Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/9d71d5e0b8d618f488cf990e183b884ba918973a.roa
File: 9d71d5e0b8d618f488cf990e183b884ba918973a.roa (raw, json)
Hash identifier: g+4KOpea+g8Nz0fCiQlsF8WUil6MmmfOhrv/YnG+LGY=
Subject key identifier: 71:48:BF:A9:0E:48:7C:0A:85:A8:D2:2A:C2:9A:68:59:E8:D1:0C:5E
Certificate issuer: /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial: 136884
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/9d71d5e0b8d618f488cf990e183b884ba918973a.roa
Signing time: Wed 10 Nov 2021 13:04:45 +0000
ROA not before: Wed 10 Nov 2021 03:00:00 +0000
ROA not after: Tue 10 Nov 2026 03:00:00 +0000
asID: 263774
IP address blocks: 138.117.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271940 (0x136884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Validity
Not Before: Nov 10 03:00:00 2021 GMT
Not After : Nov 10 03:00:00 2026 GMT
Subject: CN=9d71d5e0b8d618f488cf990e183b884ba918973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:0d:40:78:c6:9d:8e:77:29:ea:90:9d:37:
d8:dd:19:ce:4a:36:48:e5:60:66:e2:69:1a:a9:89:
58:ca:2b:d4:b6:3d:a6:28:3d:65:4e:2a:2c:b3:12:
77:4a:41:3b:01:2c:c9:85:a0:5e:b3:ef:f9:7d:51:
07:d2:07:53:52:21:fa:06:3a:9e:34:b8:36:6c:26:
c1:6d:6e:9b:02:6c:54:67:35:9b:0e:e5:bb:09:79:
35:eb:6e:11:79:65:0f:46:20:2e:72:ce:6e:65:66:
99:05:6a:41:a6:10:e7:ff:e5:f2:89:a0:14:d4:51:
ac:3a:35:b1:93:82:d2:e7:22:22:7d:fd:2d:8d:a9:
92:c2:05:60:0b:17:cc:df:46:e6:e3:85:e9:f9:7f:
b9:fc:ee:91:56:c5:c9:8c:c5:00:33:8c:9d:21:cc:
58:d3:79:42:e1:23:f8:84:7f:2f:30:44:8d:34:a7:
21:39:59:e1:c9:f4:21:b1:52:c6:ef:b8:1b:79:a2:
98:f7:29:17:62:8c:d8:5c:50:69:ee:72:d4:86:4b:
f9:ea:1b:a9:f4:9d:47:1b:69:33:72:28:21:3d:f5:
1a:82:8e:7d:90:36:66:63:2a:c6:68:98:10:0a:6d:
e2:e6:9c:ac:bd:ea:42:10:d7:4f:9d:59:5b:d1:a2:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:48:BF:A9:0E:48:7C:0A:85:A8:D2:2A:C2:9A:68:59:E8:D1:0C:5E
X509v3 Authority Key Identifier:
keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/9d71d5e0b8d618f488cf990e183b884ba918973a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2b:bd:27:6e:6e:af:58:27:9d:e5:48:fc:d9:46:4a:99:72:
0a:2f:a5:9e:92:4c:f3:8d:cc:0b:f8:2a:3a:39:46:5d:1c:6d:
90:90:81:04:60:42:dc:b7:78:14:8c:8a:7f:2a:f0:6c:4a:a2:
87:80:30:a5:62:ee:21:2a:4b:18:cf:8e:40:73:7a:e6:03:16:
59:fd:a1:c7:ba:12:ca:0f:43:1e:65:7f:5d:04:65:68:78:a7:
99:37:cc:bc:f9:91:c4:48:0a:c3:4a:34:e7:84:48:14:28:c1:
46:48:85:fe:6e:ac:c4:f0:07:2c:ba:21:43:bb:1d:7e:21:78:
c9:79:2c:da:77:31:7b:14:1d:d5:5f:00:71:79:8c:bc:31:50:
48:de:23:ba:2a:e6:f4:c1:4b:ed:c6:56:f7:8e:cb:5d:f1:35:
1f:3f:ab:6a:ba:1f:92:ec:e9:47:2c:72:8d:d8:92:97:da:28:
9a:bf:28:d5:0e:ae:8d:24:3d:f3:f3:31:20:9c:37:40:12:0e:
f2:99:4f:04:73:24:38:a6:30:bb:6e:52:6d:cd:72:c9:62:fc:
7a:a5:ef:81:16:50:45:1b:83:8f:df:3f:cb:ca:d8:92:65:a0:
fa:3e:74:37:5b:01:59:d2:94:33:e2:91:ba:cf:91:84:62:91:
e9:6d:1e:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE2iEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAz
MDZhZjgxYzI3MGE2MGJkN2E2YjQ0MGJjOTdkNDIwMzIyZWJjYjUwHhcNMjExMTEw
MDMwMDAwWhcNMjYxMTEwMDMwMDAwWjAzMTEwLwYDVQQDEyg5ZDcxZDVlMGI4ZDYx
OGY0ODhjZjk5MGUxODNiODg0YmE5MTg5NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtb8NQHjGnY53KeqQnTfY3RnOSjZI5WBm4mkaqYlYyivUtj2m
KD1lTiossxJ3SkE7ASzJhaBes+/5fVEH0gdTUiH6BjqeNLg2bCbBbW6bAmxUZzWb
DuW7CXk1624ReWUPRiAucs5uZWaZBWpBphDn/+XyiaAU1FGsOjWxk4LS5yIiff0t
jamSwgVgCxfM30bm44Xp+X+5/O6RVsXJjMUAM4ydIcxY03lC4SP4hH8vMESNNKch
OVnhyfQhsVLG77gbeaKY9ykXYozYXFBp7nLUhkv56hup9J1HG2kzcighPfUago59
kDZmYyrGaJgQCm3i5pysvepCENdPnVlb0aK2JQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHFIv6kOSHwKhajSKsKaaFno0QxeMB8GA1UdIwQYMBaAFE7h+ZpS1J1Q2X+F
YnwRm3OXhrC1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDMwNmFm
ODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGUwNjYxMjQtZGNhNC00MjA1LWI1OTQtOTBkMzky
YzNlMzJjLzlkNzFkNWUwYjhkNjE4ZjQ4OGNmOTkwZTE4M2I4ODRiYTkxODk3M2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZTA2NjEyNC1kY2E0LTQyMDUtYjU5NC05MGQz
OTJjM2UzMmMvMDMwNmFmODFjMjcwYTYwYmQ3YTZiNDQwYmM5N2Q0MjAzMjJlYmNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp1TDANBgkqhkiG9w0BAQsFAAOCAQEAfCu9J25ur1gnneVI
/NlGSplyCi+lnpJM843MC/gqOjlGXRxtkJCBBGBC3Ld4FIyKfyrwbEqih4AwpWLu
ISpLGM+OQHN65gMWWf2hx7oSyg9DHmV/XQRlaHinmTfMvPmRxEgKw0o054RIFCjB
RkiF/m6sxPAHLLohQ7sdfiF4yXks2ncxexQd1V8AcXmMvDFQSN4juirm9MFL7cZW
947LXfE1Hz+rarofkuzpRyxyjdiSl9oomr8o1Q6ujSQ98/MxIJw3QBIO8plPBHMk
OKYwu25Sbc1yyWL8eqXvgRZQRRuDj98/y8rYkmWg+j50N1sBWdKUM+KRus+RhGKR
6W0ecA==
-----END CERTIFICATE-----
Generated at Fri Sep 8 11:46:54 2023 by rpki-client on console-fra.rpki-client.org