Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/4c8d6231555e0deb56efcc0c9cea5b74985c5adb.roa
File: 4c8d6231555e0deb56efcc0c9cea5b74985c5adb.roa (raw, json)
Hash identifier: nsuOJcsNofhWOnpzSaMvo3WGfQUGj7keLDOBPNLrdNU=
Subject key identifier: 19:F1:81:38:78:7F:FE:6B:3F:96:67:D6:FE:50:15:65:1D:D0:C0:3C
Certificate issuer: /CN=88cc89a416abd550bf2ff234cbb6aa1bcee5b99c
Certificate serial: 04E5
Authority key identifier: 3A:7F:3E:2F:52:E2:2E:A5:FF:8F:AB:9C:09:27:16:CE:6F:BE:6B:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88cc89a416abd550bf2ff234cbb6aa1bcee5b99c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/4c8d6231555e0deb56efcc0c9cea5b74985c5adb.roa
Signing time: Mon 22 May 2023 17:25:06 +0000
ROA not before: Sun 21 May 2023 17:25:06 +0000
ROA not after: Thu 22 May 2025 17:25:06 +0000
asID: 263768
IP address blocks: 138.99.128.0/22 maxlen: 22
170.81.212.0/22 maxlen: 22
2803:6840::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cc89a416abd550bf2ff234cbb6aa1bcee5b99c
Validity
Not Before: May 21 17:25:06 2023 GMT
Not After : May 22 17:25:06 2025 GMT
Subject: CN=4c8d6231555e0deb56efcc0c9cea5b74985c5adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:ff:6e:31:01:35:e3:1f:fb:cb:7c:95:40:
a1:3e:6c:2d:9d:4a:83:77:fc:1c:88:d0:a0:4f:91:
5c:aa:5f:02:40:c7:58:bc:60:66:94:3d:80:19:80:
74:b4:d4:ec:49:54:98:28:5e:80:00:cc:47:c7:b8:
0a:94:cb:3e:5b:4e:a3:8a:2e:a4:5c:7f:95:53:5e:
21:07:bf:6f:21:3a:99:72:0b:e0:2d:16:0e:30:47:
12:10:de:01:74:03:a7:74:3c:60:c3:ed:ed:8d:cf:
00:fa:a1:bb:f9:f4:57:ac:c1:de:86:57:ed:96:b8:
e6:11:a3:dc:ba:0a:fc:60:7d:49:92:89:66:81:8c:
8f:29:32:ae:50:15:26:7f:d6:e7:73:d1:e2:36:28:
b9:9d:a3:a5:32:e5:e2:e7:7a:a6:34:eb:e7:c3:8e:
6d:af:c1:a3:10:90:cb:42:62:c9:96:98:a9:f5:c0:
52:c0:d5:8c:7b:ba:c3:6e:30:08:58:41:93:7f:25:
1d:67:4d:91:46:53:c6:f1:cf:d1:4e:c1:b1:01:83:
18:1d:ac:92:f8:8b:08:c8:72:02:91:eb:af:63:33:
96:50:d7:65:72:45:7a:f1:37:23:ac:ea:51:97:1e:
55:10:c3:77:21:4a:e5:25:28:06:09:fb:1a:b6:82:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:81:38:78:7F:FE:6B:3F:96:67:D6:FE:50:15:65:1D:D0:C0:3C
X509v3 Authority Key Identifier:
keyid:3A:7F:3E:2F:52:E2:2E:A5:FF:8F:AB:9C:09:27:16:CE:6F:BE:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88cc89a416abd550bf2ff234cbb6aa1bcee5b99c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/4c8d6231555e0deb56efcc0c9cea5b74985c5adb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c490e7c-66be-4a96-a8e6-2b42e6969247/88cc89a416abd550bf2ff234cbb6aa1bcee5b99c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.128.0/22
170.81.212.0/22
IPv6:
2803:6840::/32
Signature Algorithm: sha256WithRSAEncryption
27:eb:db:08:80:7e:44:06:4b:d2:26:bf:5b:dc:db:d0:70:aa:
9b:2b:31:30:54:b6:07:63:26:1f:4a:a6:bf:23:f1:be:75:0b:
07:80:3c:ab:88:5d:6e:80:85:e2:a8:20:04:44:04:eb:79:66:
25:c2:1a:87:f5:16:f8:74:3c:39:ac:fa:ac:03:09:97:46:9a:
32:8f:28:85:17:a1:09:e9:43:7c:2a:3b:16:47:4e:05:8e:3c:
bd:88:db:af:5b:cc:46:f4:93:d2:29:42:0d:a9:c5:99:1f:36:
9e:47:7c:c9:33:0d:2a:29:a9:aa:e1:89:f1:c4:b5:2e:13:51:
e3:fc:06:8f:66:c1:34:87:a4:d0:60:74:bb:12:b6:47:5b:81:
61:d8:b9:f3:52:d2:7e:9a:7a:a4:49:c7:22:3c:73:39:a7:49:
ba:5c:ed:70:c6:b4:c4:0c:fc:66:bb:76:22:85:cc:50:c0:4b:
e6:f3:1a:1f:bc:81:44:20:5b:51:7f:51:60:3d:be:d5:54:5a:
b7:47:dd:04:a5:21:9b:a1:46:e6:c1:cd:c8:7e:26:8d:68:d4:
76:8d:ca:9b:d7:a1:9a:60:62:5a:7a:11:5c:b3:41:41:60:89:
f1:41:06:f8:fc:dc:fa:7f:73:dc:da:5e:73:13:91:09:ef:e3:
0b:7b:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org