Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/5c2b545506f4b1b7921c62e3d40c50046cd47bf9.roa
File: 5c2b545506f4b1b7921c62e3d40c50046cd47bf9.roa (raw, json)
Hash identifier: TknFuAV7X+5B4DQrzk16qRdzX3uFCEau21yJhlbb3Ck=
Subject key identifier: 72:26:A9:8F:77:4A:44:64:05:A5:86:BF:0D:8A:BB:99:38:67:0A:89
Certificate issuer: /CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
Certificate serial: 16E597
Authority key identifier: 11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/5c2b545506f4b1b7921c62e3d40c50046cd47bf9.roa
Signing time: Mon 10 Apr 2023 17:17:24 +0000
ROA not before: Sun 09 Apr 2023 17:17:24 +0000
ROA not after: Thu 10 Apr 2025 17:17:24 +0000
asID: 262216
IP address blocks: 138.0.104.0/22 maxlen: 24
190.113.224.0/21 maxlen: 24
2803:5a00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 04 Mar 2024 21:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500567 (0x16e597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
Validity
Not Before: Apr 9 17:17:24 2023 GMT
Not After : Apr 10 17:17:24 2025 GMT
Subject: CN=5c2b545506f4b1b7921c62e3d40c50046cd47bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:0b:df:c9:b4:1c:b9:75:39:d6:80:5c:47:
1b:76:b3:ef:65:21:70:6b:2b:3b:7a:9e:1a:5c:50:
cf:2e:27:c7:e5:e9:d7:6e:f7:0b:d7:51:0f:f1:99:
0f:b5:c3:2b:a0:6c:ec:86:a8:b0:59:98:ac:6e:4b:
ab:ee:52:1a:12:66:cb:87:75:59:19:66:e2:63:ac:
14:a5:59:06:95:a3:25:d8:44:61:30:12:01:50:3f:
8c:9f:10:89:26:d7:9d:93:72:43:3d:f1:4e:ad:f9:
be:1a:c3:83:e9:08:64:1c:b8:37:2c:3d:cf:20:6f:
d3:9f:64:9b:19:73:50:1d:b6:98:ed:10:fb:65:d0:
75:c3:b7:08:35:39:c3:d4:4e:55:2f:b4:80:23:84:
d1:08:41:7e:1b:e5:a7:0f:a3:da:11:45:7a:a3:ed:
b8:c4:46:92:31:d7:38:15:51:11:06:7c:16:dc:c2:
fb:11:49:80:63:f1:1f:8d:2d:a0:f4:44:14:be:8a:
48:9c:34:35:b6:95:14:a6:e4:c9:b3:a2:9e:2c:ba:
46:e0:1d:c2:93:9a:c1:66:60:8f:bb:ef:27:23:6d:
b5:e1:c1:f0:18:d5:54:f1:75:71:02:38:e2:a1:12:
27:2f:d7:50:88:12:5d:00:4b:c3:b4:d6:e7:69:3c:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:26:A9:8F:77:4A:44:64:05:A5:86:BF:0D:8A:BB:99:38:67:0A:89
X509v3 Authority Key Identifier:
keyid:11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/5c2b545506f4b1b7921c62e3d40c50046cd47bf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.104.0/22
190.113.224.0/21
IPv6:
2803:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
7b:c9:ba:51:d7:a9:d6:7e:38:2e:9b:c9:96:53:f2:54:23:77:
14:c1:d5:bb:6f:32:5e:87:35:cd:60:fd:07:9e:6b:69:c4:8e:
0a:b6:c2:ad:c4:96:d3:cb:50:12:e8:6a:dd:0a:ea:5a:f9:f5:
dd:23:58:d2:0b:9d:d8:52:6d:2a:57:fa:3d:d3:6e:53:24:7c:
3d:78:42:48:e5:e5:eb:c2:f8:a6:0d:15:a7:9f:c2:3d:3f:61:
f5:d8:c2:19:dd:47:0e:0f:ae:32:90:bf:15:20:ad:5e:4d:ac:
63:15:9d:d5:3b:e2:87:8e:8a:5d:89:52:a1:f5:9b:6b:81:23:
20:0d:f5:ce:54:6b:34:88:df:82:93:aa:6b:2a:49:52:73:d7:
f0:29:d8:69:10:2e:9f:d2:b8:24:89:e9:fb:a2:ab:1e:6d:c2:
3c:c8:92:cd:c4:40:fe:29:b1:a1:da:7f:da:2b:83:69:da:9e:
5b:e2:8f:29:f4:5f:ca:22:ea:d0:80:94:49:17:e3:21:2b:1e:
cc:40:c3:58:d8:13:e0:38:56:ef:d4:18:e5:55:b8:a2:67:bd:
db:a0:87:37:d1:65:1b:d0:cf:15:f0:73:0a:25:ab:af:03:f3:
42:00:56:19:42:75:1c:d2:25:4d:0b:f9:80:cf:aa:c1:46:45:
e3:fe:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 23:25:37 2024 by rpki-client on console-ams.rpki-client.org