:45:d3:
82:df:13:e7:ea:5d:c0:ca:55:e1:13:43:08:a2:69:
74:33:b0:38:15:29:86:bc:8b:c7:bc:27:5d:e2:64:
e2:99:dc:46:8a:e5:e1:82:4d:34:75:37:b4:be:7f:
e2:21:a3:56:db:8e:c8:1b:ba:a8:32:a9:ed:79:57:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:82:39:09:04:B5:F2:29:14:BE:57:58:19:6B:5E:46:1F:A7:C7
X509v3 Authority Key Identifier:
keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3233312e302f32342d3234203d3e203538333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.231.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:df:2b:dd:c2:b2:5b:00:ca:52:30:02:9e:64:79:8a:4f:89:
50:74:33:67:7d:32:2f:21:e8:4c:a0:79:4e:0b:fc:f5:09:57:
14:ce:32:29:c1:84:0d:fb:f3:33:87:02:3b:98:f4:78:b0:8f:
20:86:8a:15:c5:b3:af:af:ec:1a:d6:6b:61:14:1f:8e:6b:af:
3f:54:dd:0f:39:b4:31:de:f5:1c:11:1d:4c:88:72:dc:a4:91:
e0:ed:72:4f:e3:cc:d9:86:c6:40:09:81:0f:12:de:74:db:dd:
81:6d:3e:f6:15:87:1b:e9:12:49:9f:83:9a:81:24:67:80:95:
83:1b:cf:75:1b:27:39:fd:aa:ec:87:9f:5e:16:56:93:a1:2f:
3d:71:fb:6e:a6:4a:80:11:c9:a2:b8:3e:f6:a3:dc:c6:5f:24:
07:db:0d:4e:cd:cb:1d:30:bc:d8:90:87:fd:8f:0b:10:6b:f8:
46:8a:83:8e:7e:eb:83:14:60:d4:90:5b:0f:0e:b1:4a:9f:b8:
6f:a2:ea:6e:14:19:96:70:bc:f4:d3:57:16:a9:6f:bf:09:d7:
7d:47:5c:01:8a:52:e5:89:6a:5b:22:4a:59:90:47:25:e1:cd:
d1:f8:46:b1:2d:7f:7c:e0:65:49:74:d8:e8:e3:85:46:32:49:
3b:4f:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 17:45:11 2024 by rpki-client on console-ams.rpki-client.org