Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/92b995de21a864e9c1659a592dad60aa0b5633bb.roa
File: 92b995de21a864e9c1659a592dad60aa0b5633bb.roa (raw, json)
Hash identifier: Q7DduBzEPV2+XwegoMeGZLNYVrO0L/szbxYeljKUin0=
Subject key identifier: 91:16:30:87:83:22:CB:EF:67:C0:8F:F6:10:BE:08:ED:FF:EE:60:41
Certificate issuer: /CN=23392513f47d61c0f12dc66bb0d069fed5378524
Certificate serial: 16EBC8
Authority key identifier: 3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/92b995de21a864e9c1659a592dad60aa0b5633bb.roa
Signing time: Wed 05 Jul 2023 18:02:47 +0000
ROA not before: Tue 04 Jul 2023 18:02:46 +0000
ROA not after: Sat 05 Jul 2025 18:02:46 +0000
asID: 41095
IP address blocks: 138.204.12.0/22 maxlen: 24
45.236.172.0/23 maxlen: 24
2803:c240::/32 maxlen: 40
Validation: Failed, certificate revoked on Thu 11 Apr 2024 14:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502152 (0x16ebc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23392513f47d61c0f12dc66bb0d069fed5378524
Validity
Not Before: Jul 4 18:02:46 2023 GMT
Not After : Jul 5 18:02:46 2025 GMT
Subject: CN=92b995de21a864e9c1659a592dad60aa0b5633bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:f7:ab:3b:aa:94:1e:f9:27:06:a4:ea:f5:
b0:13:4a:6e:f0:b6:f0:ff:a2:a5:60:96:18:40:1f:
ec:09:fe:be:3a:8b:04:9f:8a:ba:e2:0d:11:6f:7a:
76:c9:97:71:e9:69:44:27:00:49:93:52:b2:ae:36:
86:cd:8b:fc:db:a8:d3:0f:00:2c:52:27:e6:17:3f:
f8:de:74:81:b5:3e:bc:6c:7e:94:03:ae:92:76:14:
a2:a7:6a:0e:a1:ab:e7:83:e7:a9:2e:6f:16:b6:2f:
d4:19:8f:a1:fd:ac:55:ce:a3:4e:54:63:4a:bf:9e:
ee:59:c4:1b:f3:a3:2b:e8:fd:0a:f6:8c:f0:0c:58:
c1:9c:e0:75:65:ef:da:fe:4e:22:58:25:98:93:50:
5f:a7:fa:7d:5a:f2:50:c6:95:75:7b:58:36:91:b9:
23:e9:51:56:3e:23:e7:31:27:00:da:4e:32:02:43:
b5:40:c5:9e:d9:1c:02:56:9b:2a:5a:7e:f0:69:bf:
38:32:cf:a8:13:29:91:cd:db:18:d3:10:44:12:ae:
39:e8:9a:b7:bc:2f:2b:f3:dc:bf:2c:49:b2:18:ae:
01:3c:41:49:ab:95:ae:88:34:15:35:e5:eb:0a:af:
c3:12:64:b3:d8:37:66:aa:3a:c6:7f:b7:41:5b:cb:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:30:87:83:22:CB:EF:67:C0:8F:F6:10:BE:08:ED:FF:EE:60:41
X509v3 Authority Key Identifier:
keyid:3C:89:F0:67:EB:7D:D4:43:8F:12:76:A2:BA:04:A3:4B:62:11:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23392513f47d61c0f12dc66bb0d069fed5378524.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/92b995de21a864e9c1659a592dad60aa0b5633bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8a76d4e4-c054-4ad2-ae81-5610155a6ea3/23392513f47d61c0f12dc66bb0d069fed5378524.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.172.0/23
138.204.12.0/22
IPv6:
2803:c240::/32
Signature Algorithm: sha256WithRSAEncryption
48:a7:be:84:b9:85:39:19:a6:fe:4d:e1:51:9e:d7:32:3d:9b:
d4:5c:71:4b:57:9b:81:55:17:02:d5:a5:39:ba:4e:6f:cd:81:
86:db:ee:d6:9d:47:be:d0:a3:e8:d2:98:ed:8a:ab:d8:da:4a:
98:28:70:21:3c:7d:05:43:8d:a8:9d:fd:c7:d7:ab:10:a9:37:
63:4c:cb:ee:90:69:bd:0b:e3:e1:fc:de:16:20:41:0d:ee:f0:
5d:61:4d:27:3b:3d:90:ca:4a:c5:16:dc:c5:2f:42:ae:8e:10:
79:52:78:bf:45:47:3c:a6:a7:06:a4:0d:55:cd:12:1d:7b:fe:
4a:eb:11:69:9f:61:ae:d0:ad:03:bb:b1:22:37:9c:63:81:a5:
ea:9b:5f:ad:ea:03:6d:d9:bd:05:cd:e3:62:70:09:db:ec:eb:
dd:bf:1d:47:72:cb:83:cb:56:2c:32:4e:29:20:5d:e4:c6:0c:
55:13:d7:b5:1d:1b:9d:4b:7d:01:f3:79:0f:41:97:82:5a:34:
a5:98:a6:c1:ce:00:39:3b:a2:e3:88:9b:23:de:19:5c:ec:c6:
a7:9a:04:47:27:f8:c1:76:1f:f4:4f:9e:2d:f4:e5:14:0b:70:
ef:e4:6b:99:66:e4:f8:cf:e3:45:18:91:c8:b9:f5:1f:e7:32:
79:4d:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 19:04:41 2024 by rpki-client on console-ams.rpki-client.org